Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/LLY-3_fqqLwuU8xUzGv0VRuhlCE.roa
File: LLY-3_fqqLwuU8xUzGv0VRuhlCE.roa (raw, json)
Hash identifier: 4AsxSz12Bf5YH8H2MmV75bbJxBPmSJ6rFj3b/HihsTo=
Subject key identifier: 2C:B6:3E:DF:F7:EA:A8:BC:2E:53:CC:54:CC:6B:F4:55:1B:A1:94:21
Certificate issuer: /CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
Certificate serial: 0194228D7622A3FD3A3DC3AEED539A49033F
Authority key identifier: B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/LLY-3_fqqLwuU8xUzGv0VRuhlCE.roa
Signing time: Wed 01 Jan 2025 15:48:03 +0000
ROA not before: Wed 01 Jan 2025 15:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31337
IP address blocks: 193.178.60.0/22 maxlen: 24
2001:67c:1898::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:76:22:a3:fd:3a:3d:c3:ae:ed:53:9a:49:03:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
Validity
Not Before: Jan 1 15:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cb63edff7eaa8bc2e53cc54cc6bf4551ba19421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:cf:76:92:dd:6a:ca:db:3b:9d:34:51:e7:
17:88:9f:ea:60:5d:94:65:2d:41:19:96:60:28:81:
e1:c9:21:1c:ba:fc:29:c2:e3:43:1c:c9:78:00:c9:
65:5e:97:40:b0:e0:be:fe:a9:bc:1a:bf:7a:23:95:
43:52:a7:f4:e0:10:2c:a4:39:60:50:26:67:ff:34:
fb:fd:9d:d9:a8:db:50:07:04:d6:a3:96:b8:27:91:
eb:a8:ad:56:22:e7:16:bd:e3:c8:5a:9c:44:1b:5e:
88:75:15:15:b0:26:f5:bd:84:38:93:60:6c:92:12:
2c:be:4a:a8:34:80:6c:12:f5:99:a5:4a:14:2d:af:
57:9b:86:99:92:dd:ed:55:9f:d7:30:20:d0:27:2c:
8a:24:82:d0:8e:03:ed:46:5a:ed:e6:80:99:03:17:
51:18:49:83:df:6e:18:ab:81:eb:e1:bd:4b:cb:dc:
68:f7:8f:87:23:fd:d1:0e:42:cf:5f:b9:d4:e7:e8:
cb:8c:e0:77:e8:7d:c7:60:a9:f6:e5:f6:99:10:1c:
8c:ae:2a:2c:15:e8:9b:61:7a:8c:85:a7:0d:75:3e:
b6:a5:22:3f:22:fe:0b:b5:1d:77:b2:c5:3e:91:8f:
57:a3:e6:c3:2b:b6:e8:75:e3:52:c4:b4:c2:ad:a3:
4f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B6:3E:DF:F7:EA:A8:BC:2E:53:CC:54:CC:6B:F4:55:1B:A1:94:21
X509v3 Authority Key Identifier:
keyid:B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/LLY-3_fqqLwuU8xUzGv0VRuhlCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.60.0/22
IPv6:
2001:67c:1898::/48
Signature Algorithm: sha256WithRSAEncryption
64:e1:cd:d7:a9:30:47:ca:bf:85:10:e5:93:86:1f:5d:95:f9:
d8:8b:bd:10:0e:0d:b1:74:51:4e:8f:29:f7:77:a1:1c:05:ec:
66:6b:c9:5c:5f:93:9d:5e:ff:f2:e0:ca:8c:a8:1b:fc:30:e2:
ed:b3:8a:62:32:04:ed:b3:f8:3f:61:ba:e1:b3:0f:e2:b7:0d:
fa:70:33:04:c7:98:f7:eb:de:40:4b:f0:12:f9:68:ea:6e:9e:
f8:cc:50:30:d9:44:f1:27:6d:96:55:84:9f:f8:f3:45:34:da:
44:ac:67:78:20:9c:e2:c1:7c:50:c7:53:b2:5d:c5:72:00:83:
84:6b:33:c6:1f:62:41:d0:3b:53:53:26:06:d3:67:d1:72:71:
78:43:1c:a9:bd:f4:eb:b6:ec:b6:ca:c9:db:57:d5:8f:e9:c8:
f0:a9:ec:7b:1f:9f:d2:ac:be:2b:dd:f7:60:fe:d1:f9:83:5d:
5e:68:f2:db:f2:b6:80:2c:4a:07:43:bd:2e:e5:1a:74:f9:fd:
a9:70:c5:87:51:53:1d:fa:b4:71:52:82:1b:b5:3c:36:1b:6f:
3f:77:3b:9e:db:81:12:b2:db:ee:c3:df:69:f8:0b:08:a0:ba:
37:c5:f7:4a:ce:e9:f7:2a:2f:70:d7:ff:8e:92:0d:75:58:d3:
e7:ad:ff:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:42:19 2025 by rpki-client