Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/PGOS5SIphC-FWvemFFwRY3xBVwI.roa
File: PGOS5SIphC-FWvemFFwRY3xBVwI.roa (raw, json)
Hash identifier: jV3rKZBGXXQeEwY1KmfPsJnC/OLdRjA54LXz4swzlsI=
Subject key identifier: 3C:63:92:E5:22:29:84:2F:85:5A:F7:A6:14:5C:11:63:7C:41:57:02
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01945582ED82BA51DAD88E6A7F0A870B4F88
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/PGOS5SIphC-FWvemFFwRY3xBVwI.roa
Signing time: Sat 11 Jan 2025 13:17:11 +0000
ROA not before: Sat 11 Jan 2025 13:17:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202391
IP address blocks: 79.132.204.0/24 maxlen: 24
79.132.209.0/24 maxlen: 24
185.82.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:55:82:ed:82:ba:51:da:d8:8e:6a:7f:0a:87:0b:4f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 11 13:17:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c6392e52229842f855af7a6145c11637c415702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:66:57:3b:df:b6:02:b6:98:b8:73:74:b2:
57:8e:1b:fa:b0:d7:26:9e:8d:e1:bf:62:7a:62:0d:
b6:56:59:bc:97:b4:fc:ea:04:a2:62:1f:62:c6:68:
f8:b1:d2:44:b7:df:70:24:d7:78:98:35:36:90:fe:
01:3f:67:ea:f5:b8:fb:64:18:af:c0:0e:65:f7:b8:
ee:fd:53:93:62:52:c9:8a:1e:6b:b2:11:8b:93:74:
96:71:3f:ae:6c:b4:c8:48:6d:57:db:7d:cf:d4:f1:
95:3a:b3:19:fc:ea:0c:e1:78:d6:d7:92:53:07:0e:
eb:50:56:f5:87:e0:39:4c:2c:ed:02:73:4e:e1:59:
e4:07:76:64:d2:84:b6:41:4c:41:b9:36:13:e0:39:
d6:e0:03:77:42:f4:16:9b:79:6b:0f:77:dd:ea:ef:
97:8e:6c:e9:07:cd:b7:f9:6d:0b:b1:63:a1:fc:c5:
a2:62:7a:f5:58:98:26:34:57:37:87:99:d6:cc:64:
16:93:36:b2:8e:69:2e:1f:95:c1:c3:1f:49:1f:66:
b4:f7:ee:3c:e8:53:20:11:77:9f:7c:10:00:82:d9:
66:7f:17:e1:8e:e8:bc:51:81:4c:f3:14:f0:81:67:
b2:c2:2d:50:37:27:fe:0a:23:0c:1d:bf:3d:01:c2:
9b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:63:92:E5:22:29:84:2F:85:5A:F7:A6:14:5C:11:63:7C:41:57:02
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/PGOS5SIphC-FWvemFFwRY3xBVwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.204.0/24
79.132.209.0/24
185.82.166.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:40:16:e7:99:3a:4a:70:11:4e:6a:d4:9d:a4:8a:04:ae:db:
09:e3:f9:a7:1f:07:36:d3:57:04:fd:6a:b4:dc:2a:a1:c9:eb:
e4:8e:95:3b:01:19:28:fb:db:c4:84:4f:8d:d4:df:23:71:cd:
90:2b:6c:b5:8b:ab:bd:3b:3d:3a:9e:44:ba:af:59:30:ba:f0:
e1:35:e3:52:40:11:b4:a1:c7:71:d8:cc:c3:ec:6f:ca:2f:05:
9e:15:f4:1f:28:9f:9f:b5:2e:a5:60:1c:6f:0b:f1:ce:be:0c:
91:07:f4:fc:02:7f:14:2c:4e:20:2c:6d:6e:dd:67:43:5f:f6:
38:2a:2a:0f:d9:b6:57:1f:58:be:97:9d:01:9d:2f:8e:15:f2:
0c:f9:41:ab:3b:00:2e:a6:d5:53:87:5c:4f:3a:dd:13:91:90:
f2:86:74:01:6c:07:01:58:a3:a6:2b:70:b8:62:b4:52:7a:df:
28:74:23:18:94:30:7b:ed:e8:ff:c1:16:f8:e4:f6:4d:89:60:
27:f4:fe:89:cb:ee:da:c9:43:6f:b1:80:b1:63:e4:54:5e:fd:
29:ff:2b:0f:1d:05:3d:ea:c2:32:92:7c:d7:b7:ce:f8:29:45:
7c:bf:f9:8e:bb:ba:7a:eb:60:b9:dd:34:e0:4a:57:92:82:3a:
fc:4d:ee:ba
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZRVgu2CulHa2I5qfwqHC0+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi
YjgwZTEwHhcNMjUwMTExMTMxNzExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzYzOTJlNTIyMjk4NDJmODU1YWY3YTYxNDVjMTE2MzdjNDE1NzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuitmVzvftgK2mLhzdLJXjhv6sNcm
no3hv2J6Yg22Vlm8l7T86gSiYh9ixmj4sdJEt99wJNd4mDU2kP4BP2fq9bj7ZBiv
wA5l97ju/VOTYlLJih5rshGLk3SWcT+ubLTISG1X233P1PGVOrMZ/OoM4XjW15JT
Bw7rUFb1h+A5TCztAnNO4VnkB3Zk0oS2QUxBuTYT4DnW4AN3QvQWm3lrD3fd6u+X
jmzpB823+W0LsWOh/MWiYnr1WJgmNFc3h5nWzGQWkzayjmkuH5XBwx9JH2a09+48
6FMgEXeffBAAgtlmfxfhjui8UYFM8xTwgWeywi1QNyf+CiMMHb89AcKbzwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDxjkuUiKYQvhVr3phRcEWN8QVcCMB8GA1UdIwQY
MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt
Y2MyZmFmZTNhOGI0LzEvUEdPUzVTSXBoQy1GV3ZlbUZGd1JZM3hCVndJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0
LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAT4TMAwQA
T4TRAwQBuVKmMA0GCSqGSIb3DQEBCwUAA4IBAQA+QBbnmTpKcBFOatSdpIoErtsJ
4/mnHwc201cE/Wq03CqhyevkjpU7ARko+9vEhE+N1N8jcc2QK2y1i6u9Oz06nkS6
r1kwuvDhNeNSQBG0ocdx2MzD7G/KLwWeFfQfKJ+ftS6lYBxvC/HOvgyRB/T8An8U
LE4gLG1u3WdDX/Y4KioP2bZXH1i+l50BnS+OFfIM+UGrOwAuptVTh1xPOt0TkZDy
hnQBbAcBWKOmK3C4YrRSet8odCMYlDB77ej/wRb45PZNiWAn9P6Jy+7ayUNvsYCx
Y+RUXv0p/ysPHQU96sIyknzXt874KUV8v/mOu7p662C53TTgSleSgjr8Te66
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:41:44 2025 by rpki-client