Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5e7ZfoyEUlzEMbdgooa6I84IFKo.roa
File: 5e7ZfoyEUlzEMbdgooa6I84IFKo.roa (raw, json)
Hash identifier: e+v7t3QSdeaX3T+vcii1nxSjQvZ+1UheB871eQGtO2w=
Subject key identifier: E5:EE:D9:7E:8C:84:52:5C:C4:31:B7:60:A2:86:BA:23:CE:08:14:AA
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0197ADA553247018BCFBBEC32D8F60D86958
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5e7ZfoyEUlzEMbdgooa6I84IFKo.roa
Signing time: Thu 26 Jun 2025 19:09:42 +0000
ROA not before: Thu 26 Jun 2025 19:09:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213229
IP address blocks: 193.23.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 18:40:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ad:a5:53:24:70:18:bc:fb:be:c3:2d:8f:60:d8:69:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 26 19:09:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5eed97e8c84525cc431b760a286ba23ce0814aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:5b:90:8a:5e:c1:fc:a0:81:99:7a:a8:97:
a1:84:51:b2:95:f7:3a:b0:fa:2f:72:7e:61:db:f7:
3f:d1:36:06:1f:5f:f6:32:f7:4e:88:1b:47:4d:b9:
33:05:db:d6:04:75:1b:6d:49:38:ae:03:ac:90:c8:
48:db:b3:a6:33:d6:ec:17:34:23:ab:88:ec:0b:9a:
fc:c4:11:db:ec:b6:68:60:61:33:03:11:b4:6e:53:
85:d3:16:85:4c:cf:60:0d:e7:d0:4f:2a:52:6a:7b:
9f:91:d5:cc:08:4a:2a:e3:3d:86:39:11:93:a1:95:
43:9c:b4:75:d3:38:09:ec:f5:ec:09:97:44:50:ae:
28:c0:7b:eb:b6:c5:09:ae:0c:37:a4:29:e9:02:ca:
f5:17:35:95:d2:01:e8:9e:52:77:47:2d:aa:ad:34:
b7:cb:2d:d4:30:e6:33:a4:f2:57:41:8d:e0:bf:aa:
f9:c3:09:ae:b4:56:c1:d8:59:b9:6e:b1:34:8d:d1:
48:2b:e0:37:32:6b:7e:79:cd:64:0d:30:0d:30:c3:
c4:10:6d:32:76:98:fb:00:1b:50:a4:ac:b2:13:6f:
47:f8:fb:38:6f:3b:70:07:20:fa:45:76:fb:dc:a9:
95:c2:53:4c:74:3b:41:19:a5:ce:75:91:66:30:ef:
c7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EE:D9:7E:8C:84:52:5C:C4:31:B7:60:A2:86:BA:23:CE:08:14:AA
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/5e7ZfoyEUlzEMbdgooa6I84IFKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.208.0/24
Signature Algorithm: sha256WithRSAEncryption
58:27:fc:6f:e9:9b:35:86:e8:7f:d9:e4:1c:57:95:51:44:5a:
0c:ae:c9:2c:e1:40:3a:ee:45:ef:92:87:9b:c4:4d:59:94:a2:
b7:d5:df:be:86:f1:68:74:11:54:37:6a:c3:42:e4:56:88:4f:
7b:c2:fe:66:2b:1b:8f:05:8b:4f:eb:c1:56:13:6e:c8:60:d8:
98:dc:28:2b:b7:f7:ef:0c:f9:85:4c:54:f7:00:cf:90:7a:72:
6f:80:21:45:1d:5e:d6:ef:4f:cd:cd:71:d0:54:7b:fe:7c:8e:
d4:f2:6f:79:7b:ee:ed:e3:17:24:d8:9d:fd:c8:3c:33:55:ad:
35:9e:dd:a4:51:1a:cb:82:85:62:ba:4d:6b:f3:10:bd:39:50:
eb:56:34:2e:33:6c:ed:a3:48:6d:12:33:80:df:c7:7c:70:da:
af:aa:43:a9:15:c1:24:8c:86:fa:44:a1:0d:bb:1f:2e:6a:67:
dc:ce:88:90:ef:1f:00:94:6c:d0:ac:9c:7e:a1:42:57:27:17:
fd:2d:b3:9c:07:3f:4e:da:f9:45:4f:d9:5c:b1:ed:ba:4e:3a:
a9:e8:65:07:51:bf:5b:c6:f0:94:4d:98:21:02:39:9c:8a:fa:
9b:d3:e1:f3:a4:d5:ff:4e:4d:55:51:a9:b9:1e:a9:0e:6b:ca:
b4:90:b3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:16:00 2025 by rpki-client