Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5ViRj5UOP26C2K_cQDvWpvsGWtY.roa
File: 5ViRj5UOP26C2K_cQDvWpvsGWtY.roa (raw, json)
Hash identifier: FTaUWpoFHfHOaNS+eZLYDwPpxcO9OpNzf+cUKjmhjJg=
Subject key identifier: E5:58:91:8F:95:0E:3F:6E:82:D8:AF:DC:40:3B:D6:A6:FB:06:5A:D6
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01966D7A40C5FCFA628FD03D1B4C004479FA
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5ViRj5UOP26C2K_cQDvWpvsGWtY.roa
Signing time: Fri 25 Apr 2025 15:04:10 +0000
ROA not before: Fri 25 Apr 2025 15:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 62.72.172.0/24 maxlen: 24
62.72.173.0/24 maxlen: 24
81.21.5.0/24 maxlen: 24
81.21.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6d:7a:40:c5:fc:fa:62:8f:d0:3d:1b:4c:00:44:79:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Apr 25 15:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e558918f950e3f6e82d8afdc403bd6a6fb065ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:74:c3:c8:2f:49:a0:44:ca:b2:35:3b:db:e2:
72:3f:8d:3f:1f:5e:94:08:ec:9e:10:7e:56:5d:4a:
c5:1d:3f:9b:0e:37:23:43:e5:9c:34:cc:02:6d:cc:
69:1a:82:fe:cb:53:0e:c1:e8:dc:a0:e2:54:7e:e6:
61:29:f3:ce:2b:b0:41:17:37:13:16:06:04:97:bd:
e6:7d:76:f0:fd:0c:e6:43:70:56:c9:ec:18:47:98:
ed:ea:71:c4:0d:cd:04:6b:90:fd:d6:9b:f1:30:01:
d6:4b:22:0b:37:95:2f:62:4c:58:79:13:21:f0:18:
fe:5b:d8:17:e4:74:f0:2c:0e:fa:99:14:ab:a8:b4:
88:5d:64:f5:a2:79:21:47:af:7a:31:11:d3:45:d4:
d8:d0:e5:ef:a0:12:e0:54:48:57:d9:19:0f:0a:29:
11:6b:d7:c7:ed:6a:03:2a:f3:a2:6a:23:71:6a:46:
b6:cc:6e:8f:17:13:e4:f7:4d:23:9e:d6:ad:ba:ad:
56:89:d4:76:5b:f9:a3:85:d4:5a:0b:fa:a7:8e:8e:
ce:d5:ea:df:28:9d:f6:a5:70:d2:3d:05:41:a6:15:
12:38:e4:dc:ad:80:04:7f:eb:52:08:bb:6f:d0:c6:
a5:38:66:29:de:d9:4b:b4:8e:66:a1:c7:87:fa:28:
67:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:58:91:8F:95:0E:3F:6E:82:D8:AF:DC:40:3B:D6:A6:FB:06:5A:D6
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/5ViRj5UOP26C2K_cQDvWpvsGWtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.172.0/23
81.21.5.0-81.21.6.255
Signature Algorithm: sha256WithRSAEncryption
90:65:af:fb:ff:47:47:fd:d7:1f:cd:df:90:bb:31:29:74:94:
12:c2:bd:f5:e7:70:41:63:6c:b5:6c:c0:c0:7b:d4:6a:b7:02:
ca:cc:bf:1a:4e:44:00:79:dd:97:81:15:21:23:a5:e6:fd:8c:
08:df:35:59:f3:55:98:2f:d3:c8:15:c6:f9:4b:4f:e5:2b:fe:
ea:98:fd:6c:92:ed:2c:67:46:10:b1:f7:86:74:af:94:b4:54:
60:91:42:e5:98:a9:34:37:26:cf:e3:be:f0:7a:db:ee:33:6a:
14:d9:a3:4c:b8:ce:59:81:88:f2:7a:02:cf:d0:d6:3b:4b:3b:
85:40:7e:ba:45:a6:7b:75:ca:c4:37:d5:31:47:c5:9b:83:60:
9d:5a:b3:9e:59:e7:6f:3d:ae:a5:59:d2:f5:78:e1:24:54:15:
9f:8c:f1:e0:2d:1b:60:ce:c9:e0:f6:65:57:dd:ed:c4:de:55:
0f:e2:b8:ca:ae:1d:8c:4b:9c:7b:52:67:dd:e1:9a:e1:5a:d4:
1e:68:4c:29:5f:e1:88:07:08:b3:2c:54:74:71:e0:81:33:e8:
fa:7f:37:f9:58:4f:87:7b:5e:08:3a:27:a6:d0:51:ef:63:e1:
5b:bb:92:ca:76:15:5f:1b:c0:d8:17:d6:17:06:8a:ce:68:e1:
69:a0:05:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 10 13:45:24 2025 by rpki-client