Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LNVe8PvKVgjb8OuVIGRe_PduNbA.roa
File: LNVe8PvKVgjb8OuVIGRe_PduNbA.roa (raw, json)
Hash identifier: fzfPbnFFTjpNFbgIQfGG0+aqaFqkl7HeSTiIUV57meE=
Subject key identifier: 2C:D5:5E:F0:FB:CA:56:08:DB:F0:EB:95:20:64:5E:FC:F7:6E:35:B0
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019706F1220F7743654E4D49EEE7E2A04C6D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LNVe8PvKVgjb8OuVIGRe_PduNbA.roa
Signing time: Sun 25 May 2025 10:15:55 +0000
ROA not before: Sun 25 May 2025 10:15:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215365
IP address blocks: 5.231.253.0/24 maxlen: 24
77.90.15.0/24 maxlen: 24
77.90.60.0/24 maxlen: 24
89.144.61.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
2a02:2fc0:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 06:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:06:f1:22:0f:77:43:65:4e:4d:49:ee:e7:e2:a0:4c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 25 10:15:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cd55ef0fbca5608dbf0eb9520645efcf76e35b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:26:d0:13:a2:ae:1d:47:e4:c1:28:87:b4:ef:
aa:33:7d:1a:ad:a1:71:ce:dd:f1:cc:46:9d:ec:c3:
75:4b:eb:a8:c1:5d:89:6d:4a:33:da:8d:05:67:5f:
7b:40:13:4c:50:e1:67:f1:a9:fe:ed:0b:bc:44:8f:
50:3c:b4:56:c0:ec:c6:61:35:93:05:e0:4e:4c:68:
66:54:e2:ec:2f:0d:d7:bd:a0:f0:de:6e:7e:26:63:
cb:5d:85:18:58:39:c3:fa:29:94:70:2f:ee:25:8a:
00:22:4d:56:37:b7:9d:a5:e9:d7:52:56:0f:51:ad:
57:43:8d:27:53:6d:f0:02:3b:fc:9e:07:2a:67:6d:
5b:a9:26:cc:4d:2f:85:05:ac:6b:71:2a:3c:fb:7a:
81:d5:f9:20:35:39:62:a4:8a:63:8d:a5:13:fa:52:
68:dc:ff:86:cd:05:6a:af:63:56:41:9f:78:7b:9c:
be:79:d3:49:d4:c6:2f:6e:9d:fc:7f:e6:f3:98:80:
53:88:9c:4d:8e:ec:df:ea:87:c0:a6:90:c6:03:18:
d2:9a:ec:be:f7:af:04:36:d7:d2:1f:8f:58:73:f7:
32:22:7c:50:61:56:7c:29:91:70:f1:65:07:5a:d8:
43:74:b6:07:b7:28:55:5d:0f:ee:8f:45:d0:1d:2e:
a8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D5:5E:F0:FB:CA:56:08:DB:F0:EB:95:20:64:5E:FC:F7:6E:35:B0
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LNVe8PvKVgjb8OuVIGRe_PduNbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.253.0/24
77.90.15.0/24
77.90.60.0/24
89.144.61.0/24
94.249.148.0/24
IPv6:
2a02:2fc0:10::/48
Signature Algorithm: sha256WithRSAEncryption
b9:77:7d:f5:8b:9a:31:77:d0:a0:42:16:34:9d:5d:fe:a1:52:
08:f5:6a:ec:ff:fa:dd:3c:9b:b5:38:50:17:8e:5e:ee:f3:22:
74:7e:a9:7e:d2:b1:f1:4c:6e:52:98:a9:6d:e9:a0:eb:9b:4d:
17:1a:64:8c:ea:bd:27:1f:2a:dc:0c:b1:79:a3:ac:53:91:c3:
63:96:51:79:67:21:31:2c:00:c9:e2:cb:a8:11:31:6f:1c:f2:
7b:b0:eb:72:83:aa:cb:93:9c:c3:6b:30:cd:4b:7b:ca:bb:5e:
7e:9c:1e:d9:19:f7:d6:40:f4:dc:71:d4:1e:b8:6f:a7:63:3b:
93:60:b8:70:f3:7c:46:c6:2e:aa:83:71:ec:fd:4b:59:74:cd:
5b:09:17:e2:54:57:af:dc:b4:08:1b:d8:a8:6a:13:9b:cf:62:
2a:b9:0e:8a:f1:a3:5d:a4:43:c0:d4:79:d7:5f:44:f7:66:24:
dc:74:49:7f:4a:d7:11:9c:6e:52:1e:2c:6e:b3:24:e4:15:2d:
4e:37:16:56:9e:ae:b4:31:b2:63:25:60:91:bb:00:4e:d3:1b:
97:7b:e4:68:61:e1:9c:36:f8:02:48:a8:85:14:5a:90:24:94:
8a:32:b1:a8:7c:ee:87:b8:f9:7f:4d:4e:2c:cd:5c:98:4b:78:
26:7c:06:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:41:44 2025 by rpki-client