Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cOXSS7N6gG3qiiswnyHC7q9ZJXE.roa
File: cOXSS7N6gG3qiiswnyHC7q9ZJXE.roa (raw, json)
Hash identifier: dUboygZFttstclCDpsFiFF8QB0NaYybRuJ0oW4/PWEM=
Subject key identifier: 70:E5:D2:4B:B3:7A:80:6D:EA:8A:2B:30:9F:21:C2:EE:AF:59:25:71
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01966A1CBE53B4174315D52B7A29B3692B4A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cOXSS7N6gG3qiiswnyHC7q9ZJXE.roa
Signing time: Thu 24 Apr 2025 23:23:10 +0000
ROA not before: Thu 24 Apr 2025 23:23:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208208
IP address blocks: 77.90.30.0/24 maxlen: 24
77.90.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6a:1c:be:53:b4:17:43:15:d5:2b:7a:29:b3:69:2b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 24 23:23:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70e5d24bb37a806dea8a2b309f21c2eeaf592571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:df:0c:ba:d4:4d:78:cb:ef:70:be:e0:b7:a7:
ed:ac:7a:32:90:4e:5b:62:ce:9f:2a:f5:57:6e:d2:
40:90:95:d5:61:61:c5:96:11:98:db:73:a7:58:26:
70:f5:2a:18:84:46:70:7b:09:72:c6:79:49:cd:7d:
2d:2c:05:f1:89:5e:55:85:66:51:ae:02:76:d3:1d:
f3:4d:41:7d:1f:31:50:72:e8:f7:30:7e:5d:30:61:
94:e1:cb:c7:c7:ab:c9:cb:fe:4f:13:0f:5f:09:06:
85:fe:e0:b2:ca:8a:9f:c2:ca:75:37:fb:68:3c:28:
73:e3:2b:a6:eb:35:f6:4d:f4:f6:e9:43:ed:03:c7:
c0:02:ae:f3:fb:c8:46:b8:d3:ab:2a:dc:9d:e0:65:
e5:0b:1e:c9:de:9f:b5:a1:60:ea:4c:68:75:ab:f2:
9b:b5:26:d9:22:f2:f9:2d:fc:5f:47:30:27:2d:3e:
3e:5a:04:51:dc:17:a3:28:b7:6a:ce:6f:95:cc:8f:
0c:5b:ab:de:f4:49:5a:d3:19:66:66:fb:31:77:0a:
63:10:cd:16:07:b3:24:f8:e4:e3:52:12:95:2d:c4:
47:79:15:1e:6e:c9:ee:c5:ab:e4:da:e9:62:2c:eb:
b4:d4:26:db:5b:04:c3:4f:76:47:32:e3:51:f8:89:
12:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E5:D2:4B:B3:7A:80:6D:EA:8A:2B:30:9F:21:C2:EE:AF:59:25:71
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cOXSS7N6gG3qiiswnyHC7q9ZJXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.30.0/24
77.90.46.0/24
Signature Algorithm: sha256WithRSAEncryption
99:14:d1:27:93:01:2b:af:bd:05:ae:b8:f8:b5:c0:ab:c4:61:
2a:63:59:8c:ab:8b:68:b8:e2:b9:25:1e:0e:04:35:e7:9d:72:
5b:cd:62:50:69:c3:0f:2d:96:92:12:cf:d8:54:de:97:4e:5c:
60:b9:55:db:62:6d:1b:37:20:67:b4:a2:e7:ee:9c:44:4e:49:
b0:c3:fa:6e:8a:79:99:73:cd:ec:0f:c4:1c:0b:16:2d:0d:93:
24:cf:c6:1d:74:9e:3e:da:41:25:d4:5d:4d:12:2f:63:0f:83:
fe:96:4e:86:75:3e:c5:76:75:7c:4d:0f:62:a0:81:ce:54:07:
ce:fb:54:64:bc:a4:19:b9:8e:e5:53:35:2f:f4:dd:32:c8:cc:
a5:c1:66:7f:b1:48:72:6a:ce:7a:65:3a:1b:5b:2e:92:74:2b:
f2:cc:4d:af:1b:39:63:48:f6:14:82:b6:3c:27:8c:78:26:33:
d6:26:42:cd:2b:6d:ce:a3:c3:11:59:0e:48:3e:bc:71:41:75:
c7:60:d2:f0:08:ed:5f:af:e3:a6:ac:51:25:bd:f4:6c:65:5d:
d2:9d:cf:db:0c:3b:12:02:ff:fd:f3:01:7b:84:6c:05:d9:9e:
11:b8:ae:6c:cf:4d:48:89:30:d6:46:45:ed:6c:36:b2:16:e8:
20:41:0d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:34:36 2025 by rpki-client