Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zqJKsYr93RNBRxXWL_7idF_X08A.roa
File: zqJKsYr93RNBRxXWL_7idF_X08A.roa (raw, json)
Hash identifier: CynY2Zwq4TkAIvIv1cEn04alOjd5BIM4MRw167j7XD0=
Subject key identifier: CE:A2:4A:B1:8A:FD:DD:13:41:47:15:D6:2F:FE:E2:74:5F:D7:D3:C0
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019763C22806F15DDD809C3D96B8AB0BD9E2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zqJKsYr93RNBRxXWL_7idF_X08A.roa
Signing time: Thu 12 Jun 2025 10:49:18 +0000
ROA not before: Thu 12 Jun 2025 10:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31530
IP address blocks: 5.231.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:c2:28:06:f1:5d:dd:80:9c:3d:96:b8:ab:0b:d9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 12 10:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cea24ab18afddd13414715d62ffee2745fd7d3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:21:f5:64:61:35:3a:20:7a:84:1f:64:6f:4a:
84:65:80:ef:9d:11:2f:99:dc:d3:5c:2f:eb:b6:14:
2b:f9:7d:32:1a:9a:e7:90:66:d7:04:ec:37:e5:69:
4e:ce:70:41:37:b1:46:8e:f3:b9:d9:31:5d:98:74:
50:0c:86:f5:f6:34:c9:ab:69:92:32:bb:d9:c7:75:
eb:82:84:90:10:c3:b4:b6:07:c7:36:2f:8c:87:83:
26:73:8a:15:72:41:ef:47:47:07:40:14:35:7d:99:
19:bb:02:a9:e7:24:70:e4:95:17:b4:6b:30:00:3b:
af:12:c5:3e:e0:e7:b4:01:ad:5d:02:84:a1:22:3b:
70:74:90:a9:63:70:2a:19:14:42:b6:a6:6e:d0:8f:
10:83:5d:34:88:47:cf:d9:ea:7b:50:e9:d2:d3:72:
10:0d:93:68:40:11:b8:c4:b0:d7:07:ee:94:a0:33:
1e:2f:99:52:20:3b:f8:54:03:60:58:80:56:14:16:
15:21:9c:78:2a:b5:d2:2f:b3:f5:9e:2c:5c:46:0a:
c2:e2:d3:23:e8:15:47:ed:e2:b0:d1:c1:8d:41:93:
7d:c5:13:8a:57:eb:73:55:33:9d:7e:f8:ae:07:1c:
cb:34:56:fc:a1:23:97:0f:d5:a2:93:fd:ba:cc:e2:
bc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A2:4A:B1:8A:FD:DD:13:41:47:15:D6:2F:FE:E2:74:5F:D7:D3:C0
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zqJKsYr93RNBRxXWL_7idF_X08A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.37.0/24
Signature Algorithm: sha256WithRSAEncryption
77:95:a8:5f:f7:d9:cf:3d:d5:e7:b7:41:ec:64:58:ba:51:14:
38:52:c8:eb:e6:49:69:3e:55:b9:78:ca:b9:c2:b6:ac:60:c3:
c8:49:c3:7a:d4:85:17:c3:1e:c4:53:03:39:bd:10:2d:14:ee:
ea:48:34:c7:39:91:3f:67:ad:1d:19:fa:46:9a:ae:66:94:b2:
92:d7:81:63:77:c0:85:20:64:0e:bb:fd:4e:f7:31:98:2c:7c:
0c:fc:d2:23:ca:07:35:4f:45:55:cd:66:3d:95:b3:72:b8:1c:
07:e6:17:b7:94:ff:9c:8f:e2:8d:44:c7:51:5a:2b:25:dc:64:
d6:a3:b1:68:61:ec:b0:81:8c:0d:c1:c6:57:f2:cf:1c:5c:27:
c9:b4:65:82:8c:31:20:cf:8b:49:44:d7:f6:92:ec:99:1d:a1:
e3:0f:9e:8c:4d:3c:76:fd:3d:89:4f:be:29:f8:29:9a:b2:b3:
3c:67:ac:41:2f:68:1e:ec:e3:b4:42:bd:d5:c5:d0:b8:4a:45:
d1:64:5b:f9:22:85:46:9d:f2:c1:7c:3c:31:f6:3c:1d:5c:6a:
0c:57:fd:5e:02:54:6b:f8:08:1c:3e:cf:21:40:10:94:6d:e5:
8f:ea:e1:e6:7c:56:e9:c3:51:2b:6f:16:23:d6:f9:c6:d5:24:
43:f5:c9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:51:35 2025 by rpki-client