Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/m5A-k0P2kGhUERiGThoKUpjMkqc.roa
File: m5A-k0P2kGhUERiGThoKUpjMkqc.roa (raw, json)
Hash identifier: jOywWU54iyLsOHGzJfcx7FWfZR8aQfGI+nsNVQLWicM=
Subject key identifier: 9B:90:3E:93:43:F6:90:68:54:11:18:86:4E:1A:0A:52:98:CC:92:A7
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196FBF2CBFB25BCF7684F824A9DC0CF442A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/m5A-k0P2kGhUERiGThoKUpjMkqc.roa
Signing time: Fri 23 May 2025 07:01:55 +0000
ROA not before: Fri 23 May 2025 07:01:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 5.83.153.0/24 maxlen: 24
5.175.195.0/24 maxlen: 24
77.90.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 12:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fb:f2:cb:fb:25:bc:f7:68:4f:82:4a:9d:c0:cf:44:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 23 07:01:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b903e9343f69068541118864e1a0a5298cc92a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:56:0a:7c:e4:5a:c1:a5:db:91:56:94:12:b6:
66:54:a5:6a:29:41:78:03:8b:86:ba:78:7e:f1:4f:
0d:de:3f:0a:97:95:6a:c1:2d:9b:3e:96:6b:ad:46:
8c:88:13:4e:c2:6c:c1:e8:3e:a6:e0:45:c2:6b:df:
4d:b7:59:9d:26:8d:26:c4:c9:7b:2c:29:82:27:a8:
4f:5f:ed:08:96:01:5d:50:0d:24:88:ef:82:24:d2:
a9:d9:af:62:53:e9:66:ae:f7:13:b5:22:05:ab:c0:
66:41:80:4a:d4:48:d1:61:01:67:3e:c3:bf:da:12:
29:e3:f0:fd:56:48:9b:c9:62:50:89:55:90:52:5c:
8e:7c:8e:55:a2:81:f4:8c:ae:f5:ef:1d:4a:7d:5a:
88:88:82:ea:3a:c3:ab:ba:d7:37:9c:87:38:b7:b0:
6d:93:1c:6d:ca:20:5e:ef:51:16:56:38:8b:0b:b2:
7c:18:00:da:79:9e:f4:ce:21:c5:34:8e:aa:06:fc:
66:e1:63:53:b3:97:40:5c:d6:a7:60:b3:ba:db:33:
fc:28:4d:12:a4:b4:28:72:9b:bf:de:91:a3:4d:19:
57:80:de:af:0d:90:a5:c3:a3:34:cd:35:cf:5e:f0:
88:65:2f:fd:8e:de:22:1c:f2:64:74:da:b3:8e:0f:
ad:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:90:3E:93:43:F6:90:68:54:11:18:86:4E:1A:0A:52:98:CC:92:A7
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/m5A-k0P2kGhUERiGThoKUpjMkqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.153.0/24
5.175.195.0/24
77.90.33.0/24
Signature Algorithm: sha256WithRSAEncryption
60:23:91:de:e2:f2:56:17:2e:fc:ad:ce:0d:0f:ab:8e:2a:46:
1e:6f:48:b1:48:46:a1:5b:8b:b2:77:33:b6:8c:6c:fe:eb:95:
64:78:6b:9b:06:00:90:3c:07:a4:39:b8:0f:44:74:d6:62:ee:
ba:9a:47:0b:3a:7d:aa:92:fb:91:41:e1:8e:5f:c0:24:43:a6:
3e:38:e0:ce:69:49:e8:a7:43:98:6c:c8:77:27:25:9d:b6:ff:
6f:45:64:49:cf:2d:21:c6:d3:03:99:f7:ea:ce:90:2f:c6:21:
1e:8f:3a:a0:5b:5d:d0:83:b3:e1:a8:c4:ff:e3:33:b8:75:6f:
f3:3f:d3:4b:c5:3b:a3:51:97:75:d9:86:c5:ec:e1:63:97:51:
d0:23:b8:d6:0e:a4:dc:d8:5b:f7:3a:8a:7a:d7:1e:f5:14:54:
5c:7f:82:e6:20:34:00:73:d6:0e:81:5c:44:a7:7a:fe:b1:13:
1d:8e:af:cb:15:c1:ec:74:a7:d3:c4:4f:16:95:f4:44:59:c1:
24:e7:81:ca:33:f4:a3:6f:6c:3a:f4:9c:52:4c:da:30:47:c0:
5b:87:f6:eb:f3:60:f4:42:21:7c:b1:ca:04:43:99:f9:68:a1:
d6:3e:9a:f2:72:49:be:2a:63:d5:40:17:6d:dc:64:f8:eb:31:
2f:92:57:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 18:30:44 2025 by rpki-client