Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/Vo2AEZubMry-8LbxfP3bd7koV9U.roa
File: Vo2AEZubMry-8LbxfP3bd7koV9U.roa (raw, json)
Hash identifier: Fh0uHUq/PCCkV86hQ4ARdMVMrk3QlRXqnTaAy7kodnk=
Subject key identifier: 56:8D:80:11:9B:9B:32:BC:BE:F0:B6:F1:7C:FD:DB:77:B9:28:57:D5
Certificate issuer: /CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Certificate serial: 0198139907561A2AD95E8B70D9128A9929EB
Authority key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/Vo2AEZubMry-8LbxfP3bd7koV9U.roa
Signing time: Wed 16 Jul 2025 14:17:32 +0000
ROA not before: Wed 16 Jul 2025 14:17:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 5.61.113.0/24 maxlen: 24
5.61.115.0/24 maxlen: 24
5.61.117.0/24 maxlen: 24
5.61.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:13:99:07:56:1a:2a:d9:5e:8b:70:d9:12:8a:99:29:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Validity
Not Before: Jul 16 14:17:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=568d80119b9b32bcbef0b6f17cfddb77b92857d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:ec:ef:ec:e0:72:2b:78:82:ff:32:ed:7b:
56:dc:84:c6:57:9b:01:18:3d:88:56:91:55:0a:96:
1e:3a:5a:98:bc:73:47:78:43:9a:b6:65:41:9b:73:
fb:b1:73:bc:5b:6c:99:5d:93:01:5c:de:3f:41:df:
32:7c:ed:be:e5:39:79:ca:92:68:48:b1:5c:af:d2:
51:f2:74:c8:1a:b7:fb:53:7b:bb:d9:c3:0d:0e:21:
31:0c:94:b1:6c:07:c0:3f:6e:b9:d0:73:e3:82:6b:
69:33:46:76:30:f9:43:c9:d4:22:c4:cb:46:c6:3b:
7d:4e:9c:eb:f5:78:3a:9c:50:ac:4c:73:b1:90:3c:
17:1a:a9:c2:90:f6:9e:07:e3:37:63:c5:c9:ae:7b:
ee:8d:86:a8:8d:ff:07:ff:24:4a:fd:b5:66:63:bb:
d2:f3:59:79:a1:6c:84:55:f0:4b:ad:f3:ae:c1:8d:
5c:3a:8b:1e:95:0b:09:25:32:67:20:68:d5:e9:e5:
8a:f8:36:60:87:b4:b6:63:5b:84:1f:e5:02:87:a3:
8d:fc:a5:00:be:8c:ab:f0:9a:2a:f5:87:87:5c:25:
94:7c:bc:c1:ee:e5:c4:69:43:3d:0b:55:e6:53:90:
61:3f:a3:97:cd:5f:44:e1:2a:8a:22:37:74:e2:13:
7e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8D:80:11:9B:9B:32:BC:BE:F0:B6:F1:7C:FD:DB:77:B9:28:57:D5
X509v3 Authority Key Identifier:
keyid:B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/Vo2AEZubMry-8LbxfP3bd7koV9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.113.0/24
5.61.115.0/24
5.61.117.0/24
5.61.119.0/24
Signature Algorithm: sha256WithRSAEncryption
92:4b:9f:ff:16:0d:e2:8b:b5:1f:93:e6:35:95:5f:33:dd:1a:
16:b0:5d:c6:8a:52:1b:0c:a3:c1:e6:e5:a2:09:03:a0:cd:22:
5e:52:a5:2e:87:07:9f:27:56:c7:f9:7e:91:6d:3b:93:4c:50:
b4:2f:74:00:f0:03:d9:1d:32:25:62:41:7e:8b:fe:26:be:63:
1e:b9:bf:47:e2:64:1d:ff:66:65:7d:68:d5:cd:30:bb:6a:66:
9d:be:04:2c:6f:54:f7:38:e9:fc:04:a8:b1:64:94:18:b4:b7:
9b:fb:13:43:28:86:7e:b3:7a:a6:3e:cb:cd:9e:03:b7:39:9a:
5d:69:3c:e2:75:38:8d:aa:21:fe:ba:9b:1e:8e:4b:74:df:37:
6c:06:5b:12:0b:af:89:10:fb:3f:ed:e3:ae:72:57:d8:fe:83:
b6:99:8d:3b:26:15:85:1a:0b:3a:74:90:0c:27:e3:8a:6a:29:
76:4d:65:b3:fa:6d:0c:95:a1:69:03:a0:c5:02:d5:12:d6:3a:
ce:cb:ad:dd:57:7b:76:a9:aa:b3:72:32:38:7c:04:01:6f:80:
40:fc:0d:59:d2:91:1a:59:a0:2e:82:12:00:b5:7f:6d:b3:02:
3b:8d:6d:fe:6e:ab:68:5d:fc:8d:20:1f:ca:95:de:5d:0e:8b:
0f:d7:75:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:50:04 2025 by rpki-client