Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PGIjEMEEdmw0HrgoAMpCxo06yP0.roa
File: PGIjEMEEdmw0HrgoAMpCxo06yP0.roa (raw, json)
Hash identifier: iAPm0rstfXLSLSCrJqTFeEniMUCV/iKS6GEJy9Degew=
Subject key identifier: 3C:62:23:10:C1:04:76:6C:34:1E:B8:28:00:CA:42:C6:8D:3A:C8:FD
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019762F256F521759134B347787EA58A6E99
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PGIjEMEEdmw0HrgoAMpCxo06yP0.roa
Signing time: Thu 12 Jun 2025 07:02:18 +0000
ROA not before: Thu 12 Jun 2025 07:02:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215039
IP address blocks: 77.90.5.0/24 maxlen: 24
77.90.14.0/24 maxlen: 24
77.90.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:f2:56:f5:21:75:91:34:b3:47:78:7e:a5:8a:6e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 12 07:02:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c622310c104766c341eb82800ca42c68d3ac8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:72:0c:7f:76:a6:bd:3b:1a:4c:bd:b7:db:f6:
7d:00:7f:bd:da:16:cc:de:37:20:05:67:95:f4:47:
91:05:63:24:b8:36:0e:81:8a:b6:80:cf:42:9b:5b:
81:f0:5b:69:d2:14:94:f7:ea:99:85:23:a2:e6:42:
16:69:15:e9:19:c7:72:9b:14:64:b9:84:db:7f:11:
3d:73:2d:9f:10:6e:9c:6f:ee:e7:59:33:e4:e3:bb:
fa:0a:6e:d9:c6:cb:8a:47:42:46:67:64:0e:25:cb:
3e:34:13:bc:51:4c:9a:29:b1:6b:ce:cb:2e:56:bf:
9d:34:70:9b:0c:a0:45:a6:5a:6e:c6:6a:45:29:71:
ed:a8:e3:20:f4:37:25:b6:a0:d1:ac:67:13:3c:da:
04:4e:df:31:ff:1c:b4:88:da:bc:56:23:da:8f:1d:
db:50:34:99:c1:8a:e7:0f:10:36:e2:4e:a5:ee:f4:
58:17:0d:22:2d:0f:8d:31:33:d5:73:d9:1b:43:07:
e6:40:52:e1:36:7c:f5:0f:7e:eb:30:13:7b:d1:12:
b9:77:2a:f6:a4:38:b7:4b:af:19:33:96:8c:3e:5b:
d4:eb:97:73:64:48:c1:cb:a7:b1:10:ac:b4:30:45:
9c:36:6b:c4:5f:b3:c1:43:ab:c1:c2:eb:ac:ef:97:
e5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:62:23:10:C1:04:76:6C:34:1E:B8:28:00:CA:42:C6:8D:3A:C8:FD
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PGIjEMEEdmw0HrgoAMpCxo06yP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.5.0/24
77.90.14.0/24
77.90.53.0/24
Signature Algorithm: sha256WithRSAEncryption
66:d1:9c:9f:e9:3f:7c:fe:2e:5e:c6:88:af:a3:2b:0f:30:a2:
f2:b8:63:a5:01:67:ce:0e:9f:d1:41:9c:5a:3e:be:36:a7:8e:
1d:46:fb:b7:3e:88:28:93:55:b1:26:92:b0:9c:a6:04:36:1d:
e3:ba:1d:cf:c8:44:db:bd:93:70:fb:8a:a5:b8:91:06:96:45:
8a:a9:b2:8b:f2:6f:25:da:25:a7:f1:d0:61:eb:98:df:06:4a:
1b:ed:14:52:7b:73:e5:5a:bb:85:5d:8c:d4:87:55:d8:9a:70:
20:94:5b:08:d5:6c:fe:63:51:c3:b3:d5:9a:fd:53:31:31:98:
fc:18:fd:2d:00:0d:87:26:c9:40:37:81:00:d2:63:3c:fa:da:
aa:2e:b6:cd:00:35:fe:23:f0:a2:a0:55:56:67:ee:92:61:45:
72:d9:a9:0d:72:e3:78:05:47:16:cc:7f:69:91:39:90:72:4b:
6f:6b:84:4b:2e:37:34:51:5f:a5:71:01:11:d8:76:8e:28:fa:
5d:b8:4d:1b:c0:13:1d:9d:c0:d1:27:49:3b:dd:0c:cc:16:fb:
6a:b9:ec:22:62:69:46:4b:68:6c:5d:aa:60:c8:1f:ff:fb:b8:
c9:96:10:f0:1a:cf:b2:0e:1d:c5:7f:73:8f:92:9e:dd:67:57:
d1:ce:57:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:27:21 2025 by rpki-client