Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/LRROMH8PWkT6bvGRkMnS0JWxYn4.roa
File: LRROMH8PWkT6bvGRkMnS0JWxYn4.roa (raw, json)
Hash identifier: GIDYrP6C060YCYEpIBANWaiaIMglvY/1aJs51j6+Nek=
Subject key identifier: 2D:14:4E:30:7F:0F:5A:44:FA:6E:F1:91:90:C9:D2:D0:95:B1:62:7E
Certificate issuer: /CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Certificate serial: 0194266BD2F4C7E38722093D4CE5AE8EE06B
Authority key identifier: 50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/LRROMH8PWkT6bvGRkMnS0JWxYn4.roa
Signing time: Thu 02 Jan 2025 09:49:48 +0000
ROA not before: Thu 02 Jan 2025 09:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50401
IP address blocks: 91.222.112.0/22 maxlen: 22
91.242.192.0/23 maxlen: 23
91.242.192.0/24 maxlen: 24
91.242.193.0/24 maxlen: 24
91.242.194.0/23 maxlen: 23
91.242.194.0/24 maxlen: 24
91.242.195.0/24 maxlen: 24
91.242.196.0/23 maxlen: 23
91.242.196.0/24 maxlen: 24
91.242.197.0/24 maxlen: 24
91.242.198.0/23 maxlen: 23
91.242.198.0/24 maxlen: 24
91.242.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d2:f4:c7:e3:87:22:09:3d:4c:e5:ae:8e:e0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Validity
Not Before: Jan 2 09:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d144e307f0f5a44fa6ef19190c9d2d095b1627e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1f:86:5f:f6:78:bf:39:43:bc:f4:e2:33:69:
0d:78:8b:91:82:fe:e5:d9:ab:a3:a3:dd:1c:08:ce:
c3:c6:4e:9c:23:5c:81:2c:a6:82:aa:9e:6a:f6:7b:
18:f8:68:8c:3f:c8:5d:27:fb:9a:b1:54:8e:e9:99:
00:c5:89:f9:a1:5e:b0:03:b9:76:3b:20:4c:0d:aa:
11:5a:64:1e:71:67:a2:c8:dd:4a:08:43:bb:b3:e6:
33:74:93:99:5e:4e:c6:08:bb:a1:ae:81:7b:27:10:
5a:b9:e7:54:1b:ca:00:1d:4a:af:83:e4:8f:fa:09:
57:d6:64:1a:1f:fe:08:77:e0:55:e3:d2:34:64:ff:
53:9e:2a:28:d4:1e:87:27:f9:c6:32:47:df:dd:5d:
69:bf:58:0e:65:74:b5:74:fe:ec:cf:26:af:7a:60:
9f:8a:07:ab:d2:d5:c6:18:28:4e:33:a8:6b:2a:04:
d7:05:cd:87:05:41:d1:02:d6:c9:83:2c:65:2e:b9:
a5:b3:9b:ae:9b:d6:71:cb:59:cf:96:84:2e:65:4b:
bc:0c:0f:78:ee:0b:5d:57:f6:cf:f5:e8:49:53:a4:
fe:81:70:ac:91:46:94:5d:a3:53:54:e2:b7:be:c2:
d0:6f:07:4a:9d:4a:db:20:87:7c:f7:ba:8b:fb:10:
92:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:14:4E:30:7F:0F:5A:44:FA:6E:F1:91:90:C9:D2:D0:95:B1:62:7E
X509v3 Authority Key Identifier:
keyid:50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/LRROMH8PWkT6bvGRkMnS0JWxYn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.112.0/22
91.242.192.0/21
Signature Algorithm: sha256WithRSAEncryption
16:11:08:23:e5:7b:df:0a:11:79:f1:f5:4e:3f:70:8d:a1:8f:
79:78:7d:f2:4d:a6:83:86:2a:5a:a8:d2:37:7a:e8:0d:02:1f:
30:ea:84:97:d8:b0:52:6e:dd:e0:a9:cd:7d:5f:80:d3:b4:71:
98:7d:8f:04:74:3e:6e:ad:24:3c:51:11:f8:ba:7b:c4:8d:01:
8e:2f:35:fb:de:88:f9:68:3d:77:01:99:27:a2:0d:20:a9:7c:
71:e2:36:30:fc:bd:1e:d2:b4:37:3e:52:45:31:74:b9:53:54:
10:90:3f:e5:79:a5:8e:ae:f8:a5:8c:65:3a:00:23:8e:f9:00:
10:7a:ae:86:1e:b8:27:cd:98:00:69:fc:c4:ea:43:50:27:0e:
0f:17:50:cf:0d:0f:7b:ec:bc:40:21:57:ae:56:b0:e8:37:dc:
70:ce:73:84:44:60:9b:45:12:71:3b:7a:48:d6:7e:c2:bf:12:
6d:69:71:30:e5:df:78:50:3a:4d:be:27:8d:b9:8c:e7:6d:42:
1e:21:20:a3:5a:2e:e1:ca:38:f8:b9:30:fa:48:74:e0:fa:b7:
58:ed:ce:9c:6a:b8:9a:45:79:30:06:38:f7:72:75:50:88:10:
5f:4c:d4:d1:98:a8:25:9e:31:0f:3d:bb:46:79:e7:32:29:bc:
e0:68:ad:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:00 2025 by rpki-client