Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/C8n9SA-vtMnKteRpcg33EeLCkBY.roa
File: C8n9SA-vtMnKteRpcg33EeLCkBY.roa (raw, json)
Hash identifier: dcgbkPREY7h1gJcsZMkjYfTiY5mWG7OMCifA9QvuodY=
Subject key identifier: 0B:C9:FD:48:0F:AF:B4:C9:CA:B5:E4:69:72:0D:F7:11:E2:C2:90:16
Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial: 0196F73C2039780365AAF2F2E9A79773ECAB
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/C8n9SA-vtMnKteRpcg33EeLCkBY.roa
Signing time: Thu 22 May 2025 09:03:54 +0000
ROA not before: Thu 22 May 2025 09:03:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57494
IP address blocks: 5.129.192.0/24 maxlen: 24
5.129.207.0/24 maxlen: 24
5.129.208.0/24 maxlen: 24
5.129.209.0/24 maxlen: 24
5.129.210.0/24 maxlen: 24
5.129.211.0/24 maxlen: 24
5.129.212.0/24 maxlen: 24
5.129.213.0/24 maxlen: 24
5.129.214.0/24 maxlen: 24
5.129.215.0/24 maxlen: 24
5.129.216.0/24 maxlen: 24
5.129.217.0/24 maxlen: 24
5.129.218.0/24 maxlen: 24
5.129.219.0/24 maxlen: 24
5.129.220.0/24 maxlen: 24
5.129.221.0/24 maxlen: 24
5.129.222.0/24 maxlen: 24
5.129.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:3c:20:39:78:03:65:aa:f2:f2:e9:a7:97:73:ec:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Validity
Not Before: May 22 09:03:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bc9fd480fafb4c9cab5e469720df711e2c29016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:ba:34:7f:6d:18:f2:bf:da:b5:08:ee:2b:
eb:e6:7f:94:84:e2:76:52:e4:03:97:97:31:54:49:
be:ea:b5:f2:35:d0:93:24:d9:39:6d:3e:09:9b:ad:
da:14:8e:81:d3:c2:78:71:87:19:cd:3f:7a:78:ea:
52:41:77:19:6d:5e:b2:6b:53:94:ec:b0:93:96:e0:
74:7f:8b:8d:70:91:31:16:13:96:22:6e:f6:6a:0c:
83:77:b3:95:ec:ec:b3:06:95:9d:c9:eb:89:e7:18:
1d:e0:98:3f:7f:f7:cf:bc:bc:f3:ba:d4:f6:2a:85:
e0:46:cf:1f:95:aa:99:71:ff:90:d5:cb:9d:0a:d0:
bc:72:d3:3b:00:03:a9:b7:81:a5:2b:6c:10:53:45:
80:9f:be:95:0c:89:66:ce:81:68:dd:7c:0c:72:61:
ab:16:62:49:8f:b3:73:25:30:19:be:60:27:dc:05:
a9:cb:1b:23:25:12:ab:43:25:7d:b2:6b:8d:8e:a5:
84:f0:6e:fa:0e:29:60:62:cb:ad:bc:65:d8:34:ed:
16:29:b6:74:77:a8:38:02:47:ec:ee:d6:aa:48:4d:
cd:79:04:20:f1:6c:0f:4c:27:96:7f:67:d1:39:dc:
05:7a:dc:b7:23:3f:e7:5b:2f:83:38:c1:d5:6c:85:
60:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C9:FD:48:0F:AF:B4:C9:CA:B5:E4:69:72:0D:F7:11:E2:C2:90:16
X509v3 Authority Key Identifier:
keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/C8n9SA-vtMnKteRpcg33EeLCkBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.129.192.0/24
5.129.207.0-5.129.223.255
Signature Algorithm: sha256WithRSAEncryption
61:2b:a8:06:16:c6:d8:b8:38:9f:a3:22:09:da:3d:1b:4e:d8:
b3:4f:6e:41:a9:d6:d1:bc:8d:08:58:99:cb:f0:4e:69:74:2f:
3d:f1:cb:a9:e2:98:ba:fd:4f:64:12:f0:ce:83:4b:c0:42:73:
6e:b6:a7:6b:91:08:19:c9:f9:b9:3e:0d:32:2e:95:e4:65:c2:
d6:f8:24:dd:ef:d7:a6:b6:bc:c3:25:55:7c:d6:b8:83:39:81:
98:93:ce:7b:de:95:9b:41:34:73:22:69:47:37:fe:25:41:67:
90:e2:71:07:0e:e2:a3:21:c5:d5:df:2d:1b:b2:0d:1b:e5:b4:
99:cb:01:11:4e:cd:43:d8:c8:f8:2e:aa:d6:66:5c:71:a2:49:
3e:11:84:d8:3b:49:08:3a:8b:ae:aa:43:1a:ba:80:7d:14:1a:
4e:bc:fa:5d:e8:ee:cd:85:e1:78:33:ca:a9:9a:63:f7:fc:86:
ac:85:45:c6:08:b5:ae:df:e5:70:59:3c:56:a4:98:42:ec:d5:
d1:61:f6:58:a6:33:c8:54:95:66:d6:7e:c2:a4:3a:b8:e9:62:
3d:a6:13:36:e1:41:18:b0:10:41:f5:70:49:03:0b:ee:35:7d:
83:03:9a:44:fc:90:03:76:a7:87:59:0e:a7:ae:51:37:52:4b:
90:93:a8:f5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:50:59 2025 by rpki-client