Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/YHLO1Xa1cc_ehJD28JGbRk2-EFw.roa
File: YHLO1Xa1cc_ehJD28JGbRk2-EFw.roa (raw, json)
Hash identifier: D6g9RJC8SomeadFdp7BF1ueUwNtuHul8IliRqo+ypdY=
Subject key identifier: 60:72:CE:D5:76:B5:71:CF:DE:84:90:F6:F0:91:9B:46:4D:BE:10:5C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0197437349AC717ACFABF62FACB8AD5AF0D7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/YHLO1Xa1cc_ehJD28JGbRk2-EFw.roa
Signing time: Fri 06 Jun 2025 04:15:18 +0000
ROA not before: Fri 06 Jun 2025 04:15:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213561
IP address blocks: 5.175.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:73:49:ac:71:7a:cf:ab:f6:2f:ac:b8:ad:5a:f0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 6 04:15:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6072ced576b571cfde8490f6f0919b464dbe105c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:66:ad:c3:44:71:ce:38:ae:c2:d0:6a:74:37:
3d:ee:49:e3:0f:48:2b:23:51:5e:db:c1:62:2a:46:
5c:8c:22:1e:47:06:6a:e0:42:f1:b6:c7:48:43:f1:
5e:92:d7:f8:91:f7:87:ec:be:3d:84:81:52:8f:f0:
dc:cb:c0:52:ee:e1:cb:ba:01:58:2c:ad:8d:96:83:
f5:fc:4b:f2:ba:b5:71:dd:ce:82:53:c8:3b:fc:81:
8f:5a:dd:9b:08:0f:8a:38:e4:b0:d7:16:3e:a5:22:
b5:da:33:ab:f8:3b:64:7a:51:ef:6c:e1:32:c6:0b:
29:e3:c2:e7:a7:a2:84:03:de:f9:cb:c2:be:c6:a4:
a5:c8:80:89:6d:c7:ff:94:50:eb:18:96:d0:b6:5f:
77:d3:44:ec:06:5c:29:19:fd:c8:2e:ae:98:eb:15:
42:ca:b7:84:20:01:13:f5:37:0a:b3:92:de:29:d5:
6c:ba:7b:12:d0:6d:0f:55:e4:cb:53:cf:d6:30:82:
70:00:06:79:53:01:f1:36:d9:50:e2:d2:4c:ed:29:
72:c0:ea:3c:03:c3:1c:d1:6b:2e:4d:2b:0e:03:0b:
c4:fc:a5:5f:54:66:8b:5b:fd:1b:c0:b1:b2:aa:36:
7e:9e:e6:54:7e:8e:66:89:47:6e:3a:ac:db:f6:71:
60:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:72:CE:D5:76:B5:71:CF:DE:84:90:F6:F0:91:9B:46:4D:BE:10:5C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/YHLO1Xa1cc_ehJD28JGbRk2-EFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.236.0/24
Signature Algorithm: sha256WithRSAEncryption
12:87:b2:5c:86:a7:21:83:ab:47:80:61:3c:f0:58:24:61:77:
2f:cc:ad:a9:3d:9a:48:b4:1c:03:1f:98:6b:cb:79:75:45:54:
c1:c8:3e:63:3a:b8:12:71:2d:2e:c6:ce:d9:39:0b:d4:ec:83:
cb:8c:53:2e:7a:33:36:66:ae:f3:f5:6a:df:d4:75:17:15:20:
21:0f:b6:11:0b:71:be:a6:f1:b8:d0:d3:58:18:6c:f8:4d:ec:
98:95:fa:8f:e1:59:19:b2:2e:e2:d1:51:c7:8a:d6:f0:ea:c9:
08:77:1e:21:5f:b6:53:1a:fd:69:8f:64:bf:5e:55:51:cf:27:
f8:82:cb:7b:4b:80:39:86:c7:ae:4f:a8:19:cb:2c:7a:d3:44:
ba:63:05:0c:5a:ed:19:e9:8b:92:02:27:8c:52:44:c4:75:4f:
1a:19:a5:03:f6:8f:80:fc:c4:cb:c0:63:8e:ea:21:75:b0:33:
92:70:4a:54:2c:e2:b2:51:77:1a:65:39:2f:7e:cb:08:64:2c:
50:2a:63:05:16:a3:bc:b4:0b:59:3a:75:58:87:1f:95:e8:0f:
d1:c3:fd:15:33:62:53:db:46:05:1a:3b:81:35:86:0a:73:ee:
d5:bf:4b:04:d3:35:4b:0a:bf:4e:51:24:90:ef:23:59:1a:73:
20:24:f8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:23:49 2025 by rpki-client