Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/LIngfuzVyfR9OxY7cIj5Eo9UJhU.roa
File: LIngfuzVyfR9OxY7cIj5Eo9UJhU.roa (raw, json)
Hash identifier: I7nX5ROvffTNGyuWZrNpPLtJJE4OFOAqh82VhWKzBDY=
Subject key identifier: 2C:89:E0:7E:EC:D5:C9:F4:7D:3B:16:3B:70:88:F9:12:8F:54:26:15
Certificate issuer: /CN=a53d8fea2298ff3542a6dc0890b108c922183635
Certificate serial: 0194F9BAE55E19DD7E7A8A469719E9523127
Authority key identifier: A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/LIngfuzVyfR9OxY7cIj5Eo9UJhU.roa
Signing time: Wed 12 Feb 2025 10:36:02 +0000
ROA not before: Wed 12 Feb 2025 10:36:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56814
IP address blocks: 5.11.60.0/23 maxlen: 23
5.11.62.0/23 maxlen: 23
193.163.3.0/24 maxlen: 24
193.243.172.0/23 maxlen: 23
194.110.52.0/23 maxlen: 23
2a09:6880::/29 maxlen: 29
2a09:6880::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f9:ba:e5:5e:19:dd:7e:7a:8a:46:97:19:e9:52:31:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53d8fea2298ff3542a6dc0890b108c922183635
Validity
Not Before: Feb 12 10:36:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c89e07eecd5c9f47d3b163b7088f9128f542615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1c:a4:a2:04:ad:ba:c1:71:f1:ed:bb:10:92:
1d:1d:fe:f3:d6:d2:e2:90:fd:9f:f7:9e:43:ed:85:
f2:77:c7:03:95:da:c9:6d:ee:90:d4:a1:e7:c4:9d:
02:ed:4e:ae:47:63:6b:d7:ce:9a:6c:44:e1:88:7e:
11:d6:93:b0:6a:a8:0c:ff:36:f6:97:77:4e:57:27:
c7:cd:94:06:49:f5:0a:77:08:5d:29:61:39:71:14:
d7:b4:fa:3c:aa:a7:4d:97:33:5f:32:08:c7:a4:83:
18:c4:57:6d:24:f0:53:15:99:7f:62:47:59:b6:ae:
fa:7b:a9:58:cb:f8:81:fe:98:3a:b1:a2:42:6d:39:
88:49:54:64:04:ea:54:5c:30:b5:2f:16:81:06:14:
48:67:8f:71:3a:97:50:85:96:90:34:4c:49:ed:91:
db:9d:cb:33:36:7a:5f:54:1a:52:ef:a2:cd:5e:15:
fa:f8:8f:6e:e9:44:ef:6a:19:21:f0:7e:54:e8:c5:
05:4f:6e:b3:6a:fd:76:fc:e4:3e:8c:1a:5a:70:7a:
9b:4c:6a:a1:8a:fb:37:1d:9f:c1:3f:82:9c:dc:03:
0f:15:0e:2c:ce:79:67:dc:4f:b5:2f:4e:a8:93:1b:
3d:b5:d3:31:5b:ec:5f:ee:1b:1e:76:2c:01:7d:9f:
43:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:89:E0:7E:EC:D5:C9:F4:7D:3B:16:3B:70:88:F9:12:8F:54:26:15
X509v3 Authority Key Identifier:
keyid:A5:3D:8F:EA:22:98:FF:35:42:A6:DC:08:90:B1:08:C9:22:18:36:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pT2P6iKY_zVCptwIkLEIySIYNjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/LIngfuzVyfR9OxY7cIj5Eo9UJhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ba3ba3-951e-4280-af98-cd824278cce8/1/pT2P6iKY_zVCptwIkLEIySIYNjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.60.0/22
193.163.3.0/24
193.243.172.0/23
194.110.52.0/23
IPv6:
2a09:6880::/29
Signature Algorithm: sha256WithRSAEncryption
6b:c7:6f:f4:5e:af:a1:60:a1:cc:10:4b:f0:26:b9:75:d2:8e:
cc:49:63:31:a0:b4:1e:ba:03:22:08:76:bb:22:71:6c:6a:69:
5f:3d:85:48:68:90:ee:76:45:68:ea:0f:e1:b4:01:37:2a:ae:
b2:79:be:52:ef:74:12:dd:fd:f3:4c:55:34:c3:d2:f6:aa:36:
52:37:7a:4c:b9:b3:0c:5b:c3:92:98:38:47:38:ff:21:8b:24:
7c:8b:ef:9b:7b:10:d3:a2:68:a1:49:f3:d8:a0:a0:06:13:a4:
f0:07:4a:27:cd:65:80:e5:f9:d2:46:ed:45:18:07:7f:eb:7a:
74:14:5b:88:8e:22:84:e6:8c:e3:93:a1:89:db:35:69:b7:ad:
04:15:ee:29:80:93:f2:0a:cf:62:2b:4a:7c:31:66:af:77:18:
e3:20:9b:c3:84:c7:88:a6:0a:60:cf:d3:c1:f4:ca:25:9d:56:
5f:24:5e:7a:5a:06:b0:e5:8a:ed:7f:cd:63:51:18:af:90:bb:
46:1c:ec:ab:79:4b:0e:9a:5c:12:c9:ef:4e:23:b9:79:66:a5:
79:4e:5f:42:13:66:e4:63:46:80:9d:70:18:85:f2:84:4a:c9:
c8:f9:81:6e:b3:e3:26:ac:1d:b2:d6:c8:01:c4:26:75:f0:ff:
06:fc:83:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:36:04 2025 by rpki-client