Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ZGdgAzv5IGw2nCEvg-Pr0_5Fzmk.roa
File: ZGdgAzv5IGw2nCEvg-Pr0_5Fzmk.roa (raw, json)
Hash identifier: pNodJrne8YIHBC3RhsLeV95JrOqf27aYJTUvRYDHDjU=
Subject key identifier: 64:67:60:03:3B:F9:20:6C:36:9C:21:2F:83:E3:EB:D3:FE:45:CE:69
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019809B6284FE8B383568743EBC1852F2C76
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ZGdgAzv5IGw2nCEvg-Pr0_5Fzmk.roa
Signing time: Mon 14 Jul 2025 16:13:09 +0000
ROA not before: Mon 14 Jul 2025 16:13:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210702
IP address blocks: 5.180.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:b6:28:4f:e8:b3:83:56:87:43:eb:c1:85:2f:2c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 14 16:13:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=646760033bf9206c369c212f83e3ebd3fe45ce69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ec:4a:06:1f:5e:c8:46:4a:73:b8:5d:02:e8:
cf:16:fe:c3:e2:c0:eb:6f:14:07:22:cb:5c:49:aa:
91:eb:ee:b9:bb:55:88:9b:1a:79:87:f5:d5:71:e2:
45:ef:8e:07:a1:ac:e7:4e:fd:3e:32:20:d0:9d:da:
fb:cf:e9:71:b1:19:1e:bc:0a:2b:1c:9a:f0:2d:21:
9b:e6:20:d7:36:bb:81:5b:70:11:e7:03:15:9b:bc:
4f:9e:2e:27:79:ac:15:28:c9:ba:16:03:b4:ce:e5:
a5:23:bd:0c:c6:31:e7:67:81:4a:69:17:b6:a2:ce:
24:db:c9:22:43:9a:d5:8b:fc:f3:02:f5:1a:7a:3a:
44:aa:49:cc:cc:45:2d:1c:0b:2b:25:4e:d2:0e:12:
44:42:60:3a:16:f8:16:94:24:54:4b:04:b1:f5:b0:
b9:43:37:44:76:85:8f:e8:26:c5:c8:21:e2:cd:93:
dc:1d:e7:55:18:bc:9d:a5:f7:ea:06:11:17:b1:b7:
c9:30:46:cb:b5:76:14:2d:f3:7e:5c:ca:e2:03:72:
b7:9c:ad:b5:50:ec:4e:93:c3:eb:9d:75:8b:88:4d:
0e:56:ac:c8:a2:04:fb:a2:43:9c:59:85:b3:a6:0f:
fd:d4:ca:15:72:2c:3f:d7:7e:16:53:f9:08:26:72:
8a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:67:60:03:3B:F9:20:6C:36:9C:21:2F:83:E3:EB:D3:FE:45:CE:69
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ZGdgAzv5IGw2nCEvg-Pr0_5Fzmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.139.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:69:34:9d:a8:10:4f:e2:97:78:2d:7c:b2:a0:68:7f:b5:43:
ab:23:e3:97:41:9c:3f:ba:85:2b:fd:c2:1d:0a:b2:be:69:07:
0a:99:ee:e9:c6:a8:06:0f:88:2c:86:77:c5:1b:92:26:94:33:
85:83:b8:38:38:a6:f6:e1:df:1f:62:04:9f:13:1d:ef:1f:1c:
af:ac:f8:2b:f3:16:d2:31:84:59:8b:78:82:e1:13:06:18:60:
e8:e9:56:6b:74:6d:b8:06:99:aa:56:46:1b:52:a1:8a:ac:9e:
35:8f:5a:72:69:84:63:44:d7:57:a4:2d:c5:d7:14:8f:5f:a2:
8f:4d:67:2d:6d:fe:b0:98:e8:a4:c1:c4:7e:cd:3d:7c:0a:ab:
c0:93:09:98:71:46:ea:ed:79:8d:63:b0:ba:88:30:55:d5:14:
ea:1b:44:24:d7:e7:cd:e4:0b:dc:e2:d7:6a:6c:7f:87:77:0e:
6b:9b:90:0b:ea:6f:54:b1:ab:55:69:de:38:dc:77:01:4e:03:
66:16:99:eb:5f:f6:fe:fd:73:80:5f:ae:4f:b0:d9:7b:f2:4f:
99:b7:d8:5e:e9:a0:0a:2d:89:2e:7d:c8:a6:0b:b0:d4:39:ac:
1b:f5:b1:2a:71:98:1d:13:6b:12:2a:70:89:dc:80:7d:d9:82:
cc:ad:fa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:12:35 2025 by rpki-client