Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/tScHRMsv3pa-j9k0lmRr4JzNGL4.roa
File: tScHRMsv3pa-j9k0lmRr4JzNGL4.roa (raw, json)
Hash identifier: NDtPBe4Cb63irl43TeReFMTPmiPbWt6CuEvLh3TZdCA=
Subject key identifier: B5:27:07:44:CB:2F:DE:96:BE:8F:D9:34:96:64:6B:E0:9C:CD:18:BE
Certificate issuer: /CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Certificate serial: 019713D01B8FAA70052DBE32605B78CDA213
Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/tScHRMsv3pa-j9k0lmRr4JzNGL4.roa
Signing time: Tue 27 May 2025 22:14:54 +0000
ROA not before: Tue 27 May 2025 22:14:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60404
IP address blocks: 5.2.64.0/20 maxlen: 20
5.2.67.0/24 maxlen: 24
5.2.70.0/24 maxlen: 24
5.255.96.0/19 maxlen: 19
103.251.164.0/22 maxlen: 22
150.129.8.0/22 maxlen: 22
150.129.8.0/24 maxlen: 24
150.129.9.0/24 maxlen: 24
150.129.10.0/24 maxlen: 24
185.31.172.0/22 maxlen: 22
192.76.150.0/24 maxlen: 24
192.76.153.0/24 maxlen: 24
192.76.160.0/24 maxlen: 24
192.76.163.0/24 maxlen: 24
2a01:6340::/29 maxlen: 29
2a04:52c0::/32 maxlen: 32
2a04:52c0:1::/48 maxlen: 64
2a04:52c0:138::/48 maxlen: 64
2a04:52c0:139::/48 maxlen: 64
2a04:52c0:1000::/48 maxlen: 64
2a04:52c0:5001::/48 maxlen: 64
2a0f:6bc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:13:d0:1b:8f:aa:70:05:2d:be:32:60:5b:78:cd:a2:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Validity
Not Before: May 27 22:14:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5270744cb2fde96be8fd93496646be09ccd18be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e5:6c:a9:09:ae:12:8f:74:e8:5c:9a:12:dc:
f4:b3:04:b1:dc:b6:2f:14:5e:d4:80:b9:d3:9f:a7:
35:38:4f:8b:90:f5:df:a0:3f:6e:9d:c0:71:6a:a7:
d9:0d:11:7b:bc:33:84:67:e0:4e:c6:0f:4a:26:71:
7f:4c:12:47:e5:1d:66:8c:a3:cd:6a:24:92:1b:64:
65:3d:73:24:d6:14:e1:96:6f:fa:ec:92:59:8f:3c:
29:dc:ac:0c:39:76:c3:e4:61:db:f3:46:60:40:47:
16:2c:f2:02:cb:ac:32:69:23:b0:13:a8:5b:dd:cd:
16:82:8d:5b:76:81:ef:f3:a4:c8:a4:10:c3:3e:b2:
b3:5b:4c:f3:12:67:61:5f:9d:75:a3:6b:44:61:98:
9b:1d:03:d2:22:04:41:52:19:7d:b0:1b:cb:6d:8e:
75:35:cf:31:71:c3:80:36:73:16:80:76:df:c5:1f:
03:39:63:67:01:83:61:77:1e:7e:0d:f9:d0:98:a6:
73:a8:d2:c4:9e:61:d8:a3:f7:89:96:e5:94:0e:9f:
5a:91:18:2c:2c:8d:73:c8:ef:e9:ae:a0:f8:9f:7a:
ea:7a:1d:f8:a5:44:56:b7:09:63:7c:8d:70:d0:e8:
36:1c:4e:58:11:31:ce:fb:e7:56:03:a8:95:be:4b:
75:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:27:07:44:CB:2F:DE:96:BE:8F:D9:34:96:64:6B:E0:9C:CD:18:BE
X509v3 Authority Key Identifier:
keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/tScHRMsv3pa-j9k0lmRr4JzNGL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.2.64.0/20
5.255.96.0/19
103.251.164.0/22
150.129.8.0/22
185.31.172.0/22
192.76.150.0/24
192.76.153.0/24
192.76.160.0/24
192.76.163.0/24
IPv6:
2a01:6340::/29
2a04:52c0::/32
2a0f:6bc0::/29
Signature Algorithm: sha256WithRSAEncryption
47:5f:8f:e3:e5:cf:c0:22:ee:4a:c5:e1:09:1a:5e:bd:84:da:
0e:2e:3a:a5:2d:e8:15:61:0f:fe:50:06:91:4e:ea:77:a5:93:
b3:39:df:1e:29:fc:e9:78:bf:e9:e8:b0:28:02:c8:06:44:83:
ba:b0:20:a0:95:06:2f:55:62:c3:4a:09:aa:1e:9d:cf:28:21:
09:44:c5:c3:3c:82:19:cd:d6:e0:88:52:c8:ff:a8:47:5e:02:
6b:41:59:ce:67:06:4b:19:fb:4a:93:02:dd:9d:0f:61:b7:2e:
d2:2a:5f:97:6e:43:ec:fa:b6:69:e1:a4:72:99:52:cb:f2:db:
53:59:a5:9b:e8:1f:06:f4:f2:f1:f1:57:23:ab:e0:06:d6:72:
4d:77:6d:60:a5:bb:a9:aa:e4:10:3e:e5:b5:80:53:52:45:d7:
e2:62:c9:aa:65:6f:bb:46:0c:78:7d:67:eb:c8:8c:2d:1b:5d:
87:d8:37:b5:87:51:c6:de:75:5b:64:a1:7b:f5:36:8e:81:52:
8a:db:f4:ef:be:61:a5:90:a1:90:af:73:df:99:f0:58:89:f6:
80:a0:b0:29:83:9f:f7:fc:da:4d:59:b6:47:fb:91:70:94:f6:
c2:98:33:ec:e4:7e:7d:dc:16:51:c3:87:24:91:fb:70:d9:6c:
fe:cc:fb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:50:22 2025 by rpki-client