Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_nY3i9plLOlbN20dWatkOhiRnew.roa
File: _nY3i9plLOlbN20dWatkOhiRnew.roa (raw, json)
Hash identifier: Xn0iSLIjbLMDJRYTDrLIFPo+NkUIDFOYg40+qucvjlE=
Subject key identifier: FE:76:37:8B:DA:65:2C:E9:5B:37:6D:1D:59:AB:64:3A:18:91:9D:EC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019681085B41861D04DE1EC4C7CE1BF0319B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_nY3i9plLOlbN20dWatkOhiRnew.roa
Signing time: Tue 29 Apr 2025 10:12:10 +0000
ROA not before: Tue 29 Apr 2025 10:12:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62041
IP address blocks: 5.231.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 09:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:08:5b:41:86:1d:04:de:1e:c4:c7:ce:1b:f0:31:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 29 10:12:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe76378bda652ce95b376d1d59ab643a18919dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d1:98:8c:20:6f:9c:d5:ae:a3:6b:9c:e5:45:
9c:b4:9d:86:de:e9:9e:29:82:cf:6c:a0:fd:a5:d8:
bd:ca:86:2c:e7:f9:22:16:c4:80:94:1e:7c:c2:ac:
51:23:91:77:ef:a3:e2:2a:af:b5:07:08:cb:a1:96:
59:03:55:cc:ae:41:3f:67:e5:e1:45:bf:56:b9:88:
15:95:33:08:fb:ed:31:f1:43:cd:51:df:41:a6:66:
cd:b3:a5:92:50:2d:e0:af:cd:b8:71:35:84:a6:e4:
f9:3a:6f:5d:87:a4:1b:ef:53:6c:a5:5c:96:dd:22:
e4:31:e7:b9:e2:27:eb:49:36:c0:74:86:bc:b1:88:
12:ad:42:91:ae:df:05:cc:82:68:c5:de:ba:a3:1e:
38:a1:27:1e:18:1b:cb:34:a3:11:7f:9c:91:5f:9d:
6f:95:39:88:e9:26:4c:2a:8a:73:80:90:41:f2:e1:
ad:38:8a:6a:50:30:95:9b:a0:16:eb:d9:74:ad:b7:
aa:eb:14:cd:01:36:9b:04:e1:d7:7b:a1:52:3f:74:
c4:7b:02:b0:a1:96:28:8c:a8:23:d7:09:08:33:80:
7f:1c:4e:95:22:b0:23:a1:2b:74:96:48:bb:4a:9a:
b0:4f:3c:75:12:34:0c:03:c3:b7:bd:1f:18:d9:43:
d8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:76:37:8B:DA:65:2C:E9:5B:37:6D:1D:59:AB:64:3A:18:91:9D:EC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_nY3i9plLOlbN20dWatkOhiRnew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.113.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a1:07:cd:51:21:a0:fe:7e:0e:d8:b9:cc:6a:c9:82:cd:7a:
af:57:d1:f6:0b:4f:e7:46:e9:71:de:79:e8:ef:9b:78:ee:d9:
e7:69:de:c9:10:08:39:05:d4:25:bc:fd:ec:9b:c0:2f:83:62:
02:b4:5a:3f:73:23:d3:19:1c:c0:e9:07:c0:0b:33:c1:4d:3b:
8b:04:b9:cc:fd:6f:ad:c7:14:de:48:1f:ac:3e:d8:bc:bd:e4:
72:6e:90:eb:d0:1e:5d:a3:18:42:87:a3:a3:f2:07:1c:a3:49:
79:e3:8c:d8:64:38:4b:c7:3d:e8:eb:6a:f3:2f:0c:e7:b5:56:
5c:d1:9d:c5:e8:56:e6:29:61:c6:85:6a:38:e7:44:bc:eb:59:
d7:0d:8a:d2:19:b0:bf:b0:7c:0c:01:40:d0:fb:5d:48:26:84:
7e:68:ec:f5:44:15:03:23:ab:0b:7c:cd:e5:7f:5a:d8:b2:d9:
8b:8c:5b:7e:de:de:9b:df:f3:91:31:c2:f1:42:e9:30:e3:28:
35:18:64:df:41:55:3c:b1:d2:97:a8:4c:c4:8f:50:f3:10:f2:
7d:58:5c:b1:0d:1a:96:ca:b5:59:ed:42:bd:43:1c:27:53:9c:
53:3f:a5:f9:d5:4e:23:08:1d:e1:4b:ee:78:ac:f3:d6:48:0b:
6d:74:18:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:46:48 2025 by rpki-client