Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/D5zkCGvDInlDpbccE6maEHTXDH4.roa
File: D5zkCGvDInlDpbccE6maEHTXDH4.roa (raw, json)
Hash identifier: cfIAsehmYCFnIdtwpUGrcGfMvy34nAmCT1DreezcKgY=
Subject key identifier: 0F:9C:E4:08:6B:C3:22:79:43:A5:B7:1C:13:A9:9A:10:74:D7:0C:7E
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC7EC384E9283B4680966E2719D61A
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/D5zkCGvDInlDpbccE6maEHTXDH4.roa
Signing time: Thu 02 Jan 2025 07:48:12 +0000
ROA not before: Thu 02 Jan 2025 07:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152704
IP address blocks: 103.25.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:7e:c3:84:e9:28:3b:46:80:96:6e:27:19:d6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f9ce4086bc3227943a5b71c13a99a1074d70c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:da:fe:18:39:b1:7b:c9:88:13:63:fa:d8:
d2:18:9e:79:86:c4:1a:45:84:53:d7:cd:de:52:93:
d2:46:35:ac:48:8d:b1:84:c2:2e:74:ea:8e:d3:f0:
de:0e:be:4a:10:66:09:77:16:9c:a8:fc:4a:f4:dd:
b7:8c:74:57:0a:98:b2:73:6f:8b:bc:55:04:f4:a5:
14:de:90:28:66:54:92:a3:7d:1f:78:97:24:d1:54:
c2:63:22:66:99:9d:79:53:d3:e7:bc:5b:6c:eb:0d:
de:22:82:fd:69:d4:77:5c:a6:a7:7c:2d:4e:a5:4e:
68:83:77:7b:a2:5f:d4:b9:1f:5b:d5:7b:64:4b:4b:
41:6a:73:46:60:38:fa:ed:de:6f:3f:f7:5a:25:e8:
c7:63:87:0f:5c:5b:97:e8:0e:42:6b:0a:cf:42:f9:
8d:0f:c6:b7:c1:6e:02:93:b7:24:87:67:d6:ea:26:
bf:1d:e9:52:55:ad:d4:9b:ba:11:a9:09:54:fd:c7:
7f:0f:8c:a0:03:8b:18:8b:a5:a7:41:dd:4a:d4:f3:
b2:5e:b9:4b:59:b0:49:38:c2:d9:21:87:4d:6c:54:
06:27:77:de:19:69:bd:99:69:b2:c9:83:05:db:01:
02:ac:a7:51:e6:28:88:e0:5c:95:c1:85:e3:9c:c1:
fd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9C:E4:08:6B:C3:22:79:43:A5:B7:1C:13:A9:9A:10:74:D7:0C:7E
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/D5zkCGvDInlDpbccE6maEHTXDH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.86.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:00:35:14:d1:78:37:e2:c3:5d:60:32:64:84:5b:78:cc:05:
f0:86:95:87:4c:e3:f3:0f:87:0b:fd:41:27:86:7f:d8:42:2b:
46:e1:a4:c2:fb:bf:7e:d8:f1:9f:c7:67:c2:86:e7:42:e3:db:
4f:d8:6c:3e:f9:ad:bd:96:ec:ff:02:29:5f:e9:0b:17:e8:1b:
2d:85:17:22:37:6a:50:b3:4d:6a:f0:dd:3e:ac:3e:77:63:ee:
df:2e:40:8c:8e:d8:e1:cd:c7:9d:14:6d:0e:6f:d3:17:29:91:
76:49:55:66:e2:02:e0:65:e1:3a:a1:c2:af:57:10:e5:26:86:
be:49:e6:62:d7:d1:64:13:80:1f:c0:04:9b:50:b6:cf:d4:8a:
9e:ba:74:85:fb:9f:ae:45:15:b3:41:cf:a5:75:36:72:c9:13:
e7:1f:98:50:ed:51:5c:7d:21:b3:a2:52:ed:05:fc:95:7a:59:
81:66:46:6a:e6:14:4b:14:36:45:b4:1e:23:a8:90:e3:16:34:
cf:4a:d3:4f:bf:40:67:0c:44:c3:67:7c:04:92:bc:70:96:7d:
18:ef:38:53:dd:7e:f4:e3:5a:db:a9:27:9f:a4:e0:28:4f:d4:
33:be:4e:bd:0b:f8:a8:96:5e:b3:bf:4a:92:a7:8c:62:af:d3:
01:3d:fd:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/H7DhOkoO0aAlm4nGdYaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjUwMTAyMDc0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjljZTQwODZiYzMyMjc5NDNhNWI3MWMxM2E5OWExMDc0ZDcwYzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjfa/hg5sXvJiBNj+tjSGJ55hsQa
RYRT183eUpPSRjWsSI2xhMIudOqO0/DeDr5KEGYJdxacqPxK9N23jHRXCpiyc2+L
vFUE9KUU3pAoZlSSo30feJck0VTCYyJmmZ15U9PnvFts6w3eIoL9adR3XKanfC1O
pU5og3d7ol/UuR9b1XtkS0tBanNGYDj67d5vP/daJejHY4cPXFuX6A5CawrPQvmN
D8a3wW4Ck7ckh2fW6ia/HelSVa3Um7oRqQlU/cd/D4ygA4sYi6WnQd1K1POyXrlL
WbBJOMLZIYdNbFQGJ3feGWm9mWmyyYMF2wECrKdR5iiI4FyVwYXjnMH9QwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA+c5AhrwyJ5Q6W3HBOpmhB01wx+MB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvRDV6a0NHdkRJbmxEcGJjY0U2bWFFSFRYREg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZxlWMA0G
CSqGSIb3DQEBCwUAA4IBAQB+ADUU0Xg34sNdYDJkhFt4zAXwhpWHTOPzD4cL/UEn
hn/YQitG4aTC+79+2PGfx2fChudC49tP2Gw++a29luz/Ailf6QsX6BsthRciN2pQ
s01q8N0+rD53Y+7fLkCMjtjhzcedFG0Ob9MXKZF2SVVm4gLgZeE6ocKvVxDlJoa+
SeZi19FkE4AfwASbULbP1IqeunSF+5+uRRWzQc+ldTZyyRPnH5hQ7VFcfSGzolLt
BfyVelmBZkZq5hRLFDZFtB4jqJDjFjTPStNPv0BnDETDZ3wEkrxwln0Y7zhT3X70
41rbqSefpOAoT9Qzvk69C/ioll6zv0qSp4xir9MBPf1+
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:52:47 2025 by rpki-client