Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/I7_qUnSU-kj06HGo4NVph9UeWsY.roa
File: I7_qUnSU-kj06HGo4NVph9UeWsY.roa (raw, json)
Hash identifier: oNfTuocmlQhDam4QRdXXLwWt7PhtIajIutAOrH9xv/I=
Subject key identifier: 23:BF:EA:52:74:94:FA:48:F4:E8:71:A8:E0:D5:69:87:D5:1E:5A:C6
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0196C741A6C19890153981DB977F7B2B1DEA
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/I7_qUnSU-kj06HGo4NVph9UeWsY.roa
Signing time: Tue 13 May 2025 01:28:10 +0000
ROA not before: Tue 13 May 2025 01:28:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50714
IP address blocks: 5.143.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 18:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:41:a6:c1:98:90:15:39:81:db:97:7f:7b:2b:1d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: May 13 01:28:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23bfea527494fa48f4e871a8e0d56987d51e5ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:de:df:40:10:26:81:e1:14:8d:3d:c2:c0:5e:
38:72:fb:3b:f1:0d:4f:d0:d0:28:5e:ab:4f:37:ff:
f9:1a:91:35:58:45:74:cd:a7:9d:60:aa:e7:d6:af:
b0:e1:eb:bd:10:07:0b:ce:12:3d:ea:89:3d:71:5a:
7b:b9:2b:28:3c:01:91:4d:25:2e:14:73:f3:b9:f4:
ff:ec:0d:18:07:1e:ee:d8:f8:e9:28:90:15:f7:35:
21:50:06:61:0e:8e:18:3d:aa:92:dc:85:fe:b8:b1:
61:e9:ed:07:f3:6a:4d:58:34:dd:b4:a0:3b:79:f9:
e2:24:27:70:27:d1:a4:ce:b1:e7:53:54:a4:71:62:
94:78:6f:48:db:9e:39:5a:a4:68:8e:1f:16:e4:28:
4f:43:fc:62:f8:cd:5b:63:51:0e:b5:93:cc:38:f5:
9b:50:57:57:63:7d:36:de:d0:62:cb:e9:e8:c8:a3:
53:23:be:fe:dc:dc:b7:b5:ad:67:d0:e8:39:5a:a7:
64:69:3d:6b:b1:aa:6d:8e:3d:cf:8f:ea:5a:6d:89:
7d:6c:2a:5f:ec:e3:94:58:13:ac:c4:a2:3f:ee:9d:
17:fd:50:91:a2:27:0b:9e:5d:e3:be:cf:75:ba:eb:
5b:10:71:6e:66:bf:9a:99:cf:cc:0a:3b:7d:b1:c3:
7e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BF:EA:52:74:94:FA:48:F4:E8:71:A8:E0:D5:69:87:D5:1E:5A:C6
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/I7_qUnSU-kj06HGo4NVph9UeWsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.143.227.0/24
Signature Algorithm: sha256WithRSAEncryption
22:1e:ad:8a:36:69:8c:f6:d3:9f:19:19:15:a2:79:9b:aa:e0:
62:6d:7d:59:65:e5:53:16:a2:d5:f2:8e:62:cd:cc:ba:3e:50:
d7:a3:b3:ce:a6:aa:51:6d:b0:1b:16:d4:05:60:50:f5:df:d9:
ca:e9:f7:1f:68:e1:6f:fa:fd:f2:a0:5c:d6:11:b1:66:28:16:
e6:5a:69:ce:ec:9b:be:ee:b1:1d:93:18:82:df:9f:6b:47:e9:
c6:01:6a:cb:22:cc:94:86:b4:43:a9:14:55:7d:79:b5:d1:17:
85:5a:d8:24:7f:ae:d7:5b:17:39:ac:d6:42:2d:71:43:5b:60:
10:bd:fc:9e:7d:d3:68:5e:16:b5:b0:e9:ed:98:6f:e9:18:d8:
98:50:72:9b:7e:96:95:34:f7:7c:fa:9a:ab:d4:f0:77:ae:87:
25:4d:3e:66:ae:c2:47:3b:63:34:a6:23:88:2d:7a:ad:db:7d:
d5:9d:a2:01:1a:b2:20:89:3f:a8:9d:3e:75:c7:ef:94:92:39:
ab:1c:b8:17:92:a2:f4:a3:79:21:b7:fe:10:ed:89:7b:af:de:
9a:d2:1e:fb:7d:7b:5f:9f:a5:69:a4:da:12:3f:77:a8:af:14:
69:4a:cf:8f:5a:42:e4:ce:8f:01:9c:47:7e:a5:ad:ac:eb:61:
9e:82:fe:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbHQabBmJAVOYHbl397Kx3qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjUwNTEzMDEyODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2JmZWE1Mjc0OTRmYTQ4ZjRlODcxYThlMGQ1Njk4N2Q1MWU1YWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud7fQBAmgeEUjT3CwF44cvs78Q1P
0NAoXqtPN//5GpE1WEV0zaedYKrn1q+w4eu9EAcLzhI96ok9cVp7uSsoPAGRTSUu
FHPzufT/7A0YBx7u2PjpKJAV9zUhUAZhDo4YPaqS3IX+uLFh6e0H82pNWDTdtKA7
efniJCdwJ9GkzrHnU1SkcWKUeG9I2545WqRojh8W5ChPQ/xi+M1bY1EOtZPMOPWb
UFdXY3023tBiy+noyKNTI77+3Ny3ta1n0Og5WqdkaT1rsaptjj3Pj+pabYl9bCpf
7OOUWBOsxKI/7p0X/VCRoicLnl3jvs91uutbEHFuZr+amc/MCjt9scN+gwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCO/6lJ0lPpI9OhxqODVaYfVHlrGMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvSTdfcVVuU1Uta2owNkhHbzROVnBoOVVlV3NZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABY/jMA0G
CSqGSIb3DQEBCwUAA4IBAQAiHq2KNmmM9tOfGRkVonmbquBibX1ZZeVTFqLV8o5i
zcy6PlDXo7POpqpRbbAbFtQFYFD139nK6fcfaOFv+v3yoFzWEbFmKBbmWmnO7Ju+
7rEdkxiC359rR+nGAWrLIsyUhrRDqRRVfXm10ReFWtgkf67XWxc5rNZCLXFDW2AQ
vfyefdNoXha1sOntmG/pGNiYUHKbfpaVNPd8+pqr1PB3roclTT5mrsJHO2M0piOI
LXqt233VnaIBGrIgiT+onT51x++UkjmrHLgXkqL0o3kht/4Q7Yl7r96a0h77fXtf
n6VppNoSP3eorxRpSs+PWkLkzo8BnEd+pa2s62Gegv6h
-----END CERTIFICATE-----
Generated at Mon Jun 9 04:42:06 2025 by rpki-client