Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/5nNVvvvjNaZKGNHa70W3QN8CCvY.roa
File: 5nNVvvvjNaZKGNHa70W3QN8CCvY.roa (raw, json)
Hash identifier: rruxOESxegWgplkphO3R/QNZeLir9iEEwi5/OUoCruM=
Subject key identifier: E6:73:55:BE:FB:E3:35:A6:4A:18:D1:DA:EF:45:B7:40:DF:02:0A:F6
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0197212F438F5C078154696AB52594860463
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/5nNVvvvjNaZKGNHa70W3QN8CCvY.roa
Signing time: Fri 30 May 2025 12:33:55 +0000
ROA not before: Fri 30 May 2025 12:33:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 45.88.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:21:2f:43:8f:5c:07:81:54:69:6a:b5:25:94:86:04:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 30 12:33:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e67355befbe335a64a18d1daef45b740df020af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f9:ee:e0:57:c3:d2:5e:8b:dc:6f:b7:aa:26:
47:12:0c:05:fa:1f:b0:87:91:f0:13:52:05:e3:5d:
0e:4c:cb:be:a2:63:7e:72:d6:49:97:88:e0:6b:96:
b7:90:58:b1:04:22:6e:bf:79:ac:74:34:5f:3e:cf:
0a:82:06:a4:03:97:9e:e8:67:61:b7:07:61:ce:5b:
e1:3e:a9:8b:ec:a5:5c:1c:1d:95:2c:f4:fc:e9:e1:
23:5f:59:02:73:9a:98:b9:0a:38:f9:ce:30:af:c2:
52:ce:4e:62:08:d3:8c:1f:93:16:8a:f6:3c:45:d2:
c3:e6:60:b2:57:d4:46:29:6f:83:cf:e2:6f:16:7d:
72:4f:a9:4f:92:03:f3:bf:4c:5b:1d:a4:54:fd:9e:
0d:2b:db:62:18:e7:70:02:21:2c:69:bc:5e:76:c0:
e7:25:5f:1d:33:ea:6f:1f:1c:70:4d:05:ba:2c:d9:
21:30:52:d4:e9:0b:ea:9f:f5:4b:5a:f0:bb:de:29:
1f:86:14:ea:88:00:76:6b:04:b3:9d:53:86:df:71:
fe:05:32:74:6e:5c:8a:5b:4b:aa:f0:a1:a0:13:6b:
c2:50:fd:50:85:b6:a2:80:81:51:3a:26:f9:69:43:
25:e2:ee:b0:66:36:cf:66:97:b0:c6:d6:97:49:e4:
d7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:73:55:BE:FB:E3:35:A6:4A:18:D1:DA:EF:45:B7:40:DF:02:0A:F6
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/5nNVvvvjNaZKGNHa70W3QN8CCvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.137.0/24
Signature Algorithm: sha256WithRSAEncryption
49:b9:23:26:89:13:ac:5d:0e:58:7b:09:ee:67:18:16:97:14:
bf:d6:d7:39:ef:30:36:33:e6:08:6a:a6:f7:00:7a:2d:6d:c2:
34:fe:44:32:c9:e2:45:a5:6b:4f:fb:27:eb:11:08:14:9f:c7:
95:77:6d:f2:b6:d0:d0:96:3e:06:ec:58:bc:ee:b1:f8:bc:bb:
dd:33:9c:96:a2:ab:ae:9a:8a:79:29:e3:ba:6f:1f:7b:47:bf:
e1:25:ae:da:b8:3c:cd:87:c8:85:e2:16:1d:7a:2d:04:b8:3a:
9f:c7:80:99:77:5a:90:8f:d2:01:ff:76:b0:f4:40:c5:5a:6c:
e6:52:7a:6a:ee:45:45:ad:1b:7b:8e:4e:5c:0f:aa:35:b9:f1:
f5:5d:71:f3:1e:b2:8f:85:14:57:da:9b:93:c0:4d:25:04:b8:
23:98:81:0d:83:5d:6d:04:ce:c7:af:82:3a:4f:c9:1a:2d:44:
b8:7e:dc:f7:06:45:da:0b:ee:68:0d:73:17:8a:80:d1:e7:cd:
bf:f0:fa:05:50:5b:9e:3e:65:03:f8:ac:30:f7:b4:5d:cc:5e:
c7:69:39:05:51:09:cc:2a:67:19:f0:37:85:e9:5d:56:a3:92:
db:14:60:ff:ca:15:76:9c:03:ee:2f:c3:3f:2a:30:fe:07:d4:
a4:60:04:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:17:28 2025 by rpki-client