Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS5065.roa
File: AS5065.roa (raw, json)
Hash identifier: j908xgg5xUXP2EmT1q1jnmLlJX7NgbC8Ecur2+GnUnA=
Subject key identifier: E5:BF:3E:FC:46:B9:25:12:6A:F9:2D:52:FA:75:18:72:B7:C2:FA:2A
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 46D50167004E5500925FCC4B9C8FBFCF1D98F273
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS5065.roa
Signing time: Mon 07 Jul 2025 15:11:03 +0000
ROA not before: Mon 07 Jul 2025 15:06:03 +0000
ROA not after: Mon 06 Jul 2026 15:11:03 +0000
asID: 5065
IP address blocks: 188.119.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:d5:01:67:00:4e:55:00:92:5f:cc:4b:9c:8f:bf:cf:1d:98:f2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jul 7 15:06:03 2025 GMT
Not After : Jul 6 15:11:03 2026 GMT
Subject: CN=E5BF3EFC46B925126AF92D52FA751872B7C2FA2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:58:dd:97:87:4e:6d:cd:37:00:95:a8:42:b1:
67:29:c8:2a:22:77:a3:49:1e:e0:25:1d:18:a0:a5:
ea:4c:32:bb:fd:11:f5:b9:8c:e2:41:5a:79:5e:fa:
35:82:8f:16:d1:6c:12:49:47:07:b2:8a:f4:d1:07:
fc:e1:a7:dc:b2:ff:60:0a:23:1c:91:5d:ad:9b:f9:
13:7f:51:c5:b5:11:4f:92:eb:b3:6b:5b:53:75:14:
7f:ec:97:77:a8:a3:b1:7f:20:e0:e4:65:4b:72:2a:
94:4e:c7:b8:b7:bb:3b:76:d3:f2:ce:03:f2:6a:c6:
14:53:0b:72:eb:b2:59:be:90:d9:72:d4:0d:9f:76:
42:7b:71:26:6e:ae:37:93:30:c9:b3:ec:3b:38:49:
75:14:81:1f:ca:c0:9d:b5:94:9d:a7:93:46:1a:52:
4c:cc:9c:22:75:f4:21:0e:93:1c:8a:9b:cc:24:30:
40:a2:23:ff:02:b1:6a:fd:b1:96:66:61:4b:51:3a:
09:52:d1:f0:2f:63:7c:cd:55:f7:a4:1f:70:5e:d9:
f9:39:ec:a3:c4:13:9f:4f:33:13:e6:45:91:7f:f3:
49:c3:3f:31:1a:e2:3c:52:83:91:8a:42:c9:a4:fe:
a3:5b:b6:f8:a3:bd:d7:8c:28:77:af:07:6a:73:db:
3a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BF:3E:FC:46:B9:25:12:6A:F9:2D:52:FA:75:18:72:B7:C2:FA:2A
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS5065.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.71.0/24
Signature Algorithm: sha256WithRSAEncryption
74:76:a9:54:3c:94:d5:57:77:76:88:20:26:27:1c:8f:0d:94:
d3:9f:97:07:3c:7f:a7:70:bb:b5:92:52:70:45:28:a9:eb:11:
4d:2c:aa:5b:8f:a0:84:51:ec:34:5e:96:fe:ef:3b:a8:af:a9:
04:8f:88:fc:9c:8a:66:28:f9:25:36:43:da:6f:b3:f4:db:d1:
b4:61:1a:27:f9:a4:8b:77:bf:56:e5:97:4e:49:65:df:e1:54:
30:43:33:eb:fd:d5:50:cf:98:9f:a2:27:70:b5:0a:bf:24:ce:
6b:fb:d2:22:27:15:67:05:9f:a0:fb:81:bb:61:d2:87:dd:65:
20:65:95:35:7b:d3:01:af:15:f0:70:4b:9b:35:2f:ce:65:ca:
3c:6d:48:7e:7e:02:49:06:c8:67:f3:9e:6f:aa:0d:9f:e3:82:
8b:34:2d:05:44:81:6b:fb:eb:1b:a7:b4:6e:d4:36:c2:de:65:
e3:eb:ad:b3:e2:61:8f:0e:b1:fd:1e:7f:70:29:8b:89:d0:1a:
22:4a:af:38:42:ac:21:8d:b8:e0:18:97:26:8f:76:ee:c8:c3:
e9:0b:ce:99:99:39:98:e7:db:e2:9c:3b:d9:3b:17:a1:a1:1c:
c7:a7:da:01:30:35:23:70:39:e5:e5:f3:05:35:32:76:a0:6f:
14:7d:1e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:26:50 2025 by rpki-client