Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hKIZ9N-Ji-_ZInjQp0DC6c2BnlQ.roa
File: hKIZ9N-Ji-_ZInjQp0DC6c2BnlQ.roa (raw, json)
Hash identifier: tzVJGdhLR15htz7GAl9b87CwmJXAgKO6Ov0FLv+92hk=
Subject key identifier: 84:A2:19:F4:DF:89:8B:EF:D9:22:78:D0:A7:40:C2:E9:CD:81:9E:54
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196A3D645D019D9534524F8ACAB42E48E86
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hKIZ9N-Ji-_ZInjQp0DC6c2BnlQ.roa
Signing time: Tue 06 May 2025 04:24:10 +0000
ROA not before: Tue 06 May 2025 04:24:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47263
IP address blocks: 5.231.47.0/24 maxlen: 24
77.90.37.0/24 maxlen: 24
94.103.164.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:d6:45:d0:19:d9:53:45:24:f8:ac:ab:42:e4:8e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 6 04:24:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84a219f4df898befd92278d0a740c2e9cd819e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:19:c9:eb:73:7a:4e:58:f0:9f:d2:90:01:96:
41:31:01:5f:54:e2:0d:ef:aa:e2:db:40:3f:a9:e8:
13:74:c3:e5:84:ad:0b:18:a6:52:ba:b1:77:72:c8:
ff:61:af:9d:03:1b:25:a2:52:22:33:4e:f7:b2:52:
d4:7b:d9:e8:9b:f9:a2:9e:92:12:29:b7:62:77:0b:
50:ed:91:be:46:48:2b:91:a4:bc:e2:5b:d9:09:17:
d0:32:d1:e2:c4:9a:ba:c7:36:17:b3:8f:9c:17:0b:
a3:fe:be:18:10:a0:a2:2f:52:30:7a:4f:49:6e:cb:
18:45:ef:46:87:50:3e:63:7c:ec:54:fa:5d:ad:d8:
a5:a5:84:8f:ee:17:1d:3d:2e:34:4a:ed:9c:15:a4:
87:cf:ec:d6:8d:dc:d3:b2:e8:dc:d6:21:00:0b:94:
d1:c1:40:9a:91:c4:cd:c4:21:2e:5b:05:42:29:f6:
c5:c1:08:9b:ea:78:a9:09:c5:8f:96:15:cf:5e:e7:
e3:2a:56:e8:a5:cd:dd:27:8a:55:e0:1c:a4:f2:cd:
66:5c:db:4e:f2:46:91:c3:41:a0:b8:6f:cd:77:2e:
b2:c0:c0:bd:43:ab:b4:b8:5e:a2:23:bc:8a:d8:f6:
e6:01:fa:0e:86:fd:31:58:b1:fb:f1:46:79:68:da:
16:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A2:19:F4:DF:89:8B:EF:D9:22:78:D0:A7:40:C2:E9:CD:81:9E:54
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hKIZ9N-Ji-_ZInjQp0DC6c2BnlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.47.0/24
77.90.37.0/24
94.103.164.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:1a:7b:f1:26:1b:6f:0d:36:da:a0:31:07:ab:f4:69:5f:67:
33:22:2c:53:16:ba:17:97:95:e1:39:d8:b5:9d:43:76:ca:68:
74:82:ff:25:96:99:31:35:76:fe:9f:52:dc:ec:97:a9:fa:45:
5d:3e:79:f2:39:1c:bf:b0:9e:e8:00:31:ea:f2:87:52:75:cb:
3f:30:95:68:8e:e5:b3:23:6b:7a:4d:a7:c3:16:40:14:fa:08:
2b:64:30:5d:71:33:51:49:63:8a:4f:12:58:b9:46:81:e5:89:
58:83:ed:14:08:ad:a3:44:b5:5a:d9:8d:f1:55:12:db:db:84:
c4:82:d3:55:67:3c:e5:b6:28:a6:35:1c:26:84:be:82:d8:38:
10:4c:a3:0c:0b:ef:b6:3f:0c:ae:6a:d8:a2:64:ed:c9:d2:7f:
4f:6d:10:86:51:6d:ba:84:4b:0a:d0:7e:1c:e1:a8:8c:ab:e7:
13:fb:61:e7:d5:75:38:85:7b:6e:d2:5e:51:1f:c7:4f:85:07:
b4:1e:52:95:9f:fe:60:69:0c:ab:b1:d1:49:67:48:f3:98:85:
ee:e3:2a:c0:9a:a7:5c:ba:52:3d:78:e6:db:db:c7:0b:b3:20:
31:38:ac:ff:16:f3:cc:4c:ee:18:64:33:56:eb:95:a4:29:fd:
43:a8:9d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:25:39 2025 by rpki-client