Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/R8d6IxYPK5W2Ju5VwnmFMJjuDNM.roa
File: R8d6IxYPK5W2Ju5VwnmFMJjuDNM.roa (raw, json)
Hash identifier: X9LWCSZX8Hnn1xXJ4yaFsIkJYU9ibUpKWDFsu9ABhu8=
Subject key identifier: 47:C7:7A:23:16:0F:2B:95:B6:26:EE:55:C2:79:85:30:98:EE:0C:D3
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01983D4E67EE0128BF40CFD2C4C36CAFFDA5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/R8d6IxYPK5W2Ju5VwnmFMJjuDNM.roa
Signing time: Thu 24 Jul 2025 16:40:05 +0000
ROA not before: Thu 24 Jul 2025 16:40:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215590
IP address blocks: 5.231.207.0/24 maxlen: 24
5.231.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:4e:67:ee:01:28:bf:40:cf:d2:c4:c3:6c:af:fd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 24 16:40:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47c77a23160f2b95b626ee55c279853098ee0cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:48:a2:7d:2e:b4:78:cf:41:fb:bd:49:f0:23:
8b:ee:29:3b:68:f3:bd:82:e4:8f:b9:ca:5e:3e:57:
27:36:b4:29:66:cc:9f:c6:98:64:f0:be:c0:45:9e:
98:c8:a0:cc:f3:3e:02:9f:6c:c7:b9:ea:0b:a0:71:
67:46:8f:ae:b1:f9:d5:50:da:b2:61:73:a0:1d:25:
eb:18:18:f5:41:2f:fb:4e:47:d5:d6:bf:dc:54:8d:
37:fa:71:d5:2d:12:0d:7b:e9:3a:be:fa:1c:36:09:
a1:fe:76:45:76:8a:fe:8e:d4:f5:5c:4e:d7:ed:eb:
25:9a:87:10:c9:7b:68:2c:74:9b:16:19:e8:c8:00:
bf:58:0f:9e:e9:a2:2a:38:2d:16:e6:12:af:de:7f:
ec:17:07:94:9a:8d:ec:dc:ba:b2:51:45:43:20:10:
ad:d7:4a:3e:6d:a9:1b:f7:4e:a3:1a:31:23:93:ba:
96:62:c1:b2:9d:bd:da:ce:e2:92:71:0a:c8:af:bb:
37:c2:c9:49:16:ee:b8:05:39:cb:a9:a0:f0:19:f8:
f3:9b:68:65:83:7b:cb:da:d2:ce:70:a9:da:7c:ee:
38:47:af:7f:d2:88:a6:52:74:54:f6:e3:75:60:3f:
c2:07:42:86:85:05:0c:81:0c:24:6c:aa:fe:43:09:
bb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C7:7A:23:16:0F:2B:95:B6:26:EE:55:C2:79:85:30:98:EE:0C:D3
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/R8d6IxYPK5W2Ju5VwnmFMJjuDNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.207.0/24
5.231.230.0/24
Signature Algorithm: sha256WithRSAEncryption
47:4d:66:dc:69:73:f9:10:2c:78:a0:b7:25:9b:b0:3f:d7:1c:
e2:71:5d:ee:8c:1d:c4:55:ad:c5:bf:9b:b6:fc:02:c3:72:1a:
fe:c7:08:3e:88:f3:db:8f:54:ed:d9:83:b4:14:c0:8f:30:5e:
24:8f:cf:e3:f6:6e:59:ab:ae:ef:85:d7:91:c1:c9:4c:5c:cd:
e3:c8:0f:ef:65:b1:d1:c2:8e:ee:73:68:00:00:45:3d:bf:28:
ba:09:dc:45:aa:16:02:0a:15:38:0d:f7:e1:53:44:15:77:4e:
d6:6c:38:e5:98:2a:cc:d7:45:bc:9e:b0:63:07:78:e8:71:d2:
c8:66:07:15:5b:8a:d8:07:fd:c0:3c:62:c7:47:61:10:b0:69:
54:e9:6c:5c:82:15:2a:7d:75:65:77:b5:1d:6f:96:7e:25:ae:
80:55:03:3a:4b:1d:02:29:14:06:af:30:35:6e:8c:ad:d4:eb:
4b:cb:7b:47:98:1a:13:4a:28:f7:ab:2c:4c:d3:2b:0a:23:9d:
95:f7:57:c4:f1:43:ac:c7:15:39:a1:58:21:12:74:8b:dd:b2:
be:1c:17:aa:98:36:4d:a6:29:9e:14:1a:66:4b:2d:42:97:4d:
64:3d:32:55:9f:14:cc:34:00:4b:2d:64:a1:f0:25:c1:e2:4a:
b5:d0:97:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:47:48 2025 by rpki-client