Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/clbyxMT3OAMHpBnqclB7l_v5JOg.roa
File: clbyxMT3OAMHpBnqclB7l_v5JOg.roa (raw, json)
Hash identifier: 54VjjMPAoIOOXsPRwXrh30jfaWDGLoT2Yasxi6Wmk7o=
Subject key identifier: 72:56:F2:C4:C4:F7:38:03:07:A4:19:EA:72:50:7B:97:FB:F9:24:E8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196AE39E0B20AEBFB4C197139FD29E0EBA8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/clbyxMT3OAMHpBnqclB7l_v5JOg.roa
Signing time: Thu 08 May 2025 04:49:10 +0000
ROA not before: Thu 08 May 2025 04:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213495
IP address blocks: 77.90.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:39:e0:b2:0a:eb:fb:4c:19:71:39:fd:29:e0:eb:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 8 04:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7256f2c4c4f7380307a419ea72507b97fbf924e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:06:20:ee:d4:b7:fa:d0:f5:03:33:91:1e:
74:f4:49:c7:b3:00:34:b1:98:61:3f:ad:ca:7d:0c:
09:1c:2f:8e:1f:9d:5c:88:21:fd:77:5b:8d:41:79:
b0:75:49:62:f4:2e:76:a9:c2:40:6c:85:91:15:65:
d2:4a:b2:0e:04:e6:05:70:e1:22:e5:39:22:1a:d8:
6e:ed:0f:b9:b5:27:6b:7f:8a:f5:34:4f:eb:54:b4:
a1:fe:33:e0:be:ee:1e:b8:b9:14:ef:1e:e6:6c:40:
62:e8:6e:8f:8b:dc:d8:f0:9f:ca:f2:0b:0c:ec:ad:
c4:7d:97:fa:97:b0:dc:fa:9c:d7:15:86:64:55:43:
2a:6d:7b:8a:e4:33:bd:03:72:fa:27:97:80:0c:aa:
9c:07:9d:7b:7d:4d:43:e3:ea:65:d0:52:22:ec:1a:
6d:bd:ec:91:67:da:b0:3d:91:c4:39:ba:28:bc:75:
44:dd:4a:a9:a8:86:1d:b3:25:f9:bb:96:f8:78:9a:
a6:76:f6:c0:e7:ca:69:16:39:e7:95:00:01:ff:95:
76:53:2f:c1:4b:71:45:58:bc:76:c6:c4:4c:5a:3e:
9d:40:a6:4d:fc:1a:68:86:df:38:49:20:10:1a:95:
4c:de:b6:2c:c5:c1:9d:59:3d:40:0d:13:78:95:5d:
b2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:56:F2:C4:C4:F7:38:03:07:A4:19:EA:72:50:7B:97:FB:F9:24:E8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/clbyxMT3OAMHpBnqclB7l_v5JOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.40.0/24
Signature Algorithm: sha256WithRSAEncryption
02:23:75:2e:26:f0:6d:ec:0e:fd:4c:39:3a:eb:18:a6:27:eb:
9e:62:b8:ff:c0:04:03:0c:08:80:ff:62:dc:36:32:90:30:cb:
2b:42:f5:d3:c4:38:58:31:57:43:df:0c:b0:b0:1e:9c:ab:39:
a7:45:fd:91:6d:c7:2a:84:ed:8d:3b:c3:09:f8:79:d4:ae:00:
22:98:5d:c1:8e:ab:b3:87:55:60:98:97:f6:b3:0e:0c:58:c2:
f6:5b:02:6e:61:5a:01:ae:67:da:06:b7:cb:75:a2:0c:db:75:
6d:2b:d3:27:e9:22:32:03:9c:95:18:78:05:16:b8:d3:52:eb:
75:ad:83:c0:f3:68:60:ce:0d:37:bc:b0:ad:7b:1c:1b:9e:b9:
17:89:44:16:65:b1:37:12:2b:3d:52:d2:8f:d0:4d:30:72:6f:
6d:44:09:0b:82:5b:1b:ff:a1:37:80:ed:02:f0:16:1a:b9:01:
9d:37:26:48:06:c3:20:88:ee:bf:ee:28:63:95:78:34:c5:5b:
44:96:99:77:87:ba:75:fe:ca:7e:90:d6:97:e6:85:ed:c5:dd:
13:70:5b:39:40:51:4b:16:01:31:4a:3f:e4:18:42:5b:9f:d6:
3a:a4:bd:34:27:2b:53:ab:39:f7:37:e2:6c:85:65:a1:ae:b7:
e2:d8:d3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:13:20 2025 by rpki-client