Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IJO1egZG32f9GdxVgfFYaVdMmOw.roa
File: IJO1egZG32f9GdxVgfFYaVdMmOw.roa (raw, json)
Hash identifier: DrBLgNUkfRB5Cvpw+/98L6/cTgMxmY+IJMcyxksIafc=
Subject key identifier: 20:93:B5:7A:06:46:DF:67:FD:19:DC:55:81:F1:58:69:57:4C:98:EC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01968A0E3B9391A642B998D5A5F9596BB793
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IJO1egZG32f9GdxVgfFYaVdMmOw.roa
Signing time: Thu 01 May 2025 04:15:10 +0000
ROA not before: Thu 01 May 2025 04:15:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209874
IP address blocks: 5.83.150.0/24 maxlen: 24
5.175.237.0/24 maxlen: 24
5.175.239.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
5.231.96.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
85.93.23.0/24 maxlen: 24
89.106.88.0/24 maxlen: 24
94.103.167.0/24 maxlen: 24
94.249.150.0/24 maxlen: 24
185.13.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:0e:3b:93:91:a6:42:b9:98:d5:a5:f9:59:6b:b7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 1 04:15:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2093b57a0646df67fd19dc5581f15869574c98ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:d8:e2:51:21:ab:19:00:48:4e:0c:94:73:
27:25:58:92:86:be:fb:bd:cc:98:62:2c:3e:2c:72:
98:e9:52:49:3c:06:10:2c:d1:1e:2e:7c:1d:ac:86:
97:c7:bc:06:31:14:43:5c:11:42:e8:18:49:5e:d6:
91:e8:70:4a:d7:3b:d8:67:3d:6d:4a:d4:79:08:cc:
08:02:93:ab:1b:97:ef:9b:ae:00:93:bd:7a:03:6e:
7f:04:6a:72:7b:e0:05:d8:b8:38:15:59:43:65:7c:
5e:ee:ca:28:f8:9b:a9:e7:d1:49:e7:63:27:61:f0:
e9:88:8e:ef:fa:ed:e3:23:82:22:fc:91:58:f3:82:
eb:7e:44:54:d6:06:14:3e:2a:28:41:e4:3b:fd:2d:
52:80:ce:2b:a8:2c:70:b9:a7:c0:c4:40:ca:57:d1:
dc:f1:82:22:e8:92:85:5b:f8:1b:fc:ce:89:0b:7c:
9a:1c:5e:80:3f:21:76:b4:ef:be:49:c7:14:d5:5f:
6b:1a:64:10:f4:e0:67:9a:69:ad:d9:c6:59:c2:be:
c1:40:4f:ce:08:3d:37:bb:69:e7:ab:22:01:95:49:
5f:55:17:86:ff:dc:b1:95:b2:ef:f0:b0:b8:f7:29:
d3:f1:39:67:1d:ac:a5:2d:91:2c:e5:57:6c:48:35:
c3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:93:B5:7A:06:46:DF:67:FD:19:DC:55:81:F1:58:69:57:4C:98:EC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IJO1egZG32f9GdxVgfFYaVdMmOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.175.237.0/24
5.175.239.0/24
5.231.25.0/24
5.231.82.0/24
5.231.96.0/24
77.90.39.0/24
85.93.23.0/24
89.106.88.0/24
94.103.167.0/24
94.249.150.0/24
185.13.156.0/24
Signature Algorithm: sha256WithRSAEncryption
00:9d:75:71:8e:84:5f:ac:0c:07:88:f0:03:6f:f7:ba:30:8e:
8a:7f:cc:66:1a:b4:60:ae:1c:80:8c:76:8f:eb:66:e8:e8:d6:
2e:0e:62:f1:e4:dd:6d:21:63:68:92:aa:e3:f9:d9:91:10:14:
8c:ee:35:fe:1a:a7:9f:3b:e9:4e:62:27:2e:c3:00:75:4a:02:
45:96:bd:45:2a:e2:eb:92:2e:46:c5:7a:f2:04:13:63:12:3d:
88:7d:c2:d5:e3:99:20:35:47:a1:67:55:48:6b:23:e2:9b:a3:
00:1b:e5:69:9c:e7:89:dc:0f:9f:9e:30:50:e5:73:67:a6:80:
11:c9:ca:9a:ed:70:b2:1b:45:7e:56:04:4a:df:9b:df:3f:59:
57:a8:4e:39:69:17:90:e9:70:87:7e:ea:39:79:19:98:2e:c4:
40:c8:8e:6f:ac:bf:61:c6:b2:e9:eb:34:fd:c5:5b:83:16:9a:
8b:4c:85:c4:3f:55:57:a3:19:e0:b3:99:dc:e8:72:3a:92:ae:
e1:b6:a5:83:66:ab:b9:0b:28:37:5f:e8:ef:13:b0:60:5e:b0:
97:69:6b:e6:53:55:28:4b:ed:e7:11:21:da:fd:70:85:d4:25:
86:65:f6:ee:30:b6:3a:db:0a:51:51:5f:b5:ec:d0:43:b1:d6:
ad:cc:2a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:38:55 2025 by rpki-client