Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/LAyDLVrlWC7GYrIpkUltJFolhC0.roa
File: LAyDLVrlWC7GYrIpkUltJFolhC0.roa (raw, json)
Hash identifier: 5fqulNX0pe/944CBeE9O8m/kZ++wdZNRG9xqatGIqks=
Subject key identifier: 2C:0C:83:2D:5A:E5:58:2E:C6:62:B2:29:91:49:6D:24:5A:25:84:2D
Certificate issuer: /CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb
Certificate serial: 0194221FCEDFACF78DDD824D59865225C588
Authority key identifier: 55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/LAyDLVrlWC7GYrIpkUltJFolhC0.roa
Signing time: Wed 01 Jan 2025 13:48:17 +0000
ROA not before: Wed 01 Jan 2025 13:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213398
IP address blocks: 62.164.144.0/24 maxlen: 24
89.40.30.0/24 maxlen: 24
91.234.235.0/24 maxlen: 24
194.164.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ce:df:ac:f7:8d:dd:82:4d:59:86:52:25:c5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb
Validity
Not Before: Jan 1 13:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c0c832d5ae5582ec662b22991496d245a25842d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:99:e5:39:fc:fd:a9:8a:bd:d0:c9:5f:92:
c8:18:b3:a5:6f:a7:b1:e2:24:5b:e4:55:a6:1e:15:
e7:b3:d2:58:c2:8c:de:3d:97:7c:2d:ee:46:ac:88:
d1:46:cb:7f:fd:18:68:83:01:a6:01:97:3c:88:e4:
33:34:aa:78:e8:00:80:05:ed:38:fa:90:cb:3a:a7:
70:a3:6c:89:4d:0c:a2:ee:0f:52:4a:e9:8a:c4:36:
e3:b0:3b:66:11:cf:ba:c7:ba:0f:b0:e3:3e:ee:2f:
42:eb:e6:59:0a:df:4a:3b:cd:f8:d9:db:ed:47:22:
50:31:84:65:fd:ea:ce:e0:0b:d3:ac:1e:9b:b6:93:
ce:23:58:cd:2c:da:51:3e:e8:e9:30:0f:54:95:1f:
64:83:fe:f0:3f:7f:bf:37:0d:53:df:db:f4:42:e6:
14:91:4d:40:bc:34:45:c6:df:fc:27:98:1c:a2:8b:
16:41:a6:92:70:b2:47:26:3c:3a:2d:eb:8d:c3:0d:
77:d1:2a:f3:26:04:a0:62:32:a1:ae:f3:59:4a:32:
b8:cf:06:81:0c:fa:2e:63:0c:21:f2:7e:fc:c0:71:
b0:8f:94:f2:82:e8:ed:f3:39:27:9e:35:47:fc:1c:
3f:a1:75:f3:26:e0:4f:58:63:2d:6f:f9:b1:7b:8b:
5a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0C:83:2D:5A:E5:58:2E:C6:62:B2:29:91:49:6D:24:5A:25:84:2D
X509v3 Authority Key Identifier:
keyid:55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/LAyDLVrlWC7GYrIpkUltJFolhC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.144.0/24
89.40.30.0/24
91.234.235.0/24
194.164.224.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:67:ff:b3:fe:b1:4d:0b:c9:6f:de:58:79:16:0f:cd:5c:24:
6c:f4:a9:b6:b0:f6:34:f2:34:72:6f:e4:a5:ba:f6:f5:55:af:
d6:b3:9a:c7:ed:f4:28:54:80:17:a7:97:ae:81:d8:16:97:da:
b3:32:dd:59:42:6d:ff:33:74:a2:54:fa:da:b3:f6:95:31:f9:
7d:ad:40:5b:89:27:aa:2d:f0:ae:56:19:a6:5e:f0:70:24:ba:
7e:98:61:7b:73:76:33:6e:29:74:6a:c5:5f:49:b6:0c:66:e3:
0c:00:30:07:07:58:19:46:d0:d1:b7:af:79:26:8e:aa:57:0a:
a1:40:96:47:f3:1a:33:48:e1:a1:15:37:55:47:fb:e6:a2:43:
36:55:de:7b:b8:95:d6:3c:88:a8:5e:bf:41:9e:ce:cd:38:41:
85:e8:c7:a9:ea:84:2a:d9:ca:a3:08:fb:9b:ad:36:52:33:9e:
7a:01:a8:a5:6d:9f:1a:fc:a9:25:67:e9:a5:88:ca:5c:85:43:
99:ec:c2:61:49:ca:6e:70:56:33:a0:e1:ab:0b:32:94:a9:a8:
9f:97:87:b8:db:d8:da:52:bb:97:c3:fe:5a:1f:d5:84:05:3a:
f1:58:16:ec:a4:8a:64:30:6a:f4:71:46:38:ba:c7:86:35:67:
0a:58:11:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 20:45:02 2025 by rpki-client