Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fZNj9CNRBa7i2m3mAeIGvlG7dR4.roa
File: fZNj9CNRBa7i2m3mAeIGvlG7dR4.roa (raw, json)
Hash identifier: Swrsu4iQzMJH354HmiLGRzF39BXTfvHXhOEaOOyMkME=
Subject key identifier: 7D:93:63:F4:23:51:05:AE:E2:DA:6D:E6:01:E2:06:BE:51:BB:75:1E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019588C16362484D3C44A04504CC5878DA90
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fZNj9CNRBa7i2m3mAeIGvlG7dR4.roa
Signing time: Wed 12 Mar 2025 05:08:49 +0000
ROA not before: Wed 12 Mar 2025 05:08:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
5.175.142.0/24 maxlen: 24
5.175.220.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
89.106.70.0/24 maxlen: 24
89.144.16.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.34.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
89.144.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:88:c1:63:62:48:4d:3c:44:a0:45:04:cc:58:78:da:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 12 05:08:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d9363f4235105aee2da6de601e206be51bb751e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:12:ed:98:8d:1c:8a:19:db:e7:d2:67:6c:89:
8f:4e:e4:90:fe:9e:95:72:29:e1:00:7a:21:6c:fa:
75:0e:59:c0:c7:05:84:d2:7e:10:5f:67:29:e4:d5:
f0:a1:b0:cd:53:52:75:09:bf:bf:7a:ff:99:8e:6c:
74:4b:ed:f0:84:1b:61:41:11:7a:ac:68:7c:76:bb:
85:09:06:3f:03:89:3a:81:de:70:27:16:a6:5a:05:
61:1f:49:c4:0b:c1:64:f9:26:02:c2:04:70:21:92:
6a:62:30:56:06:4c:db:31:8c:98:e7:e0:1b:8d:e0:
f6:f6:33:fc:2e:46:a7:94:ea:e4:bd:d6:34:fb:86:
da:1b:cc:79:f8:cf:29:45:82:66:49:cd:66:cf:23:
7d:09:b0:12:9d:6a:92:c5:e5:f8:83:8e:f0:aa:8a:
0d:9e:6a:94:a4:ef:1f:6f:80:bb:47:e2:b2:80:ce:
86:9d:6d:d1:be:b3:9a:66:1b:1d:4f:f9:9a:24:4a:
35:bb:be:2f:70:38:b2:f2:39:35:52:d1:a1:62:bb:
94:e2:08:b1:51:1e:ea:43:5f:61:f1:1e:25:b0:6b:
b1:dc:a8:c6:e3:93:be:9f:cf:0d:3a:09:7a:c4:66:
13:12:df:21:0b:de:da:41:53:fb:bd:bf:24:8e:19:
de:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:93:63:F4:23:51:05:AE:E2:DA:6D:E6:01:E2:06:BE:51:BB:75:1E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fZNj9CNRBa7i2m3mAeIGvlG7dR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.175.142.0/24
5.175.220.0/24
5.231.82.0/24
77.90.39.0/24
77.90.41.0/24
77.90.52.0/24
77.90.58.0/24
89.106.70.0/24
89.144.16.0/24
89.144.25.0/24
89.144.34.0/23
89.144.60.0/24
Signature Algorithm: sha256WithRSAEncryption
89:17:21:35:a2:37:c6:b2:17:7d:a1:cd:ff:25:33:2b:f5:0f:
de:da:f8:4c:15:7f:0a:b7:dd:ea:9c:b1:a3:26:f7:41:cb:20:
70:7c:c0:a8:6c:cd:f8:03:89:ff:c7:a5:0b:7b:f6:e2:cc:96:
5c:bb:f5:c9:d1:08:27:df:09:56:53:3e:88:d5:4e:91:4c:f5:
1e:0f:ee:be:b2:da:fe:6c:13:c0:39:ae:20:c5:e0:8c:c9:94:
60:d5:5c:94:5e:c6:a7:bd:5a:2c:8f:f6:14:e1:c9:3d:5b:e1:
c5:04:9f:9a:10:37:68:f5:fe:37:61:8d:32:70:09:6e:62:24:
b6:b4:bf:f6:c5:7c:5e:2b:67:d0:3e:16:c7:1a:8d:87:c3:20:
1f:8e:da:20:ca:3e:5a:c0:a8:09:e4:94:8d:4f:a7:0f:2c:0b:
c5:31:3d:ac:70:54:7c:b3:5d:d5:e8:73:d0:2a:98:77:eb:66:
34:08:bb:b9:10:79:00:9b:70:70:97:e9:af:48:d6:aa:b8:4e:
19:90:54:37:d9:1c:6d:0c:a0:23:98:9e:a8:af:4b:e3:2b:d2:
9d:13:0a:34:67:9e:71:bb:66:08:ce:dc:97:57:da:f5:df:db:
2c:cd:b4:76:f4:8d:48:6b:c3:87:53:4c:fe:67:e7:a6:38:f8:
12:99:81:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:09:11 2025 by rpki-client