Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Ab9XLbQ5rsDuyBiVL3xGGFC7HNU.roa
File: Ab9XLbQ5rsDuyBiVL3xGGFC7HNU.roa (raw, json)
Hash identifier: 7tKDK/KQxlTN1WdjJ0ku33kVHFabYbw2HQWvZjbrOjw=
Subject key identifier: 01:BF:57:2D:B4:39:AE:C0:EE:C8:18:95:2F:7C:46:18:50:BB:1C:D5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0197771201A16B8AD9B1F97B6FB2C618D474
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Ab9XLbQ5rsDuyBiVL3xGGFC7HNU.roa
Signing time: Mon 16 Jun 2025 04:49:18 +0000
ROA not before: Mon 16 Jun 2025 04:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200993
IP address blocks: 5.175.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 04:11:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:12:01:a1:6b:8a:d9:b1:f9:7b:6f:b2:c6:18:d4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 16 04:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01bf572db439aec0eec818952f7c461850bb1cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:21:da:45:ec:04:63:dc:fd:b5:9e:3a:3a:dd:
b9:17:54:a1:d6:b9:c9:44:08:c6:3a:aa:b4:c9:d0:
05:69:c6:b6:70:8b:9b:10:f9:88:d4:4c:35:64:58:
63:8a:1c:29:a4:34:92:38:a1:d3:ee:b3:a3:38:84:
ff:97:f1:03:b6:56:5f:6e:8a:5b:3c:aa:1a:98:5d:
90:9f:c0:b9:df:ab:bd:8e:a4:03:6c:5f:4c:26:39:
3b:85:23:90:66:19:77:a7:dc:47:bf:5a:14:b4:a5:
06:c8:4e:30:98:a1:bd:8d:a3:3d:29:02:e1:7b:15:
19:27:6a:b4:cd:e7:82:ed:d9:34:b6:5f:21:44:f7:
bf:7c:6b:69:00:cb:32:e1:f3:f0:ba:56:0d:a6:b9:
40:00:6d:9d:69:71:49:0f:75:e8:b6:5e:65:2e:22:
ae:86:3c:7d:51:b6:80:35:01:cc:54:fe:26:0e:99:
51:8e:76:27:8e:a0:a1:3f:42:93:dc:59:7f:95:2d:
59:46:30:98:4a:17:6a:c3:0d:bc:c2:84:1c:05:f2:
70:c5:0e:7e:99:54:e9:96:a5:c8:3e:77:33:94:21:
fe:9a:6f:10:c1:f2:2b:25:9a:52:9a:0d:43:ed:fb:
79:fa:02:51:1b:2b:e3:f1:dd:5d:b3:d4:43:82:ed:
5c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BF:57:2D:B4:39:AE:C0:EE:C8:18:95:2F:7C:46:18:50:BB:1C:D5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Ab9XLbQ5rsDuyBiVL3xGGFC7HNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.134.0/24
Signature Algorithm: sha256WithRSAEncryption
72:48:c2:f5:53:0b:9f:3e:ac:cd:35:b3:85:26:2d:65:f0:d1:
c7:ed:20:46:b7:3b:5c:34:02:aa:d7:ce:86:02:27:5c:1a:42:
bb:56:94:e6:44:3f:df:1b:d5:a8:8d:a5:80:31:f7:65:48:49:
c1:6e:71:75:9c:e0:35:22:19:73:f4:46:7d:ae:aa:ec:67:02:
dc:e5:fb:8d:30:da:19:ee:f1:33:8a:14:43:be:8b:d1:96:fc:
c0:bb:d1:9c:26:1c:0f:e2:98:ad:22:af:ad:d3:42:10:83:b3:
6a:03:03:79:f8:f8:5c:36:9b:b1:0f:a5:38:b0:15:f8:ea:5c:
84:b0:ba:6f:ea:51:36:b7:a0:85:83:47:63:eb:e2:57:f5:9f:
2c:5f:0f:65:68:bc:87:e0:f8:dc:e4:0d:36:5e:eb:28:d8:c8:
ae:88:50:fc:a4:06:03:31:4a:06:fd:76:88:2b:37:40:be:bf:
60:5a:ac:a5:f8:0d:5f:e3:6c:a1:49:58:5c:42:17:49:9a:2d:
00:82:f6:10:de:53:3e:38:19:31:75:b0:b2:a7:61:3b:0f:b0:
ad:06:c9:2d:4e:56:84:73:7f:65:05:66:71:ba:56:7e:7f:fe:
a1:78:b6:8d:a2:fa:61:e6:d5:cf:4f:11:ae:1c:43:9f:fc:44:
4e:b0:88:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:32:07 2025 by rpki-client