Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AFcE9NVqVLla7kV1kEF6zE5BWxM.roa
File: AFcE9NVqVLla7kV1kEF6zE5BWxM.roa (raw, json)
Hash identifier: LAP2OvG3UCmZRchC1D5DIWIosqx2B1V5A3r9dc6rWjY=
Subject key identifier: 00:57:04:F4:D5:6A:54:B9:5A:EE:45:75:90:41:7A:CC:4E:41:5B:13
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019665FE0DAAE22CFC006E38B52E2FFFAF32
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AFcE9NVqVLla7kV1kEF6zE5BWxM.roa
Signing time: Thu 24 Apr 2025 04:11:10 +0000
ROA not before: Thu 24 Apr 2025 04:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 5.83.153.0/24 maxlen: 24
77.90.33.0/24 maxlen: 24
77.90.49.0/24 maxlen: 24
85.93.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:65:fe:0d:aa:e2:2c:fc:00:6e:38:b5:2e:2f:ff:af:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 24 04:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=005704f4d56a54b95aee457590417acc4e415b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dc:fe:51:34:ce:35:5d:3d:c8:5b:7a:66:13:
30:2f:9d:9e:e7:98:0f:4f:38:8b:d9:ba:60:f1:fa:
89:ca:38:51:fd:91:8e:76:c1:ea:a7:f8:f1:15:ab:
bd:bc:bc:2e:ea:02:7e:06:bb:90:a8:67:df:14:64:
7f:fe:6c:92:98:eb:e2:e5:b9:cb:3d:9a:d9:38:0d:
c6:15:e5:38:35:be:ba:46:e9:b7:b5:3a:80:bf:62:
28:41:a2:a2:c3:6b:bb:ef:c8:b3:e3:fb:3b:1c:3e:
96:8b:4e:03:0b:86:05:bc:80:05:44:36:65:30:fd:
27:06:14:f8:88:fd:d4:73:84:12:8f:9c:c9:30:5f:
42:9c:46:6c:d2:f9:23:b3:d3:da:69:65:ab:e1:c5:
5a:bc:1d:68:4f:8e:e5:18:74:32:c7:4a:19:8c:e1:
18:63:17:7d:d0:6b:2c:04:a5:2c:c3:0f:72:6c:aa:
41:2e:6d:87:12:7a:03:ba:16:e4:96:61:3e:8b:1e:
10:54:4d:db:7e:e2:9c:fd:f9:17:b1:5c:e2:df:8d:
a3:c5:c7:3a:69:3d:b3:b8:fd:41:43:7c:09:eb:39:
d9:b5:2e:a2:a4:f7:10:e0:56:46:4b:10:02:13:9d:
ba:1d:26:a0:9f:e7:d4:fe:90:c8:67:ae:1c:07:5b:
96:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:57:04:F4:D5:6A:54:B9:5A:EE:45:75:90:41:7A:CC:4E:41:5B:13
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/AFcE9NVqVLla7kV1kEF6zE5BWxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.153.0/24
77.90.33.0/24
77.90.49.0/24
85.93.21.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:3f:03:2a:8b:0d:26:55:90:50:49:38:4c:57:c9:92:7f:38:
21:e2:e8:0e:a5:87:ec:70:1f:ce:2a:6b:8f:1d:50:00:a7:ff:
58:db:ce:88:cf:b2:00:0f:83:f6:81:9e:cf:be:45:c1:12:e1:
39:ea:3f:b1:a9:8d:1a:41:cd:84:24:72:c5:78:ab:71:4d:13:
7a:e7:8a:9a:ce:31:eb:a0:52:79:67:17:11:32:61:fa:32:c4:
ae:71:18:e8:81:5d:56:47:4e:86:7b:2f:59:10:77:00:0a:37:
37:dd:02:15:7d:66:3d:5d:2e:78:89:1f:f5:02:43:41:57:64:
fc:d5:d0:2b:5e:c4:7e:a4:3b:30:38:8f:56:c4:b2:55:07:2b:
13:f0:dd:d1:a3:30:56:97:49:43:01:58:b4:8b:37:35:4f:ce:
c3:53:e0:cf:18:62:df:38:13:9f:e6:17:67:58:fa:8f:43:48:
33:a0:6f:0b:29:e1:68:c4:0c:05:d8:26:22:25:af:a7:37:25:
93:60:a3:4a:32:cb:0d:30:c3:f7:5d:0a:a3:9d:ad:26:36:1f:
9b:4a:ba:23:e0:e2:0c:d5:9d:eb:7e:14:3d:ee:92:a7:dc:25:
4c:9a:5b:33:f0:5f:ed:ea:0f:f9:85:12:03:35:0f:2b:28:b5:
52:4a:f5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:08:17 2025 by rpki-client