Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/leAWqT3Emh59PqGW2WlceUZUyao.roa
File: leAWqT3Emh59PqGW2WlceUZUyao.roa (raw, json)
Hash identifier: 5mcWnNJMyAgaQbk066LPV3JnU49GwUyPxy9bXDyNGMc=
Subject key identifier: 95:E0:16:A9:3D:C4:9A:1E:7D:3E:A1:96:D9:69:5C:79:46:54:C9:AA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01980C6C1EB4679978041E309B45D58175F3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/leAWqT3Emh59PqGW2WlceUZUyao.roa
Signing time: Tue 15 Jul 2025 04:51:08 +0000
ROA not before: Tue 15 Jul 2025 04:51:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210705
IP address blocks: 5.231.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0c:6c:1e:b4:67:99:78:04:1e:30:9b:45:d5:81:75:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 15 04:51:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95e016a93dc49a1e7d3ea196d9695c794654c9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:47:ff:b2:4b:d0:bd:24:85:f8:5d:fb:5b:c4:
4d:e2:56:0e:85:bd:81:8c:da:f1:9f:75:bd:31:b7:
3d:ea:ac:97:1a:fe:2a:e8:53:11:9c:b3:55:60:99:
7e:17:80:2c:1d:93:08:2e:07:f1:78:65:42:51:a2:
c3:99:1f:75:fd:29:4c:3d:f2:27:58:45:a2:f6:5c:
cd:8b:47:16:12:a1:81:30:25:91:d6:c4:be:5b:f6:
4f:f7:cd:ba:78:d5:a7:04:57:9f:30:9b:a7:9a:fd:
f0:a8:08:82:4f:d5:f2:54:b7:ab:e4:ac:4c:23:02:
31:9b:ae:bf:ca:9d:c5:6c:ca:6e:d2:e9:43:ca:7c:
12:00:74:5d:44:33:71:76:99:0a:39:ea:98:51:f1:
b5:ca:31:5a:aa:e5:7b:21:52:a8:c4:05:38:26:31:
82:ba:83:3c:e6:ed:3e:ba:c2:76:09:ea:55:55:99:
8d:53:c1:44:b2:a1:59:45:75:7c:8b:b0:2f:1d:a4:
62:f1:a6:c2:d1:b3:74:ed:ae:d1:17:70:5f:57:4f:
24:56:49:c8:d1:09:02:75:22:e2:c6:ac:fa:b2:c4:
03:c0:ca:4c:03:d8:c6:44:7a:72:b0:20:e9:cc:1e:
57:8d:ee:b8:45:f8:01:e8:37:be:4c:ed:ec:ad:5e:
dc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E0:16:A9:3D:C4:9A:1E:7D:3E:A1:96:D9:69:5C:79:46:54:C9:AA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/leAWqT3Emh59PqGW2WlceUZUyao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.204.0/24
Signature Algorithm: sha256WithRSAEncryption
66:0c:64:0b:ef:22:c3:48:6b:5d:9e:6d:ca:cf:d6:3d:67:f3:
72:0e:fb:37:08:b4:d0:be:66:cd:33:5d:53:c6:21:de:26:50:
71:64:58:04:c1:9f:90:74:c3:99:76:51:fa:51:cd:ed:61:d6:
44:e5:39:87:1e:7d:c3:ff:95:a8:90:ce:0e:05:33:79:ab:ac:
db:19:95:e3:5a:3b:fd:c8:8f:97:1f:ea:71:da:9c:c1:c3:49:
79:c0:cc:3c:a0:ed:f0:61:0e:f6:0c:dc:6b:bb:a7:eb:52:46:
91:b8:b8:a7:9b:51:6e:37:59:3d:28:a6:e2:18:af:72:5b:8c:
6f:71:8f:8b:48:81:cd:52:4d:16:5c:1b:d0:08:61:f3:20:aa:
79:8b:93:bb:9e:07:28:79:b8:6f:6c:0d:73:71:4a:d4:cd:ce:
4f:42:8a:9c:10:1e:6d:13:5d:f6:d4:68:e1:10:d4:54:14:8b:
c2:65:fa:4d:fe:5b:b2:d7:77:c3:ff:b9:bc:bf:b0:a1:fa:3e:
c6:4b:60:cf:ab:5f:18:c5:77:e0:1a:46:7f:2c:db:c7:a9:07:
d8:61:4a:85:4c:c1:52:58:db:45:06:d7:9f:df:76:b7:23:92:
6b:4a:6e:58:50:ed:8c:6e:fe:d6:42:c9:05:79:d5:be:01:ea:
1a:71:ba:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:03:21 2025 by rpki-client