Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/AlXMETnbyfFycOBJ00euLPdfF38.roa
File: AlXMETnbyfFycOBJ00euLPdfF38.roa (raw, json)
Hash identifier: dXmkb3+2s7D2AUe9nT6jFWSvFEG8fZEyvWFVr4j1v5Y=
Subject key identifier: 02:55:CC:11:39:DB:C9:F1:72:70:E0:49:D3:47:AE:2C:F7:5F:17:7F
Certificate issuer: /CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Certificate serial: 0197834E0651DFECCDCB7054CB35A4F22328
Authority key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/AlXMETnbyfFycOBJ00euLPdfF38.roa
Signing time: Wed 18 Jun 2025 13:50:18 +0000
ROA not before: Wed 18 Jun 2025 13:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 5.61.113.0/24 maxlen: 24
5.61.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:4e:06:51:df:ec:cd:cb:70:54:cb:35:a4:f2:23:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Validity
Not Before: Jun 18 13:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0255cc1139dbc9f17270e049d347ae2cf75f177f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:78:85:32:6f:b3:0f:06:04:e4:fb:2b:ae:cb:
85:1b:13:43:6a:72:4d:12:48:5a:3e:97:8b:26:7c:
0f:50:22:0c:84:b2:e8:53:3e:06:16:d9:bb:cb:49:
1b:e5:7e:f2:5a:3d:c9:b2:c3:2a:a8:7f:cd:c8:24:
b2:71:76:90:49:8d:7c:33:e2:42:36:04:5c:a6:a5:
72:32:7f:e0:45:a0:de:89:01:af:d5:2b:86:72:2b:
cc:4f:8e:77:1b:94:7b:54:d5:54:f0:65:36:ff:1d:
c9:5d:6b:69:f3:3f:80:3d:d7:a7:58:32:e9:c0:ac:
ee:5d:b0:fd:5b:9a:f6:f7:8b:42:41:42:4a:27:b6:
31:17:b5:91:f9:06:c4:49:29:c8:f7:fb:20:b7:2a:
9e:3e:61:6c:62:35:75:27:9e:4e:15:e5:5d:62:d0:
20:1a:3c:da:c7:a5:2e:ed:cb:c3:34:98:85:c3:12:
6e:65:20:53:84:0d:39:11:a5:77:65:5d:a8:4c:bd:
53:09:e4:cb:81:c2:e9:aa:3f:88:10:b6:7a:61:da:
cc:e1:e9:25:7b:c1:e9:ee:34:8e:92:f4:57:c4:d8:
39:93:41:2e:ff:7d:c3:a6:c0:76:66:96:9c:97:c7:
f2:a8:05:55:a1:89:c0:66:20:25:b9:c4:dc:7c:0b:
c7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:55:CC:11:39:DB:C9:F1:72:70:E0:49:D3:47:AE:2C:F7:5F:17:7F
X509v3 Authority Key Identifier:
keyid:B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/AlXMETnbyfFycOBJ00euLPdfF38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.113.0/24
5.61.119.0/24
Signature Algorithm: sha256WithRSAEncryption
32:92:15:76:9b:2c:db:a1:8b:be:bc:63:89:d6:c0:46:72:bf:
d3:39:88:ef:65:19:64:09:c6:ad:0b:b5:9f:74:9b:f3:15:fe:
c3:52:fc:3f:f8:c9:9f:a5:0e:c6:7d:66:c7:53:03:94:e0:bb:
f0:3c:63:13:41:1c:33:c7:db:70:5a:a6:15:29:73:ff:34:09:
24:f0:04:6c:2c:55:e6:99:f6:e9:48:01:82:dd:c0:bf:31:b7:
5e:df:13:ca:45:d6:2a:b2:7b:fa:4d:45:60:f3:88:ee:eb:b0:
4c:ab:79:06:ce:29:22:c2:19:b1:87:21:56:45:e5:c4:4d:e9:
67:59:ef:45:5c:6a:08:e9:15:dd:49:14:11:01:13:f3:cf:64:
5d:e1:87:47:9c:c9:3f:3a:a5:b5:69:83:7f:49:47:60:9f:1a:
9b:ee:17:bd:61:6d:35:8f:f5:cf:7c:e5:eb:d8:af:37:bf:13:
83:69:82:df:c9:71:3f:fe:62:15:16:4e:7d:32:f8:46:67:36:
80:91:be:09:b4:ba:5d:cf:17:bd:b1:5d:6a:5d:2b:25:14:a6:
b6:58:03:9c:b6:13:a7:ae:54:41:ea:44:65:f1:db:a3:b0:bf:
13:85:0a:66:34:c5:13:48:65:54:5c:e2:af:ca:68:7e:4f:99:
68:0b:4c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:32:56 2025 by rpki-client