Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rYghfCWyMHz2AmM3Od38WHi3bdY.roa
File: rYghfCWyMHz2AmM3Od38WHi3bdY.roa (raw, json)
Hash identifier: od59s+8AhzDCgY8lXOaf1lmWF5ZOtCvz3HoEJ3CTgpQ=
Subject key identifier: AD:88:21:7C:25:B2:30:7C:F6:02:63:37:39:DD:FC:58:78:B7:6D:D6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01966B22963CE0B827798C8F9A74667E8043
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rYghfCWyMHz2AmM3Od38WHi3bdY.roa
Signing time: Fri 25 Apr 2025 04:09:10 +0000
ROA not before: Fri 25 Apr 2025 04:09:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 5.83.145.0/24 maxlen: 24
77.90.3.0/24 maxlen: 24
77.90.28.0/24 maxlen: 24
89.106.92.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
89.144.30.0/24 maxlen: 24
89.144.31.0/24 maxlen: 24
89.144.33.0/24 maxlen: 24
89.144.42.0/24 maxlen: 24
89.144.43.0/24 maxlen: 24
89.144.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6b:22:96:3c:e0:b8:27:79:8c:8f:9a:74:66:7e:80:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 25 04:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad88217c25b2307cf602633739ddfc5878b76dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:67:67:99:d8:2e:17:8d:0c:ea:3b:12:18:
37:e0:63:3b:f3:79:3c:43:ad:9c:bd:ed:59:a6:6f:
9d:9d:59:60:70:4e:bd:8d:61:08:bb:50:d7:e0:e6:
02:b3:eb:db:a4:fd:4b:8c:72:04:ce:e7:58:c9:4d:
5a:b9:7b:e9:b2:52:49:66:74:1e:f4:34:39:0a:d7:
55:29:e1:1c:b7:75:68:4f:cd:80:c8:aa:3c:a4:68:
b0:e2:85:c7:57:47:76:61:0f:cb:52:e1:be:50:c0:
51:02:c1:7e:9e:e2:22:26:ae:ef:dd:40:35:3c:34:
fb:fa:e7:3b:20:17:0d:ba:45:77:61:8c:92:e1:ab:
ec:8b:ee:57:f8:86:31:6a:e5:56:20:a2:a9:9d:a0:
5a:ca:21:38:74:1d:19:ab:4e:87:3b:32:1a:97:4f:
37:f0:f4:a0:4e:65:ea:cb:94:30:38:6b:b1:4c:18:
75:8a:56:f3:5f:53:c8:05:03:b9:24:86:da:5f:c2:
d2:ca:da:e6:ed:73:dd:b3:aa:c9:97:25:5f:91:3f:
a7:94:31:91:9a:fb:b9:a6:5b:3f:d6:d6:e0:58:a3:
f0:e7:4b:8e:e7:80:3d:9c:05:a9:64:cd:61:d2:20:
a3:41:0f:c0:f3:73:34:d8:c9:fe:2b:c1:4f:c3:07:
34:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:88:21:7C:25:B2:30:7C:F6:02:63:37:39:DD:FC:58:78:B7:6D:D6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rYghfCWyMHz2AmM3Od38WHi3bdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.145.0/24
77.90.3.0/24
77.90.28.0/24
89.106.92.0/23
89.106.95.0/24
89.144.30.0/23
89.144.33.0/24
89.144.42.0-89.144.44.255
Signature Algorithm: sha256WithRSAEncryption
28:70:25:19:b9:cb:41:eb:be:7f:4a:4b:b0:d9:c5:59:b6:98:
d9:e0:8f:04:a9:2e:90:8b:4a:4c:46:9c:95:ee:cb:8a:d6:6a:
c4:33:6d:98:4c:da:2b:16:db:98:9b:7e:d7:b8:b4:34:9a:c4:
09:b4:55:9f:0d:1a:3a:72:dd:2b:b0:75:9d:63:8a:26:89:ba:
00:fc:27:ef:91:7a:ce:73:41:2e:86:a0:85:ca:12:a7:14:c6:
45:a4:99:d2:83:8a:fb:95:db:86:2f:87:c2:47:06:0d:2e:86:
a7:a5:74:10:ed:dc:0d:88:7a:b9:24:92:3d:ab:64:fe:7f:0f:
89:10:e2:32:2c:c2:33:aa:f8:43:6a:87:f3:d4:8c:a6:cb:89:
e4:db:68:96:69:db:09:de:f6:64:6c:ab:55:30:7f:1f:a2:e9:
26:2d:54:ed:e0:5d:f3:be:9b:2b:42:94:86:32:d1:a2:ec:01:
67:23:f1:a2:8d:bf:32:ad:5d:01:00:c1:d3:9a:4d:54:81:f7:
35:ef:2f:85:e2:0f:97:59:71:d1:33:85:0f:ca:3b:7b:99:31:
94:50:f1:2c:a4:8f:a4:e2:5e:ae:f8:64:60:fc:46:df:21:3a:
48:64:d1:ed:ca:b7:ac:3a:79:1b:6a:b8:2b:e1:46:97:0f:9d:
b2:53:3b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:15:56 2025 by rpki-client