Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/m-lcsx8_GYaqbqhzBpdxya1zkS4.roa
File: m-lcsx8_GYaqbqhzBpdxya1zkS4.roa (raw, json)
Hash identifier: pN7Wu63YBque4WVgZwPaa9m/kwpOD5syMxKGwDLwefI=
Subject key identifier: 9B:E9:5C:B3:1F:3F:19:86:AA:6E:A8:73:06:97:71:C9:AD:73:91:2E
Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial: 0196546C1096C35BFB47AE8C88EAF5B0EBA4
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/m-lcsx8_GYaqbqhzBpdxya1zkS4.roa
Signing time: Sun 20 Apr 2025 18:18:10 +0000
ROA not before: Sun 20 Apr 2025 18:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 185.254.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:6c:10:96:c3:5b:fb:47:ae:8c:88:ea:f5:b0:eb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Validity
Not Before: Apr 20 18:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9be95cb31f3f1986aa6ea873069771c9ad73912e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:32:d9:d1:60:c9:4d:3d:a7:48:d3:8d:a0:f2:
2e:80:c6:dd:6a:58:97:56:be:ea:48:28:d9:c4:ff:
d6:62:53:93:62:de:cd:41:fd:66:63:b0:de:05:f4:
4d:75:1d:67:17:d1:49:03:7f:f7:3a:b4:fd:12:39:
07:fa:ae:39:8b:8a:fa:0e:28:f9:3c:a2:ba:85:11:
13:14:c0:e2:5a:eb:07:88:b1:7a:6c:13:3e:b8:70:
db:c7:dc:0d:ae:11:ff:91:8b:2a:fc:98:d3:55:5e:
17:8a:af:14:dd:9d:4a:65:e5:af:cf:85:d5:e0:64:
1c:fa:20:7e:bf:63:fa:ed:a8:39:6d:97:b6:9a:49:
6e:aa:1c:49:0c:1a:45:44:f1:2c:a5:19:c5:7f:3d:
bb:f3:0d:c6:e6:a8:ab:87:40:3a:f2:d1:83:1c:0d:
56:5e:5a:c3:06:2e:ed:93:c1:3f:40:a4:3f:96:5c:
16:61:d4:74:a3:82:e4:f3:57:82:c6:6b:66:df:13:
7b:f7:ad:80:6d:58:da:36:0f:f4:99:9b:e7:2a:5d:
08:4f:2d:b1:c2:8e:41:10:2a:04:71:7f:06:31:1b:
15:21:22:e8:fc:2d:93:a6:b6:a2:59:b8:21:3d:8b:
9b:7a:e9:5c:4f:56:2a:0e:c3:9e:55:84:87:1f:b0:
65:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E9:5C:B3:1F:3F:19:86:AA:6E:A8:73:06:97:71:C9:AD:73:91:2E
X509v3 Authority Key Identifier:
keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/m-lcsx8_GYaqbqhzBpdxya1zkS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.13.0/24
Signature Algorithm: sha256WithRSAEncryption
42:07:3f:8e:bb:4d:6a:71:ac:53:52:d0:77:f6:f5:b1:97:59:
69:34:97:09:b1:6c:df:51:9f:03:89:09:1b:38:2c:ba:3f:e5:
58:e6:64:37:2b:df:0c:ef:87:40:16:ac:f7:4a:cf:3b:aa:06:
f2:03:93:f1:f3:05:14:6e:4f:d1:ca:04:9b:11:d9:de:9c:fd:
61:f6:b5:4f:cf:3b:13:23:66:c0:5e:0c:ba:65:12:a8:2d:eb:
3e:21:44:a1:ba:3c:81:28:3f:b0:e8:73:43:23:5c:ba:af:a6:
05:fb:99:50:52:71:b7:3c:35:9c:d7:02:db:62:12:c8:c9:c1:
f3:b9:36:95:1f:ef:c7:96:1d:e4:08:af:08:dd:c8:00:74:bc:
58:d5:96:03:be:c4:d5:8a:b1:43:ec:c5:d4:95:9d:4d:d1:a1:
d9:3c:5d:35:ee:42:e7:88:b1:5e:8c:ae:32:18:58:2e:86:68:
f6:82:69:80:4a:29:f7:09:9b:29:f8:bf:8f:b3:db:cc:e9:18:
9f:ef:13:f4:f2:09:45:e6:5e:3e:33:c7:6b:d5:37:b6:c5:63:
a8:79:d0:e6:e1:02:ed:68:c4:d7:6c:2f:7a:dd:db:e8:d9:d2:
bc:23:0e:34:f6:a2:bf:34:bb:f0:f9:3d:f2:16:9f:48:99:22:
e7:84:c0:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZZUbBCWw1v7R66MiOr1sOukMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTRkOWU0MWVhNWUyZDE2MWI3YzRjZGIyZTQ3MDJjNGYy
NDhlMTQwHhcNMjUwNDIwMTgxODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmU5NWNiMzFmM2YxOTg2YWE2ZWE4NzMwNjk3NzFjOWFkNzM5MTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjLZ0WDJTT2nSNONoPIugMbdaliX
Vr7qSCjZxP/WYlOTYt7NQf1mY7DeBfRNdR1nF9FJA3/3OrT9EjkH+q45i4r6Dij5
PKK6hRETFMDiWusHiLF6bBM+uHDbx9wNrhH/kYsq/JjTVV4Xiq8U3Z1KZeWvz4XV
4GQc+iB+v2P67ag5bZe2mkluqhxJDBpFRPEspRnFfz278w3G5qirh0A68tGDHA1W
XlrDBi7tk8E/QKQ/llwWYdR0o4Lk81eCxmtm3xN7962AbVjaNg/0mZvnKl0ITy2x
wo5BECoEcX8GMRsVISLo/C2TpraiWbghPYubeulcT1YqDsOeVYSHH7BlYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJvpXLMfPxmGqm6ocwaXccmtc5EuMB8GA1UdIwQY
MBaAFO9U2eQepeLRYbfEzbLkcCxPJI4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzIt
ZmJjNmZjYjVlN2E2LzEvbS1sY3N4OF9HWWFxYnFoekJwZHh5YTF6a1M0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzItZmJjNmZjYjVlN2E2
LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf4NMA0G
CSqGSIb3DQEBCwUAA4IBAQBCBz+Ou01qcaxTUtB39vWxl1lpNJcJsWzfUZ8DiQkb
OCy6P+VY5mQ3K98M74dAFqz3Ss87qgbyA5Px8wUUbk/RygSbEdnenP1h9rVPzzsT
I2bAXgy6ZRKoLes+IUShujyBKD+w6HNDI1y6r6YF+5lQUnG3PDWc1wLbYhLIycHz
uTaVH+/Hlh3kCK8I3cgAdLxY1ZYDvsTVirFD7MXUlZ1N0aHZPF017kLniLFejK4y
GFguhmj2gmmASin3CZsp+L+Ps9vM6Rif7xP08glF5l4+M8dr1Te2xWOoedDm4QLt
aMTXbC963dvo2dK8Iw409qK/NLvw+T3yFp9ImSLnhMAg
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:38:56 2025 by rpki-client