Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/9_390f2f-M8hYOk7nzURe9equgQ.roa
File: 9_390f2f-M8hYOk7nzURe9equgQ.roa (raw, json)
Hash identifier: owTgcA4dyGF3dIAB8I5x/+WpBhjYyAEll9e73TYZ1zg=
Subject key identifier: F7:FD:FD:D1:FD:9F:F8:CF:21:60:E9:3B:9F:35:11:7B:D7:AA:BA:04
Certificate issuer: /CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Certificate serial: 0197834E05D3DAE45832E33537B8D4CE3BCF
Authority key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/9_390f2f-M8hYOk7nzURe9equgQ.roa
Signing time: Wed 18 Jun 2025 13:50:17 +0000
ROA not before: Wed 18 Jun 2025 13:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 5.61.113.0/24 maxlen: 24
5.61.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:4e:05:d3:da:e4:58:32:e3:35:37:b8:d4:ce:3b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Validity
Not Before: Jun 18 13:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7fdfdd1fd9ff8cf2160e93b9f35117bd7aaba04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d5:a9:9d:48:fd:0d:f7:22:57:31:c5:cf:46:
de:7c:12:4a:21:ea:48:c1:bd:b5:e4:6e:97:c5:24:
9c:12:3f:17:9e:8d:6a:32:be:92:44:9e:3d:7c:f2:
58:2b:3a:7d:08:2d:54:1f:37:79:98:3f:a9:da:42:
20:eb:48:25:2a:2a:07:16:ff:72:f2:f2:94:27:84:
59:2b:6a:3b:67:86:56:09:11:e6:48:fe:46:56:aa:
23:15:04:86:83:d4:33:81:7a:26:86:36:3e:5b:82:
48:d6:d5:b4:43:e0:f7:ab:69:70:97:4d:48:ba:c3:
b0:32:c1:b9:5e:96:15:c4:7b:67:7f:5a:ed:d8:e5:
14:e7:1d:7a:45:f5:aa:79:6d:eb:4a:e5:93:0d:fe:
d2:c8:0a:96:e4:bd:4b:32:a5:74:c9:ba:e6:f6:f7:
5b:c4:b6:82:60:fb:90:0e:86:17:c2:59:10:11:87:
4a:28:b4:da:1c:f7:6b:38:5d:1e:52:25:30:16:b6:
30:ed:46:76:4e:5a:26:56:a2:96:47:f5:b1:df:1f:
a9:3d:88:ce:91:5b:16:01:19:71:52:71:a0:b7:3c:
aa:77:10:f5:83:72:09:be:ac:6f:cd:54:51:13:57:
99:9c:71:83:48:97:24:f1:ff:40:a2:14:73:66:36:
13:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FD:FD:D1:FD:9F:F8:CF:21:60:E9:3B:9F:35:11:7B:D7:AA:BA:04
X509v3 Authority Key Identifier:
keyid:B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/9_390f2f-M8hYOk7nzURe9equgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.113.0/24
5.61.119.0/24
Signature Algorithm: sha256WithRSAEncryption
01:80:ab:02:f3:f9:ae:af:6a:6f:8a:51:a9:54:c9:db:5b:6f:
f7:d0:cb:96:08:49:8a:67:7e:f7:4e:6f:e2:34:9a:62:a2:69:
12:8e:d6:57:81:e7:3d:6c:f0:60:f3:2a:b6:13:1c:3c:71:b6:
1f:5c:7b:39:73:ad:76:7e:7d:13:ce:5d:99:66:44:97:b7:d0:
a2:75:67:70:8e:8b:b8:ae:9f:d2:e5:0e:54:55:31:7d:a3:09:
6a:d4:51:17:f8:5c:14:11:94:91:49:a8:7a:be:66:bc:45:9c:
61:ec:ff:87:44:59:1e:09:33:c9:29:cd:20:71:91:bb:63:2a:
54:1e:45:f2:8d:c0:07:ff:10:d1:19:42:dd:32:bc:d4:c6:f3:
14:8d:f7:17:5c:95:cd:ca:65:d0:22:17:1d:69:44:06:c9:94:
86:29:4d:72:98:3e:7a:9b:88:97:29:d6:11:c1:c2:2e:95:8b:
8d:97:a4:96:f2:a3:29:a2:23:cb:95:2f:59:43:7a:15:02:30:
ef:4a:d2:b6:bf:98:e1:67:3f:bd:2e:d0:ce:a8:46:f2:83:9f:
ec:62:f5:12:fe:11:27:9a:e8:67:a7:8e:44:19:22:e4:41:6c:
50:83:a6:c3:8c:59:5b:0a:88:47:a3:a7:4c:fe:23:36:34:cc:
b5:ab:2d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:44:26 2025 by rpki-client