Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/pUkIJqBsM01F-i6Em2tr3Saf2sk.roa
File: pUkIJqBsM01F-i6Em2tr3Saf2sk.roa (raw, json)
Hash identifier: iY+eh+5NMCHozu8pjL4QFCTT1O1hYE+uhiNgfrNLxws=
Subject key identifier: A5:49:08:26:A0:6C:33:4D:45:FA:2E:84:9B:6B:6B:DD:26:9F:DA:C9
Certificate issuer: /CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Certificate serial: 01941FFA084A49497B81557D3B966C94CC62
Authority key identifier: 26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/pUkIJqBsM01F-i6Em2tr3Saf2sk.roa
Signing time: Wed 01 Jan 2025 03:47:47 +0000
ROA not before: Wed 01 Jan 2025 03:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215876
IP address blocks: 5.61.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:08:4a:49:49:7b:81:55:7d:3b:96:6c:94:cc:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Validity
Not Before: Jan 1 03:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5490826a06c334d45fa2e849b6b6bdd269fdac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:5e:be:1b:3e:f3:00:a6:f2:33:48:fb:36:
66:44:81:20:20:cf:9b:91:77:cb:7d:db:b8:f1:9e:
2c:b6:26:6b:b8:24:37:fc:de:71:81:f9:b1:b9:5f:
da:cd:ed:2a:6c:c5:a1:af:0a:6e:92:93:74:74:d9:
4a:9f:9f:6e:21:5d:87:42:3a:28:91:ad:a7:cf:c8:
a3:3a:32:c3:be:49:c7:49:4e:82:d2:84:04:c1:e3:
29:85:67:c4:df:4b:07:2f:74:f0:fb:dc:2a:ae:1c:
5e:97:e4:96:b0:87:f3:f6:3d:cc:35:b9:f7:2f:5a:
30:e2:d3:06:0c:65:13:3c:e5:f0:80:45:59:f8:cd:
cf:12:19:e8:6c:34:6a:db:7f:7b:78:8e:e8:df:de:
f5:a1:1f:d4:8d:9d:be:f4:f9:9a:70:b2:d5:fb:2d:
77:07:fb:32:05:86:77:74:ed:5c:cd:94:e0:80:7e:
69:87:f0:11:f1:1d:42:86:61:ad:2d:ac:71:06:0d:
b8:1f:01:6f:f4:55:1f:d4:50:21:54:59:00:c8:8f:
90:fd:97:e2:51:4d:6d:1f:2d:9c:29:fb:92:ee:aa:
f7:05:6c:78:85:42:fa:0b:5d:33:c9:63:5b:41:9e:
aa:e6:ca:9c:ba:69:da:ba:ba:92:6d:a8:22:06:ff:
4c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:49:08:26:A0:6C:33:4D:45:FA:2E:84:9B:6B:6B:DD:26:9F:DA:C9
X509v3 Authority Key Identifier:
keyid:26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/pUkIJqBsM01F-i6Em2tr3Saf2sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.149.0/24
Signature Algorithm: sha256WithRSAEncryption
59:ef:4f:02:36:3a:8c:1f:cb:0a:56:83:3f:3b:28:99:6e:f4:
3f:37:54:8b:a4:34:c7:f1:c7:e2:23:9e:5b:9e:81:68:f0:4d:
3f:d6:ea:98:91:5b:b3:c2:f8:fc:44:17:dd:db:62:8f:87:ba:
52:44:91:9d:50:42:5a:f9:e6:27:5d:c9:e6:31:6e:77:0b:b9:
65:ba:29:32:7a:ed:6c:72:27:a0:16:7c:d2:95:3a:71:fe:38:
94:cc:eb:96:7a:e2:4f:62:c2:8a:f8:eb:8f:07:b6:9d:bc:4b:
12:5a:36:64:92:91:57:b8:75:00:9a:f0:82:72:c9:64:ab:f9:
1f:65:cf:8c:84:78:dd:33:33:8e:a5:bb:8f:8e:27:3d:de:73:
ac:87:a7:c0:04:1e:65:a6:7b:c9:68:3c:8d:42:d6:5e:f2:2b:
67:73:55:1c:45:69:a3:44:d3:77:a3:18:6c:be:47:2b:5c:54:
21:cb:20:74:dc:54:b1:10:08:ed:87:f5:89:8d:ff:6d:e4:6b:
c5:09:32:f5:9d:f4:82:d0:fd:cd:a0:a4:d3:b6:50:eb:71:b3:
11:81:26:b2:ae:73:60:b4:57:cb:21:a8:3c:91:84:5a:21:e4:
4d:79:ba:65:58:b5:ba:ec:66:90:7e:64:3c:c2:ef:22:b9:74:
52:4b:c0:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+ghKSUl7gVV9O5ZslMxiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZjM2YjVjNmNhN2ExNjk4ZTc0MjFhMjdlM2Q0YTZiNzY0
ODE0OGQwHhcNMjUwMTAxMDM0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTQ5MDgyNmEwNmMzMzRkNDVmYTJlODQ5YjZiNmJkZDI2OWZkYWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0Bevhs+8wCm8jNI+zZmRIEgIM+b
kXfLfdu48Z4stiZruCQ3/N5xgfmxuV/aze0qbMWhrwpukpN0dNlKn59uIV2HQjoo
ka2nz8ijOjLDvknHSU6C0oQEweMphWfE30sHL3Tw+9wqrhxel+SWsIfz9j3MNbn3
L1ow4tMGDGUTPOXwgEVZ+M3PEhnobDRq2397eI7o3971oR/UjZ2+9PmacLLV+y13
B/syBYZ3dO1czZTggH5ph/AR8R1ChmGtLaxxBg24HwFv9FUf1FAhVFkAyI+Q/Zfi
UU1tHy2cKfuS7qr3BWx4hUL6C10zyWNbQZ6q5sqcumnaurqSbagiBv9MzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKVJCCagbDNNRfouhJtra90mn9rJMB8GA1UdIwQY
MBaAFCbza1xsp6FpjnQhon49Smt2SBSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnZOclhHeW5vV21PZENHaWZqMUthM1pJRkkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83Y2MwZjYtNzRlZi00MjNhLWE2OTYt
NGEyYmY0YWIxOTlkLzEvcFVrSUpxQnNNMDFGLWk2RW0ydHIzU2FmMnNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS83Y2MwZjYtNzRlZi00MjNhLWE2OTYtNGEyYmY0YWIxOTlk
LzEvSnZOclhHeW5vV21PZENHaWZqMUthM1pJRkkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABT2VMA0G
CSqGSIb3DQEBCwUAA4IBAQBZ708CNjqMH8sKVoM/OyiZbvQ/N1SLpDTH8cfiI55b
noFo8E0/1uqYkVuzwvj8RBfd22KPh7pSRJGdUEJa+eYnXcnmMW53C7lluikyeu1s
ciegFnzSlTpx/jiUzOuWeuJPYsKK+OuPB7advEsSWjZkkpFXuHUAmvCCcslkq/kf
Zc+MhHjdMzOOpbuPjic93nOsh6fABB5lpnvJaDyNQtZe8itnc1UcRWmjRNN3oxhs
vkcrXFQhyyB03FSxEAjth/WJjf9t5GvFCTL1nfSC0P3NoKTTtlDrcbMRgSayrnNg
tFfLIag8kYRaIeRNebplWLW67GaQfmQ8wu8iuXRSS8Cc
-----END CERTIFICATE-----
Generated at Thu Mar 13 07:50:19 2025 by rpki-client