Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/LVNoSuA7vvTmvNpxT00E4lAvcp4.roa
File: LVNoSuA7vvTmvNpxT00E4lAvcp4.roa (raw, json)
Hash identifier: pPgdCp65TG7QIX5Sq2MoRLP/ea4UDwFHNBTpNrAcJN4=
Subject key identifier: 2D:53:68:4A:E0:3B:BE:F4:E6:BC:DA:71:4F:4D:04:E2:50:2F:72:9E
Certificate issuer: /CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Certificate serial: 019421444F9AF3821A0D0CD8ABA5534B6ADA
Authority key identifier: E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/LVNoSuA7vvTmvNpxT00E4lAvcp4.roa
Signing time: Wed 01 Jan 2025 09:48:32 +0000
ROA not before: Wed 01 Jan 2025 09:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47961
IP address blocks: 91.207.34.0/24 maxlen: 24
91.207.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4f:9a:f3:82:1a:0d:0c:d8:ab:a5:53:4b:6a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Validity
Not Before: Jan 1 09:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d53684ae03bbef4e6bcda714f4d04e2502f729e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:09:a2:41:14:6e:87:4c:f5:ba:9f:d8:82:7e:
d3:f3:6d:20:3c:1d:d6:c2:d4:5a:b6:d5:8a:45:c0:
f1:67:42:87:be:24:0f:ce:03:d0:d9:4b:a6:41:21:
26:71:eb:e1:cb:9a:53:f9:09:df:07:e6:79:d9:b4:
99:e4:1d:8d:2d:e5:96:1f:80:14:06:91:63:89:c0:
af:60:06:dc:e8:4f:bf:86:d3:99:26:a7:08:59:c0:
61:0a:28:01:ec:a5:01:43:a4:0c:02:80:22:a9:23:
b7:df:58:bb:56:0b:ab:a1:00:eb:f8:f8:5c:fe:88:
ef:2c:6c:7c:10:1d:14:8f:c4:3b:e4:10:eb:2c:63:
76:e0:b6:e0:52:9d:a0:18:37:bb:91:a5:21:21:45:
da:19:be:54:28:83:e9:3b:23:49:d5:1b:a4:3d:21:
f1:98:f9:6d:02:d5:c0:8d:1b:f7:3e:79:4c:e0:9b:
30:77:96:f9:ff:e2:19:d3:04:d7:8c:07:1e:ea:a5:
04:04:30:78:a8:84:58:46:d4:d2:8a:92:7c:78:fb:
de:ef:2b:d1:7e:df:a8:50:c3:e3:ba:d4:1b:af:df:
a4:0d:69:a7:c5:84:11:67:e8:7b:d2:21:84:0e:d7:
55:08:2d:a9:ad:5c:4b:6f:16:41:ed:17:46:04:08:
13:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:53:68:4A:E0:3B:BE:F4:E6:BC:DA:71:4F:4D:04:E2:50:2F:72:9E
X509v3 Authority Key Identifier:
keyid:E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/LVNoSuA7vvTmvNpxT00E4lAvcp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.34.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:30:37:09:1a:85:b4:50:ee:3e:c2:39:52:b1:6d:89:56:d0:
c2:6b:0a:91:28:f3:e0:7b:b0:14:02:82:45:23:b0:7d:00:b6:
6e:db:cc:c0:df:80:f0:fc:40:09:c1:0d:8e:8a:1d:72:e2:e9:
62:8b:89:00:94:99:7f:18:69:7b:97:08:8e:0d:6c:a8:f8:a7:
51:02:a0:0d:27:3a:fb:98:98:19:45:31:d8:7c:dc:dd:2a:e2:
90:90:2b:ff:2a:cf:f9:43:2a:aa:0f:5e:1f:7d:aa:e8:af:47:
a2:95:82:14:a4:7a:d0:56:87:da:66:d9:4f:96:3d:8b:54:a0:
d6:c6:be:05:f2:05:91:81:5a:b6:4f:d9:ed:76:3a:f3:28:27:
23:1e:82:b9:d3:86:74:0c:d5:00:c2:d6:7c:78:b9:55:f7:eb:
43:b2:33:5b:3a:fb:4d:2e:06:b2:14:ad:4f:2f:42:db:86:0c:
89:84:10:4b:4c:ca:09:9d:c8:37:2e:2f:c1:b1:de:e6:08:85:
3f:ae:cd:95:c7:17:ef:89:99:01:51:73:b6:16:5f:cb:69:dd:
9c:30:e0:28:fe:57:c0:11:e2:e9:98:df:68:27:42:21:7e:15:
ab:c8:87:e7:83:a4:d9:37:01:d7:65:c3:19:a6:08:dd:fe:27:
bc:bb:e3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:26 2025 by rpki-client