Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/lvu-JvjbXEF_A88P3AVxK9ro79o.roa
File: lvu-JvjbXEF_A88P3AVxK9ro79o.roa (raw, json)
Hash identifier: 0s/Gju+rMxr3Xpuwq8caLrN7lhLdmbw4Qi63j5N3TJk=
Subject key identifier: 96:FB:BE:26:F8:DB:5C:41:7F:03:CF:0F:DC:05:71:2B:DA:E8:EF:DA
Certificate issuer: /CN=9ed0c4ff4a90073288b97674694142721f5b8435
Certificate serial: 019421B1BABC1CC72A994E894ACBA2B8227F
Authority key identifier: 9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/lvu-JvjbXEF_A88P3AVxK9ro79o.roa
Signing time: Wed 01 Jan 2025 11:48:03 +0000
ROA not before: Wed 01 Jan 2025 11:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207645
IP address blocks: 185.190.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ba:bc:1c:c7:2a:99:4e:89:4a:cb:a2:b8:22:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed0c4ff4a90073288b97674694142721f5b8435
Validity
Not Before: Jan 1 11:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96fbbe26f8db5c417f03cf0fdc05712bdae8efda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:57:37:27:cb:a6:e5:8a:a7:47:a9:f5:6c:12:
5c:b8:b7:66:35:97:4e:0e:c0:d8:01:4f:ba:4d:7d:
5f:41:e9:09:19:00:5e:57:f1:1f:65:69:64:94:e3:
df:77:76:8f:a8:ef:94:c4:ea:06:0e:69:16:59:61:
ed:de:5c:eb:21:6b:63:f2:9a:16:c1:7d:d1:4a:4b:
e0:20:22:4d:62:0b:69:72:8e:7a:df:46:0e:6a:94:
ca:39:3c:85:f9:99:c4:46:dd:88:27:1c:7c:69:a4:
e2:67:d7:29:40:61:a1:18:a4:ee:97:e6:e8:85:ab:
73:49:f5:2f:f0:37:9b:91:05:08:bb:ef:27:4b:37:
3a:f8:92:bc:c8:98:89:68:d0:8c:02:ba:bd:8b:c9:
32:88:4c:af:af:02:54:02:af:42:00:55:7c:5c:1a:
4d:0e:62:4a:c5:7f:db:e6:6e:94:3e:79:f4:1f:bd:
e0:4e:6f:ad:b7:8f:f0:ce:31:2d:ea:91:c5:69:ce:
0c:b4:37:77:43:5f:ff:f0:be:a4:1e:12:c8:2b:0f:
9b:04:fb:96:b3:56:87:38:e9:6e:68:cc:de:34:f7:
c2:ed:96:59:81:8b:4a:d3:51:0f:e5:f1:ec:97:95:
9c:28:2e:f3:8e:c8:b1:a4:ee:2f:f1:e2:cc:94:92:
02:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FB:BE:26:F8:DB:5C:41:7F:03:CF:0F:DC:05:71:2B:DA:E8:EF:DA
X509v3 Authority Key Identifier:
keyid:9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/lvu-JvjbXEF_A88P3AVxK9ro79o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.92.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:c5:cc:96:8f:75:d3:28:9d:a4:19:58:0e:5b:d4:1f:8d:3a:
b4:25:b0:46:4b:4f:96:ee:88:9e:60:4a:be:fa:dd:f3:b3:e7:
33:55:d1:37:84:c7:ff:27:f5:73:14:a6:33:09:6f:81:1a:e0:
14:23:d6:f0:6f:9d:78:d9:5e:47:bd:4a:dd:fa:16:2a:c7:2d:
e1:5e:4a:71:22:8d:32:f5:5f:0d:7c:7e:88:9c:33:f4:2b:b1:
ba:6c:7c:46:7d:ec:db:02:01:61:cf:d8:aa:1c:4b:93:69:cf:
b1:e7:e2:37:45:9c:93:6e:56:c7:cb:cd:fa:24:1f:54:17:35:
25:56:ea:fd:64:8d:f9:7c:b2:7d:0e:4c:37:c7:fd:7f:a5:e3:
8e:a1:eb:18:67:e6:b5:27:0b:53:d2:07:f1:d8:b6:22:b0:5b:
6c:b2:17:22:9c:fe:3e:bb:b7:4b:49:49:a5:b9:38:f8:1f:50:
8d:75:c4:b2:03:c1:7b:50:e1:0e:40:c9:37:76:b1:e6:1f:ac:
89:4d:2b:d0:02:9a:42:84:f3:7b:0a:d1:fe:b4:e9:a1:21:6d:
91:c1:51:f7:81:14:ab:56:f7:09:3b:4d:48:3f:5f:e9:67:6b:
19:58:f2:c9:b8:51:da:76:f5:e3:e4:76:ad:36:f4:e2:54:ea:
a1:34:79:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsbq8HMcqmU6JSsuiuCJ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZDBjNGZmNGE5MDA3MzI4OGI5NzY3NDY5NDE0MjcyMWY1
Yjg0MzUwHhcNMjUwMTAxMTE0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmZiYmUyNmY4ZGI1YzQxN2YwM2NmMGZkYzA1NzEyYmRhZThlZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1c3J8um5YqnR6n1bBJcuLdmNZdO
DsDYAU+6TX1fQekJGQBeV/EfZWlklOPfd3aPqO+UxOoGDmkWWWHt3lzrIWtj8poW
wX3RSkvgICJNYgtpco5630YOapTKOTyF+ZnERt2IJxx8aaTiZ9cpQGGhGKTul+bo
hatzSfUv8DebkQUIu+8nSzc6+JK8yJiJaNCMArq9i8kyiEyvrwJUAq9CAFV8XBpN
DmJKxX/b5m6UPnn0H73gTm+tt4/wzjEt6pHFac4MtDd3Q1//8L6kHhLIKw+bBPuW
s1aHOOluaMzeNPfC7ZZZgYtK01EP5fHsl5WcKC7zjsixpO4v8eLMlJIC7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJb7vib421xBfwPPD9wFcSva6O/aMB8GA1UdIwQY
MBaAFJ7QxP9KkAcyiLl2dGlBQnIfW4Q1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnRERV8wcVFCektJdVhaMGFVRkNjaDliaERVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85YTUwZjEtMjk0Yi00OGU0LWJlYWYt
MWRjYWQ4ZTY4ZWQ5LzEvbHZ1LUp2amJYRUZfQTg4UDNBVnhLOXJvNzlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi85YTUwZjEtMjk0Yi00OGU0LWJlYWYtMWRjYWQ4ZTY4ZWQ5
LzEvbnRERV8wcVFCektJdVhaMGFVRkNjaDliaERVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCub5cMA0G
CSqGSIb3DQEBCwUAA4IBAQChxcyWj3XTKJ2kGVgOW9QfjTq0JbBGS0+W7oieYEq+
+t3zs+czVdE3hMf/J/VzFKYzCW+BGuAUI9bwb5142V5HvUrd+hYqxy3hXkpxIo0y
9V8NfH6InDP0K7G6bHxGfezbAgFhz9iqHEuTac+x5+I3RZyTblbHy836JB9UFzUl
Vur9ZI35fLJ9Dkw3x/1/peOOoesYZ+a1JwtT0gfx2LYisFtsshcinP4+u7dLSUml
uTj4H1CNdcSyA8F7UOEOQMk3drHmH6yJTSvQAppChPN7CtH+tOmhIW2RwVH3gRSr
VvcJO01IP1/pZ2sZWPLJuFHadvXj5HatNvTiVOqhNHly
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:33:08 2025 by rpki-client