Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/PGTIMZFCRcgHZbeIysKJUSBpcm4.roa
File: PGTIMZFCRcgHZbeIysKJUSBpcm4.roa (raw, json)
Hash identifier: 9EUHJoofVlPT9EcX8y6exBIduW99qNNY4h4RSDhY9qA=
Subject key identifier: 3C:64:C8:31:91:42:45:C8:07:65:B7:88:CA:C2:89:51:20:69:72:6E
Certificate issuer: /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial: 0196C319CE711D32AB29915B1833331035DB
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/PGTIMZFCRcgHZbeIysKJUSBpcm4.roa
Signing time: Mon 12 May 2025 06:06:10 +0000
ROA not before: Mon 12 May 2025 06:06:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 89.184.0.0/21 maxlen: 24
89.184.30.0/24 maxlen: 24
89.184.31.0/24 maxlen: 24
193.222.251.0/24 maxlen: 24
193.223.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:19:ce:71:1d:32:ab:29:91:5b:18:33:33:10:35:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
Validity
Not Before: May 12 06:06:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c64c831914245c80765b788cac289512069726e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4b:f7:5b:4e:b2:72:e9:d8:3e:d2:57:7c:fb:
59:43:ac:ec:86:42:db:6b:41:de:5a:65:24:ef:ef:
af:11:70:a1:7f:92:e9:93:ac:af:59:ff:46:13:8c:
95:33:12:fd:96:12:48:1e:e8:b4:94:3b:72:f9:78:
9c:e0:64:71:57:59:19:07:bf:0c:10:38:21:e0:c7:
e3:2f:cc:43:95:16:ff:4e:7a:db:22:63:c6:ca:a5:
7a:4b:ff:3d:18:ce:04:cc:27:d1:b7:49:2e:57:54:
99:b4:1a:a0:9d:b0:44:17:5e:b8:70:b1:c1:01:49:
11:32:36:77:de:b0:41:73:93:2e:84:40:3f:50:ff:
3c:ac:bc:0b:5d:8d:64:fa:41:cd:bb:df:ce:5d:2d:
f7:47:ca:ae:31:80:bd:76:e7:00:05:2b:c4:7e:41:
1c:25:a2:ca:f2:da:0b:6e:cf:79:45:e9:ce:e0:74:
ad:cd:66:38:68:f7:d4:a7:fc:eb:f9:fc:fe:f1:09:
a2:d6:68:3e:14:82:dd:c8:a6:c2:0d:d4:78:c5:0a:
07:36:f7:09:1e:5b:3f:ff:52:87:36:4f:99:a5:f5:
cf:fa:dd:44:44:32:c1:1a:d5:f7:1c:52:02:b6:7f:
45:99:4f:c8:72:29:4c:56:e1:c7:7f:b6:56:cd:fd:
61:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:64:C8:31:91:42:45:C8:07:65:B7:88:CA:C2:89:51:20:69:72:6E
X509v3 Authority Key Identifier:
keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/PGTIMZFCRcgHZbeIysKJUSBpcm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.184.0.0/21
89.184.30.0/23
193.222.251.0/24
193.223.69.0/24
Signature Algorithm: sha256WithRSAEncryption
23:72:e6:51:53:56:98:f1:f7:fe:2a:5d:60:a8:77:14:e6:c5:
ec:f1:0d:0c:27:41:5f:9b:d0:e5:1d:42:85:ca:d9:56:3c:d0:
63:da:1e:c0:76:b4:3e:00:2a:ee:bf:70:e5:53:60:21:0c:4c:
8b:c2:56:16:33:b1:79:98:e7:61:73:a7:2e:3d:d5:4c:d8:28:
2c:3b:f4:c4:71:e5:59:6d:5a:dd:f2:eb:fe:3a:95:37:00:fb:
33:35:bb:11:a1:e6:9d:16:35:a3:a9:40:86:f7:55:74:26:1b:
2b:53:d1:26:5f:49:19:f6:b6:fc:14:3f:19:72:0b:18:b3:c8:
d1:bc:fc:00:61:26:eb:4a:6e:6f:18:2d:b3:18:e8:54:b6:4c:
57:1d:a2:b0:ab:5a:66:31:21:1d:f2:1a:d8:b7:d3:dc:ff:aa:
76:2a:91:5b:a8:33:3d:54:7a:d7:0d:5d:c7:33:2e:f7:19:b7:
3a:a4:71:c4:96:e0:a6:ea:26:38:72:b4:21:b9:63:47:3d:69:
dd:dd:0b:34:ba:e5:d6:80:d1:a7:20:6d:0a:ae:a6:2e:21:a5:
c0:7d:2f:4b:f7:02:df:eb:11:68:6c:3b:e1:b2:d5:fd:52:ce:
f6:ae:ce:5f:d9:5a:0f:7b:d5:56:73:f4:7b:ee:d5:e9:4e:fe:
06:98:75:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 15:00:19 2025 by rpki-client