Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/68_hh5nvvxdnHVcilOk01dXyiOs.roa
File: 68_hh5nvvxdnHVcilOk01dXyiOs.roa (raw, json)
Hash identifier: AsVqyOVqRlaygQVIhOguSU9fF8oB1lCvBgMi8KqEsV0=
Subject key identifier: EB:CF:E1:87:99:EF:BF:17:67:1D:57:22:94:E9:34:D5:D5:F2:88:EB
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01966896B9FCC2CE929A459413BB4443BF94
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/68_hh5nvvxdnHVcilOk01dXyiOs.roa
Signing time: Thu 24 Apr 2025 16:17:10 +0000
ROA not before: Thu 24 Apr 2025 16:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398465
IP address blocks: 5.231.80.0/24 maxlen: 24
5.231.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:68:96:b9:fc:c2:ce:92:9a:45:94:13:bb:44:43:bf:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 24 16:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebcfe18799efbf17671d572294e934d5d5f288eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:22:76:dd:25:5e:57:54:7c:c2:cc:a3:51:f2:
b9:70:0d:91:6b:38:57:82:64:75:9f:73:dd:2d:3b:
40:09:e9:dd:62:8c:7e:10:f7:41:e0:cf:21:4a:9e:
15:04:c2:76:52:90:40:ac:c1:e6:23:79:42:41:91:
d4:00:06:f7:bc:42:73:d7:93:f3:47:48:b4:13:b3:
4b:58:b3:38:93:64:80:23:81:c9:21:e6:24:64:1a:
96:c9:4d:e1:a4:f0:e0:37:3c:06:c6:a8:dd:0f:06:
02:f9:9c:26:8f:2c:21:52:68:17:28:77:54:b6:58:
d7:d6:d4:03:1c:db:1b:e5:28:4d:11:a5:81:94:1d:
3d:6d:d0:16:3b:63:88:9f:30:63:66:59:db:9d:a9:
51:8f:c0:df:35:5a:17:8e:01:90:2b:7e:61:76:96:
d5:17:cf:ff:db:82:55:78:ac:4b:ab:37:84:a9:e4:
e9:fc:9e:d8:f7:20:1a:e7:aa:b7:6a:74:82:89:69:
5f:21:d8:0c:75:ec:41:72:e6:b4:2c:f0:45:ac:fb:
b4:79:b8:00:b3:99:f9:78:d8:01:b3:60:a7:df:96:
e1:9b:dd:45:2b:86:1d:02:c6:ae:4d:20:e1:63:a9:
82:5c:1d:24:4c:a4:a8:59:e5:c5:14:6a:72:1b:f6:
9f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CF:E1:87:99:EF:BF:17:67:1D:57:22:94:E9:34:D5:D5:F2:88:EB
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/68_hh5nvvxdnHVcilOk01dXyiOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.80.0/24
5.231.113.0/24
Signature Algorithm: sha256WithRSAEncryption
74:8c:74:02:ae:c9:cb:82:64:ec:c6:ba:f7:a6:d8:a3:02:3e:
c8:f7:08:c4:e8:8a:05:b6:6d:f6:c2:97:b6:6b:82:82:cb:b7:
b2:9d:c0:1a:17:fa:23:44:29:b9:5b:8f:57:4f:87:dc:9e:ef:
a0:50:86:0f:20:8a:ce:3f:35:ae:d6:61:58:bd:f1:85:b8:60:
79:67:ed:c9:58:43:d9:aa:40:f5:39:0f:1d:ab:90:6b:df:4b:
ed:39:6f:e8:ea:a0:e2:79:bc:17:d0:a0:1f:08:8c:56:d7:b8:
88:3e:4e:65:a0:c0:03:96:25:d0:b5:67:a9:23:a5:39:35:9f:
52:d0:8b:d6:9c:38:8d:df:eb:82:16:d8:c0:40:1a:54:3e:8a:
43:e6:ef:c1:63:fd:3a:1f:bf:c0:01:1e:35:bb:fa:3f:f6:30:
05:b5:bb:a6:ca:b3:6f:53:b4:95:49:6d:a9:91:36:8e:38:82:
16:b9:c7:88:e1:b1:b5:c3:41:2b:69:e6:3d:1c:95:a7:de:6f:
29:2b:1f:d9:e8:e7:fb:bf:ec:cf:89:db:56:f6:27:9f:5c:ca:
bf:cd:5f:0a:33:6a:5b:3a:05:da:a0:57:7e:ba:d8:af:a8:59:
1e:f3:11:5f:c0:37:5d:81:15:18:81:4a:62:bb:99:64:ad:01:
d0:45:18:76
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZZolrn8ws6SmkWUE7tEQ7+UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNDI0MTYxNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmNmZTE4Nzk5ZWZiZjE3NjcxZDU3MjI5NGU5MzRkNWQ1ZjI4OGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiJ23SVeV1R8wsyjUfK5cA2RazhX
gmR1n3PdLTtACendYox+EPdB4M8hSp4VBMJ2UpBArMHmI3lCQZHUAAb3vEJz15Pz
R0i0E7NLWLM4k2SAI4HJIeYkZBqWyU3hpPDgNzwGxqjdDwYC+ZwmjywhUmgXKHdU
tljX1tQDHNsb5ShNEaWBlB09bdAWO2OInzBjZlnbnalRj8DfNVoXjgGQK35hdpbV
F8//24JVeKxLqzeEqeTp/J7Y9yAa56q3anSCiWlfIdgMdexBcua0LPBFrPu0ebgA
s5n5eNgBs2Cn35bhm91FK4YdAsauTSDhY6mCXB0kTKSoWeXFFGpyG/afFQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOvP4YeZ778XZx1XIpTpNNXV8ojrMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvNjhfaGg1bnZ2eGRuSFZjaWxPazAxZFh5aU9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABedQAwQA
BedxMA0GCSqGSIb3DQEBCwUAA4IBAQB0jHQCrsnLgmTsxrr3ptijAj7I9wjE6IoF
tm32wpe2a4KCy7eyncAaF/ojRCm5W49XT4fcnu+gUIYPIIrOPzWu1mFYvfGFuGB5
Z+3JWEPZqkD1OQ8dq5Br30vtOW/o6qDiebwX0KAfCIxW17iIPk5loMADliXQtWep
I6U5NZ9S0IvWnDiN3+uCFtjAQBpUPopD5u/BY/06H7/AAR41u/o/9jAFtbumyrNv
U7SVSW2pkTaOOIIWuceI4bG1w0EraeY9HJWn3m8pKx/Z6Of7v+zPidtW9iefXMq/
zV8KM2pbOgXaoFd+utivqFke8xFfwDddgRUYgUpiu5lkrQHQRRh2
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:22:04 2025 by rpki-client