Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5W327zQ0ocj9aXyQ055TY9LY6R8.roa
File: 5W327zQ0ocj9aXyQ055TY9LY6R8.roa (raw, json)
Hash identifier: Ov599HRqp2I81N+FiZykBBrB4Q5PXcsL24tV0SHL61g=
Subject key identifier: E5:6D:F6:EF:34:34:A1:C8:FD:69:7C:90:D3:9E:53:63:D2:D8:E9:1F
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01975DD9B4F1DDD0849CA21DA4B8BB63249B
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5W327zQ0ocj9aXyQ055TY9LY6R8.roa
Signing time: Wed 11 Jun 2025 07:17:18 +0000
ROA not before: Wed 11 Jun 2025 07:17:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 62.72.170.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 13:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:d9:b4:f1:dd:d0:84:9c:a2:1d:a4:b8:bb:63:24:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 11 07:17:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e56df6ef3434a1c8fd697c90d39e5363d2d8e91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cf:81:fc:01:92:21:0d:f1:f1:6e:fb:aa:fc:
43:b8:9c:de:5a:59:32:a0:d0:5a:61:6a:14:b1:d5:
a8:0e:a2:54:a2:1b:e4:cf:cb:ce:fd:67:d8:98:b1:
71:fb:ba:83:8b:98:8a:71:4b:d3:78:54:0a:49:cf:
e3:10:4d:69:56:e2:ac:49:47:a1:36:f4:77:da:88:
8b:e7:57:23:85:64:12:68:d5:10:c2:7b:66:34:74:
e4:e6:f4:ee:7c:5a:4a:bb:9f:98:29:a2:65:62:fe:
af:de:80:14:53:0c:0e:9b:cc:5c:c7:9d:1a:99:76:
8e:fb:ea:21:96:db:97:99:d4:c3:42:18:1e:85:e4:
7a:e7:d7:6e:83:81:84:52:17:6d:a6:90:f1:fb:96:
65:24:0c:4b:f5:12:2f:05:e6:d1:78:80:d3:74:94:
34:aa:74:62:be:de:b9:6f:bb:50:3e:33:42:6a:29:
88:70:77:6d:ba:4b:4b:95:d5:e9:05:c2:03:89:5d:
ed:44:5d:ce:a0:26:31:a1:cb:60:89:8b:27:ed:a4:
e0:7e:90:f2:66:19:9b:6f:25:88:a0:d5:d5:7e:ad:
60:e0:eb:5b:c3:ba:43:e2:fb:aa:86:4e:60:0d:f6:
f6:5a:34:0e:3e:f7:19:ea:0b:ea:37:74:56:b5:99:
e7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6D:F6:EF:34:34:A1:C8:FD:69:7C:90:D3:9E:53:63:D2:D8:E9:1F
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5W327zQ0ocj9aXyQ055TY9LY6R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.170.0/24
62.72.187.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ba:54:ee:64:25:96:26:3d:d5:94:d2:78:b0:40:c6:80:05:
67:a8:f6:ae:34:3b:06:8c:6f:35:2a:27:42:b7:a2:00:51:6f:
cf:8e:c0:dd:92:c4:43:09:b8:74:8e:ad:d1:71:c0:ac:a4:fa:
c9:a6:ed:9d:89:51:9a:ae:a5:5d:af:ac:8b:fc:ba:0c:f9:54:
68:40:c4:45:55:5c:e1:91:23:71:ed:7e:a7:d3:fc:d7:c7:2e:
82:26:f0:86:f5:eb:a2:e4:09:64:b5:3c:ed:a8:09:89:71:83:
20:14:34:6f:c7:57:4c:b9:7e:c3:20:19:ba:02:0f:ae:43:a3:
a4:c6:a9:77:f5:94:dd:12:91:86:98:30:df:d6:49:b2:b1:16:
ba:62:a8:40:6e:b1:af:24:23:dc:0f:b5:4a:b0:bc:ec:86:54:
87:a2:51:55:b0:2c:79:67:ca:cc:4e:9f:4d:6d:48:83:f5:23:
3e:87:88:d7:11:06:15:85:25:d8:3b:41:eb:3c:6f:41:e9:c9:
8f:58:3e:c7:58:9d:6d:14:63:cd:c3:6b:17:60:88:08:e6:ed:
61:f8:94:14:6d:78:9a:bb:d3:27:4d:e8:79:5a:69:3e:9c:77:
56:58:d4:e9:ef:90:c2:dc:f7:f8:8b:80:a9:16:ef:1f:2f:e9:
04:88:28:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 23:10:13 2025 by rpki-client