Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/LHjpAYfuBzZ_RF5-cYOqcdg5XWY.roa
File: LHjpAYfuBzZ_RF5-cYOqcdg5XWY.roa (raw, json)
Hash identifier: clT3oz7MTlFepMOgAgzqz4bDDX9luSGN1e4LPGs/Uas=
Subject key identifier: 2C:78:E9:01:87:EE:07:36:7F:44:5E:7E:71:83:AA:71:D8:39:5D:66
Certificate issuer: /CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Certificate serial: 019421B1E705315EEA21B6E58953E579112E
Authority key identifier: 32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/LHjpAYfuBzZ_RF5-cYOqcdg5XWY.roa
Signing time: Wed 01 Jan 2025 11:48:14 +0000
ROA not before: Wed 01 Jan 2025 11:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206119
IP address blocks: 185.34.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e7:05:31:5e:ea:21:b6:e5:89:53:e5:79:11:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Validity
Not Before: Jan 1 11:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c78e90187ee07367f445e7e7183aa71d8395d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cf:5b:4b:e6:d6:ae:92:cd:a2:da:c5:44:f7:
f5:8c:2f:1f:23:10:92:60:f4:72:5f:0d:ed:b8:8d:
4a:86:7e:c8:df:82:07:2e:f9:91:3f:9f:a8:6f:ed:
38:e4:54:5d:4d:7c:9e:c2:91:4f:61:d8:f8:51:fe:
1a:64:49:65:d5:6f:5c:06:4b:6c:e3:b2:2e:e3:4a:
7a:6c:f4:59:b5:59:52:9a:bc:7e:f4:ee:ce:ec:c3:
13:6c:37:7e:56:0d:54:c5:82:86:48:3a:25:a7:4d:
20:44:d9:59:42:9e:37:62:b1:b0:51:73:52:85:47:
10:33:0c:57:d2:ee:7f:ed:bf:45:45:32:ca:07:28:
2b:9a:59:3b:66:77:25:8f:12:dc:e2:b7:e8:54:79:
b1:98:1d:87:7c:c2:ae:8f:b2:dd:5c:63:5c:ab:6b:
f4:f1:bd:50:a8:42:27:5a:e6:15:27:7a:5a:a4:71:
16:28:50:f2:72:d6:82:68:df:6b:26:45:46:75:37:
af:10:fe:34:10:5b:d3:e0:7c:04:a0:6b:71:63:a2:
d8:6d:8b:04:eb:fe:41:08:f9:b0:ef:5c:b5:09:ff:
c7:d6:fc:7e:0d:7e:7f:f2:25:55:21:09:36:ea:29:
58:35:60:e1:84:9d:e2:40:9d:cc:49:28:91:92:db:
b9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:78:E9:01:87:EE:07:36:7F:44:5E:7E:71:83:AA:71:D8:39:5D:66
X509v3 Authority Key Identifier:
keyid:32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/LHjpAYfuBzZ_RF5-cYOqcdg5XWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.131.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:0c:e5:2b:8b:e5:9a:91:90:e6:a0:4a:b0:df:17:2b:66:09:
ef:3e:87:bf:69:e1:3f:d9:d9:cc:b3:51:af:80:da:16:2b:3d:
2c:1e:ad:bb:93:81:99:09:7a:50:8d:ef:15:14:44:34:82:3b:
2f:bd:44:7f:cf:27:55:e8:60:c8:1d:83:69:97:8e:d2:20:a1:
ed:18:a2:87:72:e4:be:ae:b9:c6:f0:4f:30:b5:a3:ed:69:3c:
f0:95:b4:0f:6d:90:52:34:86:28:09:8b:8e:05:11:be:00:b1:
7e:e2:7b:19:8e:6f:61:31:26:25:0c:72:b8:c7:3b:fa:8d:98:
be:41:f3:42:b9:26:70:aa:73:16:07:2a:78:6b:29:21:d1:76:
5f:3a:d5:88:78:09:ac:dc:01:f5:24:46:89:4a:67:29:46:ba:
8d:49:e7:ed:d1:8f:d9:b3:d5:68:31:17:88:ad:a2:70:95:7a:
ed:10:57:99:42:f9:65:27:5f:3a:fa:eb:70:1a:81:db:12:bf:
a4:3b:3d:88:77:53:5c:2c:e5:f2:4f:52:ba:ab:24:21:45:90:
6c:85:ef:d7:66:54:64:8f:89:49:f7:3a:07:9c:88:89:cc:6a:
31:fe:a7:76:ba:1f:c9:a9:19:9d:60:38:ee:5d:8d:54:ca:08:
18:ec:86:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:33 2025 by rpki-client