Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/5f-dp7zmm1xpqS35G4SxPyQsKzU.roa
File: 5f-dp7zmm1xpqS35G4SxPyQsKzU.roa (raw, json)
Hash identifier: /VV17LXXYckmyZ3LkMVCcWjEWZ1t6Ui72lZHti3idJI=
Subject key identifier: E5:FF:9D:A7:BC:E6:9B:5C:69:A9:2D:F9:1B:84:B1:3F:24:2C:2B:35
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01963645409FDD8B484A71B23E6C2D5C9021
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/5f-dp7zmm1xpqS35G4SxPyQsKzU.roa
Signing time: Mon 14 Apr 2025 21:47:10 +0000
ROA not before: Mon 14 Apr 2025 21:47:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206735
IP address blocks: 83.147.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:45:40:9f:dd:8b:48:4a:71:b2:3e:6c:2d:5c:90:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Apr 14 21:47:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5ff9da7bce69b5c69a92df91b84b13f242c2b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:70:09:a4:d1:2f:94:90:b9:2c:33:85:85:b7:
38:f2:9b:7a:67:fc:bf:8d:2a:79:f6:e6:df:d2:4d:
94:c6:62:5b:06:7c:86:3c:69:47:b8:0c:1a:b5:7a:
d5:60:5a:f9:7b:94:d0:08:28:da:d9:4e:98:79:0d:
88:59:fe:95:e0:d2:ee:14:40:0c:ad:4d:66:a5:86:
db:50:63:15:af:3a:cc:f3:5c:18:8f:c3:0d:67:65:
c2:4d:f7:c1:20:19:ce:a8:00:0b:ad:ae:d4:18:7a:
c4:9e:c7:4d:ad:f3:e6:7c:e6:fa:ac:04:c9:c8:b7:
c1:7f:a5:13:85:3e:57:df:59:46:0a:e2:fa:7e:ec:
1e:01:8c:d0:e0:a3:d9:41:c1:6f:08:d6:ab:f3:b9:
e8:8a:4a:ed:48:3a:3e:ad:83:fe:db:54:72:5f:e5:
a4:bb:81:2f:02:e8:76:90:91:7d:b3:95:6b:de:a6:
68:82:22:fe:bb:98:92:1f:27:d9:35:de:9c:a7:05:
b5:0e:a0:95:58:51:1f:61:4a:20:aa:88:a4:57:cd:
54:5e:a1:d6:c4:bd:e2:b4:87:a0:6e:28:04:92:46:
ad:0c:4d:c5:5b:11:42:40:d1:21:9d:83:46:43:2b:
f3:1d:31:3b:e5:2e:17:17:b9:06:d3:1a:28:47:bd:
17:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FF:9D:A7:BC:E6:9B:5C:69:A9:2D:F9:1B:84:B1:3F:24:2C:2B:35
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/5f-dp7zmm1xpqS35G4SxPyQsKzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.217.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:10:c2:12:4a:ee:b1:92:0f:7b:db:83:40:06:38:0d:b6:aa:
c8:57:fc:e1:29:5f:48:e2:9a:a8:c9:89:fb:f3:ba:22:6a:b3:
b8:a9:f2:01:13:69:de:12:4b:46:9e:37:c1:29:2c:d5:f0:3d:
6b:14:22:64:61:32:76:96:6b:c7:f5:4a:29:7d:20:e3:d3:bd:
6d:70:da:fc:83:48:60:8f:94:4d:19:8a:0b:ab:db:06:63:b8:
f8:d1:5e:8b:f2:e3:b1:14:c0:ad:d4:20:3d:2e:44:c3:f8:92:
34:69:7b:15:95:11:16:03:8b:be:b1:ec:d4:9c:69:f2:33:fb:
85:a9:12:9b:1a:ef:99:d6:bd:90:3b:e5:8e:0c:d8:31:60:87:
d2:cb:ba:44:77:82:7e:9c:c6:8b:ee:50:d0:cc:36:4c:22:ed:
88:65:67:7d:af:62:8d:0f:13:94:9f:5f:fb:f4:2d:b8:c9:2a:
c8:4d:44:84:1e:c1:53:14:a0:31:f7:99:80:05:2c:08:d8:26:
f9:ec:19:98:64:9a:17:58:40:a7:e7:4f:a2:6d:c3:65:c3:b0:
51:0a:43:bb:16:48:7e:2f:9c:a8:f2:c1:64:78:78:a6:8a:83:
b6:62:d1:8b:e6:5a:82:a0:27:8f:29:92:13:55:55:05:0c:be:
b3:f8:8d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:07:45 2025 by rpki-client