Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5zWGutydxjqy9grG9yv0t9qRXIA.roa
File: 5zWGutydxjqy9grG9yv0t9qRXIA.roa (raw, json)
Hash identifier: PjyZLil+bI5O2d04KKb8mRBUKSSGomJVOwoCjLtqvAs=
Subject key identifier: E7:35:86:BA:DC:9D:C6:3A:B2:F6:0A:C6:F7:2B:F4:B7:DA:91:5C:80
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196C418537B57DA5C498FCB5ABD5CCA2A64
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5zWGutydxjqy9grG9yv0t9qRXIA.roa
Signing time: Mon 12 May 2025 10:44:10 +0000
ROA not before: Mon 12 May 2025 10:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20648
IP address blocks: 151.241.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:18:53:7b:57:da:5c:49:8f:cb:5a:bd:5c:ca:2a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 12 10:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e73586badc9dc63ab2f60ac6f72bf4b7da915c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8a:52:41:9e:26:a5:79:ba:25:20:a1:3b:af:
00:9d:d0:aa:e7:38:b7:3d:fe:a2:7f:e5:88:14:a2:
a3:c8:17:8d:54:7b:54:57:50:b4:5f:4f:93:75:dc:
0d:74:9c:0f:7d:2d:59:44:3c:25:e9:96:2f:0e:d7:
4d:13:fd:bd:d2:03:60:01:69:01:11:5d:74:76:1c:
05:69:8d:ce:0a:a8:b7:e4:19:e9:d7:d8:3f:5e:2b:
4d:3b:c5:8b:90:66:26:47:e1:df:41:18:60:13:a1:
9f:e4:5d:2b:2b:d8:be:ab:5b:98:78:41:e2:64:2d:
8c:73:1c:a6:64:c4:23:34:e1:7e:bc:f8:c7:b1:64:
4b:e6:04:fa:20:ed:ec:7e:e5:88:e9:f8:f5:20:63:
06:70:6d:a2:3e:d5:28:be:a5:d2:a2:b4:de:8f:58:
ce:9f:f7:f7:32:5e:41:3d:ab:05:72:35:f2:d0:e4:
4b:f3:3d:7a:0c:79:4a:73:40:f4:ba:74:f6:c2:e2:
0b:1a:56:06:35:2a:1a:f6:9c:0c:97:1f:e5:c4:04:
e8:90:b6:da:e6:c9:8f:8d:ed:ad:be:97:3d:f5:d8:
90:a8:97:11:8c:9c:5d:96:ea:03:9b:5a:73:2d:29:
53:26:17:80:75:7b:f3:8f:71:67:94:a0:49:0f:a3:
82:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:35:86:BA:DC:9D:C6:3A:B2:F6:0A:C6:F7:2B:F4:B7:DA:91:5C:80
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5zWGutydxjqy9grG9yv0t9qRXIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.3.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:da:d6:4c:2d:9f:de:1f:e4:ce:f6:98:c1:18:1a:d3:5b:11:
84:fb:98:66:5a:af:46:0c:d4:65:fa:ae:db:ad:3a:a0:4e:53:
63:d8:bb:2b:37:0e:da:32:d8:36:0d:cc:0b:23:21:8b:b1:de:
08:d9:75:72:0d:d1:d0:84:fe:19:da:28:3f:55:cc:ef:01:cb:
8f:ac:22:29:b5:35:e8:a0:11:8d:2e:20:05:21:89:95:74:e7:
e0:a5:78:26:6a:22:5b:65:af:51:26:86:d4:f0:1d:82:98:e1:
de:41:a3:89:f1:c6:2d:bd:2d:5e:c9:18:23:3b:10:74:fe:24:
c4:15:e4:40:9f:c2:58:b2:12:a8:57:32:41:ef:98:db:ca:c7:
13:39:97:c7:a0:81:e5:ad:ad:09:c0:c9:a9:8b:d2:da:ba:7c:
bf:5e:b5:9e:c7:5f:53:03:77:99:34:6f:9c:c0:ec:69:60:54:
a9:d8:aa:0d:26:25:25:87:7b:fd:7d:a3:20:ce:8f:d1:46:b8:
64:64:52:ce:ec:25:8a:0c:22:85:f3:3b:a4:f8:c6:18:51:47:
df:3b:7c:46:1e:c8:e8:cc:2a:fc:1a:04:c2:2c:27:76:07:f2:
9e:12:cd:2e:c5:08:6c:a1:97:8b:33:05:86:c2:a7:77:f3:e5:
4b:a2:44:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:54:10 2025 by rpki-client