Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/PjUaY1pzv5i9v0-_ltmeXMvn_E8.roa
File: PjUaY1pzv5i9v0-_ltmeXMvn_E8.roa (raw, json)
Hash identifier: 5l/O42PBuCxXNh+SRi17b1mrEEDB7Yq2rN5qBu2/Ncg=
Subject key identifier: 3E:35:1A:63:5A:73:BF:98:BD:BF:4F:BF:96:D9:9E:5C:CB:E7:FC:4F
Certificate issuer: /CN=a088b0547f09fe9224050d70a523da5bedbe0738
Certificate serial: 0196F06FF19D4A312D2EAD22D8BA84589287
Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/PjUaY1pzv5i9v0-_ltmeXMvn_E8.roa
Signing time: Wed 21 May 2025 01:23:10 +0000
ROA not before: Wed 21 May 2025 01:23:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215413
IP address blocks: 185.83.155.0/24 maxlen: 24
185.206.151.0/24 maxlen: 24
188.64.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f0:6f:f1:9d:4a:31:2d:2e:ad:22:d8:ba:84:58:92:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738
Validity
Not Before: May 21 01:23:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e351a635a73bf98bdbf4fbf96d99e5ccbe7fc4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:22:72:93:db:0f:14:69:21:b6:ee:24:3d:
6a:e9:a4:3e:1d:a0:c7:ae:67:26:af:e0:5a:8f:42:
c8:9e:7a:c0:00:a5:30:d4:b0:82:ad:21:63:4c:60:
4e:16:99:c3:2c:20:bc:0d:69:2d:b8:25:41:53:4e:
c8:3d:9e:c2:61:ec:20:19:ef:e8:8d:93:bf:55:ee:
a1:05:3b:28:3c:42:60:96:77:7e:13:d5:8b:df:45:
20:d2:03:1f:d7:a2:9d:87:a0:9b:e8:6e:2c:f0:ba:
e8:c1:76:a1:a4:9c:f1:dd:10:b7:6e:29:ba:78:c1:
02:29:6a:fd:e3:9c:7c:85:c8:24:47:4f:c5:ca:fd:
a0:19:94:c9:e3:75:b0:a6:06:34:fb:94:22:46:ff:
dd:38:db:4e:f3:58:3f:1b:a3:5b:7e:e2:7d:db:aa:
5f:ac:2b:86:df:be:7d:9a:48:17:a3:b9:8e:e7:94:
1a:44:7d:10:99:56:79:c7:83:a7:d8:52:3d:ae:3a:
16:8b:b9:3c:08:43:86:8f:cb:8c:00:1a:6d:b8:4e:
17:16:bb:58:67:94:8d:ce:1b:7b:d6:0e:b4:e0:d9:
81:0f:98:3d:24:74:8e:c7:a7:94:22:2f:1f:5b:a9:
e3:3a:51:9f:75:f5:d1:65:8f:cd:44:b7:12:db:5c:
11:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:35:1A:63:5A:73:BF:98:BD:BF:4F:BF:96:D9:9E:5C:CB:E7:FC:4F
X509v3 Authority Key Identifier:
keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/PjUaY1pzv5i9v0-_ltmeXMvn_E8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.155.0/24
185.206.151.0/24
188.64.33.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:83:b8:81:28:96:86:58:ed:3a:d6:98:91:5c:bd:dd:00:dd:
2d:63:98:f9:51:bc:be:0b:0d:e2:7a:81:e3:6f:14:ff:0f:fa:
83:8b:0a:fe:92:83:f7:3b:fe:04:a0:12:9f:11:bf:33:c4:00:
a0:9a:10:3a:fd:ed:16:ac:63:08:72:7b:f5:7f:69:03:df:90:
d3:42:8c:71:f0:1a:71:75:4e:06:dd:92:f0:45:63:f7:58:fe:
08:62:2e:9e:20:96:76:eb:e9:63:cd:62:45:18:04:18:ff:17:
53:9f:71:7e:b8:b7:55:a8:96:c6:26:53:48:e6:ba:f8:22:94:
be:9f:94:2b:df:bb:d9:2a:20:87:a7:91:9b:c7:5c:31:54:8c:
3d:24:e2:c0:a2:fa:90:e0:f5:2e:ef:95:51:d5:a0:bd:c6:e7:
23:7a:f8:f9:96:e0:d8:5f:c7:9b:26:04:e0:ab:f5:1b:28:95:
48:1d:d8:21:49:0e:11:84:ba:11:a1:ed:09:5d:91:65:24:22:
55:2f:03:9e:44:9e:63:6c:3b:b6:fe:ec:e6:d5:f2:5a:34:55:
5c:2b:8d:9f:1e:3c:8e:1e:0a:c4:24:5e:a7:aa:69:33:53:fe:
d9:75:52:3b:cc:26:06:98:b8:07:46:20:60:f9:ff:b9:b2:17:
b2:58:68:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 09:48:25 2025 by rpki-client