Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/bOO4UAkgvXb-rMii_89NfL-6bTI.roa
File: bOO4UAkgvXb-rMii_89NfL-6bTI.roa (raw, json)
Hash identifier: NL1lyy08FzW+vpLdiv9to5VdvnEWSxR942DR56bOFW4=
Subject key identifier: 6C:E3:B8:50:09:20:BD:76:FE:AC:C8:A2:FF:CF:4D:7C:BF:BA:6D:32
Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial: 0197CA311120A2405BBAE328836E8972DF33
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/bOO4UAkgvXb-rMii_89NfL-6bTI.roa
Signing time: Wed 02 Jul 2025 08:11:42 +0000
ROA not before: Wed 02 Jul 2025 08:11:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36351
IP address blocks: 5.62.22.0/24 maxlen: 24
5.62.23.0/24 maxlen: 24
5.62.33.0/24 maxlen: 24
5.62.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:31:11:20:a2:40:5b:ba:e3:28:83:6e:89:72:df:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Validity
Not Before: Jul 2 08:11:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ce3b8500920bd76feacc8a2ffcf4d7cbfba6d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:7b:e9:a9:94:5b:27:2e:c4:1e:7a:a3:59:
b4:8d:48:94:1f:52:b2:46:1a:64:2b:ac:8b:3c:a0:
e7:74:8b:3a:1c:0d:aa:6e:a1:18:21:41:d6:4a:b0:
96:34:81:7d:d5:9d:f8:d8:5f:a3:94:57:c2:fd:21:
ae:60:c6:10:9c:af:92:9e:95:bd:fb:f3:79:9b:32:
5f:c7:36:05:e1:79:6c:56:c5:9f:e4:da:6c:90:2e:
f8:5e:d8:3e:4d:0a:3a:aa:59:4d:cf:11:2d:dc:03:
f8:17:bf:2e:4a:c0:a9:d8:90:a0:f9:b6:e8:bc:ff:
d5:cb:84:8e:ae:3e:8a:40:f2:e6:d0:cd:e8:8f:26:
7a:7b:fe:0f:f4:93:fe:14:b6:c6:4a:09:d1:ed:c0:
8a:bc:a1:d3:3d:e0:b7:f7:cb:5f:b8:f1:0b:de:da:
91:fc:da:da:6d:14:b9:dc:0f:16:3a:0e:12:8f:e7:
7a:8a:0c:61:11:7f:9e:45:54:1e:d3:e0:d5:3d:f0:
6a:8b:01:fa:92:68:25:e3:b9:c7:ac:31:79:24:b6:
24:61:72:ec:b1:b1:e7:a8:29:d4:24:7a:82:0a:d5:
e6:4a:1f:c7:0e:3a:1a:5c:4f:68:52:87:ed:94:d3:
33:6b:4d:fe:99:76:aa:25:8f:ad:fb:0b:98:d9:f2:
6f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E3:B8:50:09:20:BD:76:FE:AC:C8:A2:FF:CF:4D:7C:BF:BA:6D:32
X509v3 Authority Key Identifier:
keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/bOO4UAkgvXb-rMii_89NfL-6bTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.22.0/23
5.62.33.0/24
5.62.35.0/24
Signature Algorithm: sha256WithRSAEncryption
09:af:a5:19:76:aa:0f:dc:66:9e:89:59:e9:7e:07:bf:0c:fb:
23:a9:50:88:36:ff:43:9a:52:bc:36:b8:9d:a5:15:47:46:32:
cc:b5:16:b0:8d:91:b6:8a:57:af:39:52:80:dc:3f:b4:3b:ea:
76:6a:02:cf:b0:1a:0e:10:78:9a:f4:ba:a8:c2:fb:5b:b5:63:
35:f0:d8:f1:3c:d5:f0:67:7e:b2:26:26:4e:e3:45:e6:51:20:
d5:72:68:99:27:8b:98:08:9d:71:ca:66:7b:a8:ae:b1:7e:fe:
b2:6d:41:5a:eb:c1:06:1e:57:f0:b0:b6:bc:b2:6f:3f:c1:58:
a8:82:6c:a6:de:50:f0:25:26:78:d0:59:25:8f:64:94:17:1f:
f6:89:0f:de:26:a4:b6:cc:56:de:6e:4c:97:16:bf:ba:43:a3:
9f:79:cf:5d:b0:1c:98:3f:b8:0b:dc:d8:da:21:ef:00:53:a2:
56:0e:09:1b:92:7d:76:5b:39:c6:ae:07:d7:4d:14:25:a2:f7:
62:be:16:5e:5f:7b:7c:b3:a3:7d:b4:a4:1e:a3:27:c1:02:96:
14:12:bd:a2:f5:f9:96:1d:b6:51:ed:0a:da:5d:b0:e9:74:d8:
cf:2f:d3:a6:0c:6c:e8:c4:28:f1:56:0a:f8:6e:49:9e:10:7f:
d0:d2:b7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:47:14 2025 by rpki-client