Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/PXiVKqc-gzBW0DpV9A_yfa7v6KE.roa
File: PXiVKqc-gzBW0DpV9A_yfa7v6KE.roa (raw, json)
Hash identifier: L22rZjAObHC63x5DS7bDRlGFpJbFt5MxhJzGQ+tq5BE=
Subject key identifier: 3D:78:95:2A:A7:3E:83:30:56:D0:3A:55:F4:0F:F2:7D:AE:EF:E8:A1
Certificate issuer: /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Certificate serial: 0196B53E22B8868D1D168DBFD972C654BD32
Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/PXiVKqc-gzBW0DpV9A_yfa7v6KE.roa
Signing time: Fri 09 May 2025 13:31:10 +0000
ROA not before: Fri 09 May 2025 13:31:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20670
IP address blocks: 5.63.190.0/24 maxlen: 24
31.131.168.0/21 maxlen: 21
45.93.228.0/22 maxlen: 22
91.210.76.0/22 maxlen: 22
185.37.32.0/22 maxlen: 22
193.56.104.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:3e:22:b8:86:8d:1d:16:8d:bf:d9:72:c6:54:bd:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Validity
Not Before: May 9 13:31:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d78952aa73e833056d03a55f40ff27daeefe8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6b:8b:c9:23:d0:fc:46:dd:9c:cc:39:47:6b:
22:82:b2:8a:c6:f4:ea:30:5a:84:e4:bf:02:15:96:
64:b5:0b:51:d7:f7:3b:8d:74:fd:28:4f:e1:0c:cf:
4a:93:6f:a0:18:68:a3:c1:da:d9:3f:22:6e:53:a0:
0c:7d:36:a5:0f:37:3d:64:44:97:ce:5f:1c:45:24:
6e:c9:3e:cb:85:b7:19:0b:42:6c:ff:bb:03:72:f9:
6e:51:8d:76:c9:6a:52:79:a6:b7:ff:6a:19:af:19:
ab:0e:b1:d4:97:b4:3e:f7:16:e8:64:4e:20:e8:1f:
80:ad:a2:da:c1:fd:2c:70:4e:e3:d7:8e:97:df:6b:
23:80:e3:dd:ab:bd:c4:8e:86:c8:be:f4:78:7c:51:
7e:63:64:61:75:a7:03:a4:02:aa:7a:de:77:e6:b8:
93:39:54:6c:c7:32:1b:b5:a5:fc:11:8e:49:15:45:
f4:c7:52:b8:51:dd:48:90:8b:bb:66:8a:b0:71:0c:
64:b4:22:40:12:d3:eb:b2:f1:67:c8:0f:9d:82:0c:
13:94:11:89:49:dd:fb:64:dc:9e:fb:51:0e:e6:40:
01:23:86:8d:92:c9:d1:50:fc:56:34:dd:b0:5b:3c:
46:fa:e8:22:4c:5c:2a:5b:79:d1:5d:f3:3d:40:60:
03:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:78:95:2A:A7:3E:83:30:56:D0:3A:55:F4:0F:F2:7D:AE:EF:E8:A1
X509v3 Authority Key Identifier:
keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/PXiVKqc-gzBW0DpV9A_yfa7v6KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.190.0/24
31.131.168.0/21
45.93.228.0/22
91.210.76.0/22
185.37.32.0/22
193.56.104.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:19:e5:0e:f7:67:d5:2c:02:46:29:dd:78:4d:88:00:e5:21:
d9:fc:e0:39:47:7f:15:28:10:6f:3e:7f:98:3d:cc:d9:35:e2:
1a:3e:b4:5c:bb:3d:0d:e7:b1:e7:8f:8c:9a:27:a7:e2:39:6b:
35:9b:a9:a4:5e:43:ed:73:7c:a2:ff:21:77:2f:14:f9:2c:08:
d3:6e:27:e5:d0:2b:b7:05:c9:02:d5:df:7a:7e:80:4e:14:d4:
11:86:3c:55:f2:87:23:b0:1e:41:d2:71:28:b4:6a:7f:36:60:
86:a4:81:6b:68:77:d6:a9:31:0b:30:34:15:40:2a:10:64:09:
eb:52:e4:3e:d6:c5:03:50:2b:19:95:be:d2:98:dd:f5:18:2b:
08:14:29:a8:9e:d7:8a:17:f4:a9:37:e3:0d:4d:cc:00:c1:06:
11:59:84:00:47:bd:4a:69:64:ec:db:45:b2:36:98:1e:63:fc:
f8:f1:d1:05:0b:05:1e:d0:5b:c6:11:f0:5e:a4:2b:c6:1a:03:
d0:c0:16:ec:ad:3d:46:93:63:71:42:30:26:10:ab:b6:bd:47:
f3:2f:63:f2:8f:f0:56:0b:68:de:33:75:0c:6a:37:a7:1f:10:
62:d4:2d:41:d1:79:fb:aa:e2:b6:2c:dc:19:ec:d8:b6:7c:25:
a1:9c:c8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:42:51 2025 by rpki-client