Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/pjijzSQUxqzDP8xeNUFbC_-9WRc.roa
File: pjijzSQUxqzDP8xeNUFbC_-9WRc.roa (raw, json)
Hash identifier: idDVoTbAeotEcfiyv3LfRPsc1HSc8qISJahqgpNH+A0=
Subject key identifier: A6:38:A3:CD:24:14:C6:AC:C3:3F:CC:5E:35:41:5B:0B:FF:BD:59:17
Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial: 0197CA311157DBA9E261E11A283DBE1DD0EC
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/pjijzSQUxqzDP8xeNUFbC_-9WRc.roa
Signing time: Wed 02 Jul 2025 08:11:42 +0000
ROA not before: Wed 02 Jul 2025 08:11:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49505
IP address blocks: 5.62.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:31:11:57:db:a9:e2:61:e1:1a:28:3d:be:1d:d0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Validity
Not Before: Jul 2 08:11:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a638a3cd2414c6acc33fcc5e35415b0bffbd5917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:aa:69:2b:ae:55:d6:bb:d2:b6:07:f5:5f:02:
1b:33:fb:f1:5b:7f:65:dc:b8:07:9d:20:da:00:cc:
d5:24:22:af:a1:3a:09:3e:a5:d2:52:c4:d7:85:17:
27:fe:21:86:74:5c:a7:f1:fd:f0:39:5b:52:2b:e9:
3c:6c:a7:1a:b9:9c:da:25:1f:1f:ac:ff:31:88:27:
38:52:de:57:5a:ed:4c:e6:06:4c:f1:89:5e:f2:6b:
4a:0d:a3:0a:5a:82:73:d1:9f:05:29:10:39:f5:4e:
65:f8:71:c0:6d:3d:f3:b8:27:ea:48:0b:9e:f4:22:
26:d9:14:c7:4f:9f:f7:a8:bb:fa:30:66:e1:30:05:
1b:43:20:1b:3f:d5:bc:8d:7e:64:ce:f4:0d:03:0d:
43:35:7b:fc:21:65:d7:cb:a1:b8:fd:36:98:f6:e8:
da:ac:2e:db:f4:26:04:07:77:31:f4:3b:a7:a5:c3:
63:9d:79:56:db:f6:4b:f2:e8:c1:67:8a:18:37:e7:
66:1e:f1:43:eb:a9:53:a0:4f:95:9b:b4:b9:38:11:
61:6b:dd:49:91:7a:51:47:75:b8:31:8c:5c:c2:af:
49:fe:1e:cf:37:06:63:76:ac:bf:4e:8c:31:04:e4:
de:19:bc:10:bd:07:64:ca:6e:5b:96:42:bf:49:aa:
c6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:38:A3:CD:24:14:C6:AC:C3:3F:CC:5E:35:41:5B:0B:FF:BD:59:17
X509v3 Authority Key Identifier:
keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/pjijzSQUxqzDP8xeNUFbC_-9WRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.19.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:30:22:20:a4:f4:9c:24:6b:5a:b2:7c:32:f4:d3:a4:71:b3:
ef:51:09:fe:19:d6:9a:d2:24:5b:62:02:74:8e:14:04:f6:69:
73:c7:54:cc:4e:74:bd:de:0f:5f:42:02:0e:57:82:32:16:be:
34:19:36:1e:80:ba:cb:dc:a2:12:d6:91:d4:45:25:f9:36:99:
e4:eb:58:34:64:e7:f2:a1:d5:4c:05:37:0a:eb:e6:0d:d7:04:
82:96:54:aa:6b:f1:d6:f2:10:61:cb:7b:b8:b3:ec:56:19:bc:
0c:a8:e4:95:f5:a8:e5:ec:65:a4:fc:5a:ff:b2:59:73:45:f8:
09:16:4d:a3:0c:ee:5c:a9:40:eb:60:c0:2a:e9:f6:31:51:89:
9a:74:8f:e6:61:f1:80:58:eb:56:d6:58:d3:c2:43:fb:e3:39:
50:84:5c:a5:88:2c:4e:e6:f6:c3:fb:0f:7e:ba:d3:7a:0d:3a:
95:a1:07:b4:93:ae:f0:71:f5:b0:ee:4a:01:88:3e:58:57:04:
0d:97:7c:b3:a0:97:af:38:86:d2:cf:63:e2:be:f3:1b:96:91:
7d:43:64:a0:43:0d:49:3e:8c:f7:5a:04:ff:fb:b8:1b:88:c5:
26:4b:ec:0e:11:67:62:8c:8a:50:69:72:f4:d3:e0:c1:d6:5c:
a8:98:5d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:39:44 2025 by rpki-client