Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/5sW_k0570MI-6WTeWxZyuxvdUkI.roa
File: 5sW_k0570MI-6WTeWxZyuxvdUkI.roa (raw, json)
Hash identifier: zyzwK7qOsGUb0JSXwJAn87N7E7PEUTo5CUCJ4O1YDtA=
Subject key identifier: E6:C5:BF:93:4E:7B:D0:C2:3E:E9:64:DE:5B:16:72:BB:1B:DD:52:42
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0197596F06F63A7C8D9BEECC35AC5530AD12
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/5sW_k0570MI-6WTeWxZyuxvdUkI.roa
Signing time: Tue 10 Jun 2025 10:42:17 +0000
ROA not before: Tue 10 Jun 2025 10:42:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211659
IP address blocks: 85.208.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:6f:06:f6:3a:7c:8d:9b:ee:cc:35:ac:55:30:ad:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jun 10 10:42:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6c5bf934e7bd0c23ee964de5b1672bb1bdd5242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:76:64:6e:1d:65:21:04:8d:20:ef:d1:46:
7c:28:e1:aa:05:b3:55:91:3b:6a:79:08:58:04:fd:
39:e7:31:9d:45:a0:a7:a4:43:ad:c7:cf:0b:74:d8:
c3:62:07:3a:e5:e3:34:e3:a6:57:42:be:04:0c:e7:
bc:b8:21:ed:49:35:02:a4:70:e0:04:c6:32:4a:25:
e3:7e:25:83:70:c6:b6:ff:de:3e:de:3c:1a:bb:3a:
e4:17:9c:e2:12:da:a4:b5:88:ba:f9:23:4c:d2:7a:
9e:7e:3b:8e:5e:1f:e8:a6:82:8d:d5:53:7e:b4:0b:
f4:85:87:f7:35:b8:17:29:9a:5b:f9:4b:bc:58:7d:
f8:0c:b9:2e:28:70:3a:85:ae:c1:5d:74:57:92:4a:
5b:c6:dc:7d:c1:67:ad:98:02:72:12:0c:d4:1f:1f:
ff:27:30:7d:09:34:ce:12:b0:bf:98:b8:62:36:5e:
79:83:30:30:53:8a:87:88:77:7a:29:b7:00:47:3f:
07:b5:ff:88:ed:d9:10:cc:dd:85:49:86:b7:7a:4c:
73:3b:f6:58:49:33:a1:55:34:79:10:44:16:05:a2:
5d:00:2d:bd:51:54:f7:af:58:6b:a3:d1:e2:e6:da:
1a:30:e8:a9:8a:5b:88:5b:4d:7c:14:f9:32:7a:5f:
28:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C5:BF:93:4E:7B:D0:C2:3E:E9:64:DE:5B:16:72:BB:1B:DD:52:42
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/5sW_k0570MI-6WTeWxZyuxvdUkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.84.0/24
Signature Algorithm: sha256WithRSAEncryption
22:2d:cd:fd:dd:d3:be:e7:9e:d2:2e:dd:9d:54:46:e7:ca:05:
94:df:93:53:2b:d3:91:7b:e8:48:bc:7b:7a:ec:b4:dc:2b:4c:
62:9b:91:f9:00:88:49:9e:2f:07:47:d5:bb:64:5e:74:56:39:
a2:6e:e5:b3:83:29:5c:74:24:b9:d2:b3:18:cd:45:e9:7e:de:
46:e4:f6:5a:6e:e8:ff:bc:16:57:fa:95:f4:27:cc:f3:cf:6e:
cd:d1:ec:f8:03:ec:d7:75:a7:7f:03:18:24:56:c2:a4:67:c9:
dd:fb:e6:89:0e:02:ad:5b:1c:07:11:eb:b0:d0:0b:4c:0d:49:
9c:0a:ba:ef:ef:ef:5c:a4:ee:4f:5e:c9:7f:ea:7e:6a:a2:d2:
41:b9:cb:74:76:ab:78:41:bd:a7:06:68:35:12:08:c7:97:32:
6e:5e:b5:f0:a0:10:a8:10:50:1e:05:9f:05:69:85:56:da:a6:
11:e3:dd:f4:a0:f7:ca:a0:b0:87:b0:71:d5:e3:a2:4f:19:f2:
5a:77:16:4b:6a:a3:74:f9:fd:da:ab:b4:50:02:ea:3a:71:5c:
b5:8a:05:91:d6:12:7d:e8:c2:62:e6:4e:54:0b:b4:14:ac:e3:
f9:a4:79:be:9c:27:7c:a2:34:3d:48:22:5f:69:24:f2:b3:6f:
b5:b2:d9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:50:08 2025 by rpki-client