Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0DtRdACb0QezwOk2UUbjdUE5yR4.roa
File: 0DtRdACb0QezwOk2UUbjdUE5yR4.roa (raw, json)
Hash identifier: /XvriIRkoKYjYwp/WVzA2tEH/ESI3SHjDC5JEgY68sg=
Subject key identifier: D0:3B:51:74:00:9B:D1:07:B3:C0:E9:36:51:46:E3:75:41:39:C9:1E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01968753AF0704BB36DBC9266EC96D2D171F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0DtRdACb0QezwOk2UUbjdUE5yR4.roa
Signing time: Wed 30 Apr 2025 15:32:10 +0000
ROA not before: Wed 30 Apr 2025 15:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214902
IP address blocks: 5.83.147.0/24 maxlen: 24
5.231.28.0/24 maxlen: 24
5.231.45.0/24 maxlen: 24
77.90.6.0/24 maxlen: 24
77.90.19.0/24 maxlen: 24
77.90.43.0/24 maxlen: 24
77.90.45.0/24 maxlen: 24
85.93.9.0/24 maxlen: 24
89.144.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:53:af:07:04:bb:36:db:c9:26:6e:c9:6d:2d:17:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 30 15:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d03b5174009bd107b3c0e9365146e3754139c91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f6:d9:b8:93:dc:e1:9e:08:e9:71:26:5b:83:
08:4b:fe:50:57:58:89:bc:96:46:ab:c9:be:e4:cb:
ee:75:e5:a6:f4:b7:9c:79:3d:4b:05:d4:48:b5:db:
63:24:df:ab:fb:c8:e0:44:33:a0:d0:b6:17:ab:e7:
d4:39:54:64:2e:d8:31:cc:9f:1a:62:ee:90:75:c1:
cc:22:c2:66:2c:61:34:4b:f8:94:69:f1:fa:5b:88:
c4:59:a1:4f:47:26:39:24:7b:81:ea:85:89:bf:58:
9d:24:fe:a8:3e:3f:c0:91:ba:b3:a1:e6:3d:d6:f5:
b6:a0:82:41:35:d0:b7:73:86:00:8c:77:08:6b:9e:
e1:08:44:b4:77:fa:74:e1:42:48:5e:58:20:c3:0f:
b4:bb:0d:a5:04:b4:4b:49:5f:da:35:24:13:19:6a:
60:94:ab:71:4e:6e:19:ef:03:3b:91:34:6a:70:f2:
55:34:0b:b7:45:39:d1:cd:7b:73:f1:11:4b:05:b0:
67:6f:06:b8:f0:56:0c:39:a4:98:7a:07:48:06:56:
bc:c1:8d:0e:2a:5d:59:06:55:f7:6c:a8:71:dd:d7:
e9:fc:6b:b6:36:7e:bb:53:fd:1c:05:c3:1c:13:ab:
8c:8a:12:6a:03:1e:25:03:8a:a5:f1:e4:47:c7:dd:
4b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3B:51:74:00:9B:D1:07:B3:C0:E9:36:51:46:E3:75:41:39:C9:1E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0DtRdACb0QezwOk2UUbjdUE5yR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.147.0/24
5.231.28.0/24
5.231.45.0/24
77.90.6.0/24
77.90.19.0/24
77.90.43.0/24
77.90.45.0/24
85.93.9.0/24
89.144.8.0/24
Signature Algorithm: sha256WithRSAEncryption
76:85:72:fd:dd:c0:17:df:20:0b:07:10:cb:b1:fa:17:28:58:
ce:6a:57:80:c4:af:5b:df:30:e7:76:c1:08:04:f9:8b:04:72:
49:78:63:53:12:03:13:be:99:3d:fe:fc:1e:b0:5f:8c:57:d1:
99:4f:9b:d5:3d:84:b0:b3:31:02:86:57:55:80:c2:87:92:40:
47:4d:38:e9:70:e7:0e:88:55:59:50:21:73:23:82:1e:fb:45:
f4:13:51:a9:8f:a2:6b:ff:f4:eb:ae:c7:32:4b:87:ab:bd:b0:
63:dd:5c:d5:7c:16:40:fa:80:0a:10:4f:03:07:cc:4a:b6:c4:
0c:b5:fc:66:cf:2a:21:46:e4:c4:81:52:59:84:83:4a:be:e4:
22:13:d0:fe:23:61:8e:6d:4b:5f:91:0e:07:a7:c3:aa:d4:d2:
89:cf:27:58:f9:44:cc:05:f5:8f:be:97:bc:30:a5:2f:b4:9c:
33:aa:1f:ba:b1:42:83:e5:79:ed:c3:01:fb:f8:85:b9:c1:5c:
b2:ff:7a:3b:0f:ec:a3:a8:dc:78:10:c5:8d:ca:28:a7:41:5e:
91:ae:24:0c:7a:3f:58:2e:3c:4d:41:7c:5f:73:6d:2c:28:46:
f7:93:f8:52:dc:a0:4b:ad:0c:52:bd:0b:dc:bf:1c:8d:a9:c2:
19:66:1a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:14:00 2025 by rpki-client