Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/YErFO59kWt9xoLXx1-Pi5aldnP8.roa
File: YErFO59kWt9xoLXx1-Pi5aldnP8.roa (raw, json)
Hash identifier: DUxqgIUjmMIEsJm9dnaOffY6+caGRgj4+8pmRJ5gRyw=
Subject key identifier: 60:4A:C5:3B:9F:64:5A:DF:71:A0:B5:F1:D7:E3:E2:E5:A9:5D:9C:FF
Certificate issuer: /CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Certificate serial: 019787920595E1F9EE8D7FB7DF018C000AFE
Authority key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/YErFO59kWt9xoLXx1-Pi5aldnP8.roa
Signing time: Thu 19 Jun 2025 09:43:03 +0000
ROA not before: Thu 19 Jun 2025 09:43:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199373
IP address blocks: 5.61.113.0/24 maxlen: 24
5.61.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:92:05:95:e1:f9:ee:8d:7f:b7:df:01:8c:00:0a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Validity
Not Before: Jun 19 09:43:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=604ac53b9f645adf71a0b5f1d7e3e2e5a95d9cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:db:77:28:9d:2d:b0:6c:a4:1d:90:16:a4:c4:
33:12:80:9a:37:b6:f6:75:5b:a8:6d:c4:7f:84:60:
c0:42:28:9c:30:43:1a:5d:cf:21:29:a3:9e:ae:2a:
25:d2:90:93:9d:26:f0:88:02:b8:fb:3e:96:95:b9:
ec:4c:d5:f5:25:53:16:1e:72:64:8f:d6:ba:67:78:
3a:ce:81:3f:45:ee:3a:ed:59:9e:ee:d8:61:2a:a3:
44:10:78:21:08:1e:d4:14:67:07:c4:f1:c6:14:51:
c5:fa:33:03:bc:bb:a0:9c:31:9e:cf:9b:93:60:0d:
1a:cb:a5:80:6f:78:67:f7:c6:2d:69:1f:ec:f0:da:
68:cc:c4:6f:07:1b:28:82:f6:3f:54:c8:63:9e:c5:
38:28:1f:7e:63:d3:57:e5:4c:3a:be:0f:2d:fa:9a:
31:6e:cd:c7:fa:87:b5:69:59:8d:10:05:a2:83:b8:
46:ea:3d:64:c4:de:90:31:68:b4:07:16:96:37:60:
9b:a7:36:30:46:24:38:f7:46:8f:a4:50:d7:90:db:
7e:1d:45:bc:55:93:02:ed:b4:47:ef:2a:f7:30:21:
da:58:7e:f5:47:33:c2:ef:12:91:04:66:e8:1e:ce:
c4:28:9a:e2:28:c5:41:75:3e:43:03:fa:27:b0:7c:
8c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4A:C5:3B:9F:64:5A:DF:71:A0:B5:F1:D7:E3:E2:E5:A9:5D:9C:FF
X509v3 Authority Key Identifier:
keyid:B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/YErFO59kWt9xoLXx1-Pi5aldnP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.113.0/24
5.61.119.0/24
Signature Algorithm: sha256WithRSAEncryption
86:70:ff:f5:b8:d3:0c:88:01:ee:b2:61:8a:e6:17:6f:db:ab:
78:a9:af:94:7c:ba:f4:80:94:38:46:22:91:ab:17:ed:30:2e:
0a:25:57:6a:96:47:74:83:9f:a6:85:89:f6:5e:8a:da:46:09:
ce:07:56:43:56:83:1c:4b:b3:53:6e:6f:65:23:d5:34:75:21:
31:3a:d8:59:b1:c8:7f:69:9c:e6:05:f1:60:e1:7c:7b:85:3b:
7b:c7:5d:27:2f:0b:bc:e7:75:fa:4a:d0:4d:b1:8d:bf:2b:1c:
92:92:3c:c4:8c:b7:98:cd:4f:0c:77:1c:19:16:32:a9:f4:7f:
62:fd:5b:58:76:47:38:27:9e:2b:6b:66:b9:bb:2c:e8:70:6a:
95:0f:fd:83:a3:46:04:ab:fa:5d:dd:dc:c6:55:fa:0a:8f:38:
75:78:9d:bb:38:3a:94:2f:04:63:f8:2c:8f:92:1f:90:12:84:
68:cc:0c:e5:52:a0:f0:e2:01:45:84:98:5f:99:c7:58:c9:35:
a3:fd:d9:94:ea:11:59:04:65:3c:8d:cd:69:fe:2a:30:13:73:
d6:8c:e4:69:6d:f2:0c:c0:c4:0a:e8:22:c9:2c:e8:f9:68:ac:
97:be:c7:c4:f2:46:76:37:0c:b5:f1:df:ac:c3:48:1c:0b:0a:
fe:70:b2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:09:02 2025 by rpki-client