Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/aitzywJ0j_dARhrfoxNyxBJoyQk.roa
File: aitzywJ0j_dARhrfoxNyxBJoyQk.roa (raw, json)
Hash identifier: dC62hnkZaqFuyH9e5I1F2VTnP1nJrO3yupT8VEw+fvg=
Subject key identifier: 6A:2B:73:CB:02:74:8F:F7:40:46:1A:DF:A3:13:72:C4:12:68:C9:09
Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Certificate serial: 01942521EAF053151A50FEB5AA88D8DD0131
Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/aitzywJ0j_dARhrfoxNyxBJoyQk.roa
Signing time: Thu 02 Jan 2025 03:49:27 +0000
ROA not before: Thu 02 Jan 2025 03:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 103.39.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ea:f0:53:15:1a:50:fe:b5:aa:88:d8:dd:01:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Validity
Not Before: Jan 2 03:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a2b73cb02748ff740461adfa31372c41268c909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:29:28:e7:29:ba:ae:bb:48:f8:55:26:36:
65:28:e4:0a:d7:26:ce:be:08:b0:a4:0d:50:e9:56:
65:45:23:d7:33:66:34:35:85:82:87:f8:c8:47:d9:
46:5c:0f:fd:c3:bf:e8:e3:80:d0:f0:ef:b3:0f:35:
5e:17:22:4d:5b:c3:ca:fb:38:b2:73:3a:9f:33:6f:
94:68:67:d4:f0:5b:5a:84:94:e0:e1:7f:76:05:d8:
11:75:a8:f0:6b:c3:79:be:d4:18:bd:94:82:d2:6e:
d8:79:80:0f:52:ef:8a:62:93:18:31:ea:1c:16:dc:
57:12:a2:fd:9a:c5:16:55:57:2f:63:5e:32:3a:ba:
76:5f:7e:c2:4f:09:a2:91:29:d7:78:06:05:34:1b:
00:f0:06:34:6e:81:61:c9:e6:d6:de:ef:57:53:23:
76:7d:5f:d6:8c:39:cc:33:6f:16:4a:cb:53:56:23:
e4:bb:22:e3:4d:fa:4c:47:92:29:15:41:13:4a:ae:
c5:9f:ea:88:25:11:fe:50:13:4c:7f:93:4f:84:4c:
79:02:1d:d5:ca:ee:2e:c4:eb:5e:83:3e:54:d1:1e:
d9:49:0d:8a:cf:24:29:90:08:05:ac:af:3d:a6:74:
f3:bd:07:73:c1:22:4d:15:51:6b:3d:5e:62:6d:af:
36:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2B:73:CB:02:74:8F:F7:40:46:1A:DF:A3:13:72:C4:12:68:C9:09
X509v3 Authority Key Identifier:
keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/aitzywJ0j_dARhrfoxNyxBJoyQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.40.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:54:42:ab:0a:a0:b1:66:e5:34:38:6c:16:11:46:2d:fc:c9:
e6:ad:af:63:65:40:aa:48:69:68:40:f9:06:14:b9:db:ac:52:
fd:f9:16:14:f3:fd:34:b2:58:82:21:8c:c4:a7:15:67:80:57:
0c:b8:1a:6e:61:bf:3e:70:ac:70:f6:50:3e:b5:2b:b3:1c:b8:
c3:1b:6f:9e:ed:d3:d5:2a:af:1e:6a:1c:58:08:4d:93:5b:ad:
bc:d6:fe:1c:d2:6f:66:78:9d:23:6f:0f:61:94:a7:bd:b3:3e:
c7:f4:08:72:0c:86:74:23:d9:f6:03:8a:db:45:87:07:1d:81:
5c:02:c4:cf:d5:2e:76:2e:55:ba:4a:c5:1a:f5:ef:0f:28:79:
f9:45:4a:7a:05:8d:49:a8:13:c2:66:4a:be:99:2a:9f:60:94:
7c:b6:0f:17:f7:bb:cf:ee:ac:e6:28:29:2f:c9:c7:32:68:d5:
87:5c:bd:7f:37:b5:4a:ff:5f:ca:e1:95:19:c0:82:5d:e1:84:
ec:0b:f1:a7:cf:e1:24:61:e6:f6:ca:89:ad:72:6f:21:78:35:
16:8b:bf:e8:40:d6:f4:05:e3:08:e2:b0:1a:34:fe:d2:5e:ca:
e1:2a:be:61:4c:36:20:8e:76:e4:b8:c6:49:57:e1:cd:de:4a:
39:94:4d:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIerwUxUaUP61qojY3QExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NzZkN2QwYmJjYzA4NTE2NTIzZDVkZjI0ZTY4ODJiNzJj
YTU2OTMwHhcNMjUwMTAyMDM0OTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTJiNzNjYjAyNzQ4ZmY3NDA0NjFhZGZhMzEzNzJjNDEyNjhjOTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuewpKOcpuq67SPhVJjZlKOQK1ybO
vgiwpA1Q6VZlRSPXM2Y0NYWCh/jIR9lGXA/9w7/o44DQ8O+zDzVeFyJNW8PK+ziy
czqfM2+UaGfU8FtahJTg4X92BdgRdajwa8N5vtQYvZSC0m7YeYAPUu+KYpMYMeoc
FtxXEqL9msUWVVcvY14yOrp2X37CTwmikSnXeAYFNBsA8AY0boFhyebW3u9XUyN2
fV/WjDnMM28WSstTViPkuyLjTfpMR5IpFUETSq7Fn+qIJRH+UBNMf5NPhEx5Ah3V
yu4uxOtegz5U0R7ZSQ2KzyQpkAgFrK89pnTzvQdzwSJNFVFrPV5iba827QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGorc8sCdI/3QEYa36MTcsQSaMkJMB8GA1UdIwQY
MBaAFHl219C7zAhRZSPV3yTmiCtyylaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kZDY5NDMtNmZjZS00MzA5LTg3MTMt
ODU0MTgyY2IwNmE2LzEvYWl0enl3SjBqX2RBUmhyZm94Tnl4QkpveVFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kZDY5NDMtNmZjZS00MzA5LTg3MTMtODU0MTgyY2IwNmE2
LzEvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZycoMA0G
CSqGSIb3DQEBCwUAA4IBAQA9VEKrCqCxZuU0OGwWEUYt/Mnmra9jZUCqSGloQPkG
FLnbrFL9+RYU8/00sliCIYzEpxVngFcMuBpuYb8+cKxw9lA+tSuzHLjDG2+e7dPV
Kq8eahxYCE2TW6281v4c0m9meJ0jbw9hlKe9sz7H9AhyDIZ0I9n2A4rbRYcHHYFc
AsTP1S52LlW6SsUa9e8PKHn5RUp6BY1JqBPCZkq+mSqfYJR8tg8X97vP7qzmKCkv
yccyaNWHXL1/N7VK/1/K4ZUZwIJd4YTsC/Gnz+EkYeb2yomtcm8heDUWi7/oQNb0
BeMI4rAaNP7SXsrhKr5hTDYgjnbkuMZJV+HN3ko5lE3w
-----END CERTIFICATE-----
Generated at Fri Apr 11 19:00:18 2025 by rpki-client