Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/5Vle3KGfqnVJEdmvBasCstldoz8.roa
File: 5Vle3KGfqnVJEdmvBasCstldoz8.roa (raw, json)
Hash identifier: Rl95m9yb5FSNGdnRgF3OQpiAhZ5L8MWgdG8dVfAGWKo=
Subject key identifier: E5:59:5E:DC:A1:9F:AA:75:49:11:D9:AF:05:AB:02:B2:D9:5D:A3:3F
Certificate issuer: /CN=582ae803df22b055c74e5fe8f11d944089560ed2
Certificate serial: 01973F8D5A37EDEDFDB8A376612D1BB7C2F8
Authority key identifier: 58:2A:E8:03:DF:22:B0:55:C7:4E:5F:E8:F1:1D:94:40:89:56:0E:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/5Vle3KGfqnVJEdmvBasCstldoz8.roa
Signing time: Thu 05 Jun 2025 10:05:17 +0000
ROA not before: Thu 05 Jun 2025 10:05:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209594
IP address blocks: 185.207.50.0/24 maxlen: 24
185.207.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:8d:5a:37:ed:ed:fd:b8:a3:76:61:2d:1b:b7:c2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582ae803df22b055c74e5fe8f11d944089560ed2
Validity
Not Before: Jun 5 10:05:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5595edca19faa754911d9af05ab02b2d95da33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:79:cb:ac:ec:4c:4d:e1:50:a1:bb:56:cf:fb:
20:e0:cc:09:1c:5a:91:8a:7b:73:df:9b:e2:e6:38:
a2:a3:c5:49:85:1c:c3:76:f2:ed:82:07:18:25:df:
8c:ea:41:47:70:dd:18:24:f4:cb:f4:39:fd:ab:cb:
67:a1:bd:3a:3f:2f:7b:3e:fa:7a:4a:ee:9b:ca:60:
c5:e2:c3:ad:68:b6:92:fa:62:ee:c5:c8:44:47:e0:
c6:3d:b6:c7:21:a5:5e:20:94:7a:b4:14:14:03:6c:
d3:32:28:e4:61:c1:27:1e:cc:c4:2c:47:d7:5a:c6:
48:7b:05:bf:b3:6b:29:31:e6:3f:d2:49:b1:8c:19:
3a:08:0f:68:52:0d:8d:91:9c:91:91:54:59:d9:22:
26:ba:ae:c9:ea:aa:ba:14:b9:a3:78:14:18:b1:b8:
e8:02:ad:1c:bc:4a:2e:95:b0:6e:7c:69:a2:46:8c:
9b:a0:23:03:69:4e:5a:83:94:ec:7a:66:87:95:41:
05:bd:a5:73:c4:17:e4:c6:07:e2:92:9c:38:04:6d:
fc:17:4c:79:f5:0a:cd:8d:ea:91:c1:30:67:19:73:
ec:79:e1:d1:fa:04:05:40:96:b3:6f:47:e1:ad:a1:
91:ad:b5:80:28:8e:93:30:e3:e8:c6:34:75:80:6d:
37:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:59:5E:DC:A1:9F:AA:75:49:11:D9:AF:05:AB:02:B2:D9:5D:A3:3F
X509v3 Authority Key Identifier:
keyid:58:2A:E8:03:DF:22:B0:55:C7:4E:5F:E8:F1:1D:94:40:89:56:0E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/5Vle3KGfqnVJEdmvBasCstldoz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.50.0/23
Signature Algorithm: sha256WithRSAEncryption
29:c1:09:ba:bf:25:a9:59:28:4f:d5:4c:05:4c:d8:07:f8:06:
49:0c:3a:80:47:c7:69:0f:5b:46:8a:34:25:85:1d:15:a7:11:
35:eb:40:1d:cb:b5:8f:21:5f:46:c5:da:a2:57:ea:d6:f3:45:
36:87:01:6f:da:e6:85:77:c3:ea:1d:b8:10:b2:1a:51:09:4a:
20:49:c4:e1:58:e9:b9:07:ed:6d:14:1c:c8:30:f8:77:b4:ac:
9e:e9:ed:73:c5:f1:fb:4b:83:b5:91:0c:51:9b:c3:9b:24:61:
30:16:67:a1:dd:b5:a0:62:d7:35:e5:93:0b:a2:cc:15:22:48:
5a:15:32:e5:96:0c:e1:3d:d3:8c:f5:48:be:83:c6:4c:4c:22:
fa:bb:e7:3a:0b:c5:8d:bb:8d:70:74:ad:de:bb:d7:29:3a:3f:
66:2f:d0:13:b5:a1:94:15:90:72:54:09:4f:f9:26:c0:48:87:
fc:5d:a0:ee:07:e1:97:e3:ea:61:b3:7f:5b:5c:e4:9a:84:80:
51:b9:b8:77:0e:29:b4:02:ec:90:14:49:22:9e:64:ba:05:2c:
d2:62:99:3a:61:cf:7d:56:61:5f:38:2c:34:0d:e4:ee:3c:ea:
e0:8b:26:cf:c6:fc:52:75:53:fc:30:24:fc:71:d5:82:12:72:
ef:23:ba:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:47:45 2025 by rpki-client