Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/gincnI_gYVCe8a-UMsJw8uGTHk4.roa
File: gincnI_gYVCe8a-UMsJw8uGTHk4.roa (raw, json)
Hash identifier: /B3bMOP6Q4JtPQrlZm8v7Y12jGfc6csMXusEpKv3HP0=
Subject key identifier: 82:29:DC:9C:8F:E0:61:50:9E:F1:AF:94:32:C2:70:F2:E1:93:1E:4E
Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial: 0197CA31108FAB0F2621AD72EA16EA49EE97
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/gincnI_gYVCe8a-UMsJw8uGTHk4.roa
Signing time: Wed 02 Jul 2025 08:11:42 +0000
ROA not before: Wed 02 Jul 2025 08:11:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16397
IP address blocks: 5.62.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 16:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:31:10:8f:ab:0f:26:21:ad:72:ea:16:ea:49:ee:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Validity
Not Before: Jul 2 08:11:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8229dc9c8fe061509ef1af9432c270f2e1931e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b7:5e:27:80:0a:d7:00:17:75:89:25:11:06:
da:ba:92:91:3e:6b:c0:80:21:d0:39:5e:d9:cb:d3:
89:c1:27:f1:bb:16:0b:bc:68:2c:25:b7:f6:b8:76:
b2:27:d5:7a:0e:7b:a7:8b:90:7e:52:68:9e:9b:1d:
15:d1:6b:55:47:db:00:3b:e6:9e:e3:c6:a4:b4:e3:
88:15:a5:a8:e5:16:40:f2:c1:b2:59:57:21:6a:60:
58:fa:7a:cc:4d:fb:53:2a:a2:93:52:ef:38:51:b7:
74:83:f0:8e:7a:c4:10:3c:01:da:01:46:e1:79:78:
f6:f2:e7:5a:b8:e9:63:24:ae:01:da:a0:bf:5a:e0:
95:6f:1c:5a:eb:b9:c1:48:eb:5a:5d:20:ee:f1:a6:
5a:42:75:86:be:72:70:13:b0:f5:c9:06:90:70:aa:
69:0d:d2:68:0d:e3:66:3e:17:1f:2a:26:09:e6:0b:
a3:25:f0:37:4b:55:55:6d:3c:a4:76:e3:5f:e0:87:
b0:e5:fa:e0:8d:7e:b9:d9:2e:a7:10:e9:f0:83:1f:
64:b6:7c:b3:58:ab:0e:8d:8b:ad:72:5e:ae:6f:ee:
0f:94:32:db:6b:36:32:3a:8b:1c:18:45:dc:cb:8d:
62:5e:df:f5:6e:18:bd:18:b8:60:8b:4b:3e:15:16:
d7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:29:DC:9C:8F:E0:61:50:9E:F1:AF:94:32:C2:70:F2:E1:93:1E:4E
X509v3 Authority Key Identifier:
keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/gincnI_gYVCe8a-UMsJw8uGTHk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.51.0/24
Signature Algorithm: sha256WithRSAEncryption
75:32:b8:62:07:be:08:35:c8:02:28:c4:e4:00:4e:5a:9e:de:
ff:03:ee:31:fb:80:4f:84:d1:16:95:e8:90:a7:b6:54:e9:9a:
a4:99:57:b9:c8:bf:22:37:76:ac:88:f2:20:17:b4:7b:06:8b:
9d:f9:c2:bd:8e:6d:90:a6:8b:2e:ce:99:86:03:00:ec:f3:c6:
9c:47:50:79:42:63:ec:b0:76:82:4a:19:ca:6b:5c:43:ce:b7:
23:98:f7:49:41:3f:20:35:1a:18:9a:bd:e8:74:fd:86:9a:58:
fe:02:f4:02:0f:7c:c1:1d:3b:a7:2b:22:1c:4e:17:11:b2:f5:
9e:b6:c2:55:be:92:91:17:82:16:16:9d:71:f5:35:e6:eb:be:
a1:9a:eb:33:22:dd:7b:66:cc:0b:0c:d1:78:17:ef:ef:89:61:
be:bb:4c:e2:a2:8f:48:e5:e8:0e:fb:03:af:1a:cd:8e:f0:6c:
a8:55:4e:4a:ae:2b:d7:03:78:dc:a3:b7:0c:06:22:30:10:55:
2d:d5:30:97:42:f2:e6:59:2e:39:92:a5:07:b8:85:e2:30:7d:
b3:7b:5a:65:ee:fe:c7:33:b6:43:38:d5:c0:35:3a:b7:25:3a:
aa:05:9f:bd:83:2e:64:de:ce:08:cf:10:73:41:11:42:7f:d2:
f6:46:19:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 23:55:49 2025 by rpki-client