Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/lytgc_AFskoSPGUZi6kP67WVCLU.roa
File: lytgc_AFskoSPGUZi6kP67WVCLU.roa (raw, json)
Hash identifier: dnsTqSN8v/NE3YKVgJGW35iPeddPANKJv7U+UECznkc=
Subject key identifier: 97:2B:60:73:F0:05:B2:4A:12:3C:65:19:8B:A9:0F:EB:B5:95:08:B5
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 0194266B5BFBC6183C230E6E4C07247DC617
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/lytgc_AFskoSPGUZi6kP67WVCLU.roa
Signing time: Thu 02 Jan 2025 09:49:17 +0000
ROA not before: Thu 02 Jan 2025 09:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 268581
IP address blocks: 45.140.192.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:5b:fb:c6:18:3c:23:0e:6e:4c:07:24:7d:c6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Jan 2 09:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=972b6073f005b24a123c65198ba90febb59508b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:11:da:34:b2:8e:7d:4e:ce:f8:ed:f7:35:
cb:6f:b5:62:c4:e2:65:ca:39:13:5b:c1:c2:80:a1:
eb:a4:1a:00:85:ae:fd:bd:ae:bd:c5:98:7a:7d:d2:
cf:7b:e0:fc:08:ec:25:75:a8:27:80:b2:6d:33:f7:
a5:bc:79:7a:3c:6e:c7:e5:24:82:b0:93:04:c5:86:
bc:ee:58:a8:91:e5:9b:2e:91:32:d9:00:33:f6:41:
9c:74:dc:10:5b:af:4e:60:4c:11:c5:d6:5f:52:cd:
98:46:47:a6:64:76:32:a8:76:65:a4:e5:6e:32:9d:
26:c7:7d:21:d6:e6:9a:e6:d1:f9:d1:fe:72:ad:c5:
f8:92:8a:c2:c1:07:02:d1:30:e0:a7:ad:53:32:79:
9d:d0:a5:b5:ba:3f:75:9a:bf:ec:db:3e:af:30:4f:
35:a6:fa:e7:f9:cf:51:2f:1c:da:72:6a:e4:78:6f:
e1:14:58:c4:26:7d:4f:6d:20:a0:ab:73:3b:54:ae:
dd:69:56:27:b6:42:19:56:b8:0c:64:86:fe:82:41:
2f:24:95:08:1c:2e:49:10:6a:fb:22:29:02:91:6e:
5c:b0:ea:89:86:45:cf:99:4c:f0:41:04:21:64:e1:
cc:72:3b:a1:87:52:69:aa:73:a3:a9:f2:b7:a2:8d:
19:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2B:60:73:F0:05:B2:4A:12:3C:65:19:8B:A9:0F:EB:B5:95:08:B5
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/lytgc_AFskoSPGUZi6kP67WVCLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.192.0/23
Signature Algorithm: sha256WithRSAEncryption
05:e9:a1:09:d3:64:4d:65:98:57:cc:82:d4:9a:6f:ac:ee:fc:
77:bd:77:75:d0:b1:15:f7:59:7e:df:d3:8f:47:e6:ef:a5:a6:
58:a7:25:b1:ba:9b:7d:15:de:0d:de:51:a8:0e:fe:40:f1:e6:
0c:17:1e:be:96:99:19:b7:54:ca:99:3b:d2:c8:1a:62:58:bd:
3c:49:e0:8e:eb:ea:62:9a:1e:5a:24:a9:0d:d1:cc:ca:a1:9e:
5c:b9:d6:66:74:50:7b:a9:dd:38:a0:24:50:65:71:af:7d:22:
f6:dd:37:7c:7f:fe:43:a8:7d:78:2c:6a:76:bb:20:e5:2c:9b:
f5:d7:0b:ef:fc:bf:35:83:81:37:ee:b3:2c:62:8d:b6:91:38:
a9:5c:e1:70:c5:cd:c7:4c:62:a4:35:f4:ba:bc:0f:d5:d3:09:
34:fe:0c:89:d5:ea:16:fb:6e:26:89:54:0a:4f:79:fd:32:5b:
e9:7c:05:40:62:7f:4a:e0:27:3c:66:b8:5b:89:e7:6a:89:50:
66:09:d2:d0:22:d3:c7:20:a6:6d:a6:36:ad:6a:a8:d7:69:59:
d1:69:a1:2f:be:6c:b3:c5:a0:74:3f:e7:56:19:ef:37:8f:1f:
32:31:c7:0e:22:47:db:41:95:80:30:6f:21:54:d2:4d:0e:c2:
0d:34:04:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:09 2025 by rpki-client