Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/pJ5WVqz27sc4GN_2TdiId1RFRS8.roa
File: pJ5WVqz27sc4GN_2TdiId1RFRS8.roa (raw, json)
Hash identifier: G9CNm7jTF73M1GlxFCdHMqAq+/05g/o+kvhEPuf5Cdo=
Subject key identifier: A4:9E:56:56:AC:F6:EE:C7:38:18:DF:F6:4D:D8:88:77:54:45:45:2F
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 0196634CA8C716ED5ED76461A9BCD05DDB7E
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/pJ5WVqz27sc4GN_2TdiId1RFRS8.roa
Signing time: Wed 23 Apr 2025 15:38:10 +0000
ROA not before: Wed 23 Apr 2025 15:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51115
IP address blocks: 78.155.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:63:4c:a8:c7:16:ed:5e:d7:64:61:a9:bc:d0:5d:db:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Apr 23 15:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a49e5656acf6eec73818dff64dd888775445452f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:90:59:fc:f7:6c:de:50:22:0c:b4:f5:85:c0:
49:21:a7:b2:32:87:44:67:09:b3:2c:7e:13:9e:b2:
81:a8:3c:97:56:14:c7:a2:06:58:fd:cd:91:8c:5e:
d3:69:e0:47:66:d0:d6:74:b8:94:0f:54:ee:80:7e:
e6:d7:9b:f3:a6:c1:8c:21:1e:c2:54:39:12:a5:8f:
a7:ad:59:9a:38:ac:50:14:d2:1c:13:1f:4a:c5:e3:
9b:bd:b8:20:e5:25:cd:f4:ac:d3:d6:ec:76:98:80:
40:6c:ad:8a:2e:c8:61:c7:b5:55:7b:ad:f2:30:31:
05:38:5d:a4:d9:dc:73:30:75:5b:04:0d:82:7b:54:
ea:70:33:3b:cb:ad:2b:48:fb:bb:8e:d1:bb:cc:0b:
db:81:ef:6c:53:a6:74:56:fe:42:3a:42:cc:d6:2d:
2f:5c:04:91:4a:98:ba:e5:8d:9b:a4:69:a4:8b:0b:
ff:d6:6b:3b:ea:2b:e4:32:9f:95:d0:23:db:6e:f3:
91:74:f7:93:06:3e:84:a2:8d:a8:49:10:1f:d8:64:
54:d4:82:cd:bf:96:f8:78:83:3a:b7:3f:45:da:d8:
77:4e:8a:03:39:a8:ec:81:f7:35:77:73:7b:ff:be:
4f:22:29:73:69:11:15:bb:21:f1:cc:c3:c8:b9:8a:
9f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9E:56:56:AC:F6:EE:C7:38:18:DF:F6:4D:D8:88:77:54:45:45:2F
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/pJ5WVqz27sc4GN_2TdiId1RFRS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.155.198.0/24
Signature Algorithm: sha256WithRSAEncryption
61:22:00:12:4b:b2:f4:38:a1:f2:5c:8b:1e:64:8f:4f:82:42:
ba:f9:fb:cb:51:af:3f:86:e4:9d:1c:5a:09:82:08:80:fa:de:
ca:da:9f:e1:f5:f3:23:45:1e:c5:6b:2c:72:3a:95:5d:54:2c:
2f:12:9f:4b:f6:15:da:73:2a:c6:b9:4b:21:94:a6:8c:ef:dd:
04:2a:28:aa:12:57:64:69:1a:9f:6d:79:5d:29:e4:ef:6f:8a:
e6:c3:5c:e0:bc:99:f8:2b:29:92:a3:c8:92:cf:0a:a5:ee:54:
a9:7c:a3:16:99:5f:8f:dd:26:13:66:e6:9d:33:7a:e6:65:a8:
42:22:17:d9:f8:3a:b9:3a:47:0f:bc:ac:73:e5:00:dd:42:92:
85:b0:c8:2a:d1:e2:93:0d:ca:bb:eb:a1:80:77:14:ca:bf:ba:
68:1c:04:81:7f:ea:ec:d1:6e:26:c7:3c:e5:1a:0c:e3:27:51:
1d:37:09:1b:7d:ac:f4:8d:cd:95:ad:e6:f7:45:25:06:92:c3:
97:08:4d:6f:95:68:b5:c0:6f:6f:97:26:b7:50:95:ac:1c:bf:
01:f4:e9:73:c4:68:d7:79:7a:77:78:e2:22:56:9d:9a:da:0d:
cd:9b:b3:49:3a:14:3c:56:d6:f3:65:07:71:e8:fe:fe:6d:5f:
80:df:a4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:47:16 2025 by rpki-client