Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/UW0epwVEpoAkNtu-V4x3YrXRSUs.roa
File: UW0epwVEpoAkNtu-V4x3YrXRSUs.roa (raw, json)
Hash identifier: xIyXjKixY4XKYZEsN7HnHrxPiRZlUBXCJ49V/lsGPFk=
Subject key identifier: 51:6D:1E:A7:05:44:A6:80:24:36:DB:BE:57:8C:77:62:B5:D1:49:4B
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0198329B75D37CE7D66FEDCE7066C791C20B
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/UW0epwVEpoAkNtu-V4x3YrXRSUs.roa
Signing time: Tue 22 Jul 2025 14:48:25 +0000
ROA not before: Tue 22 Jul 2025 14:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211522
IP address blocks: 45.134.12.0/22 maxlen: 22
103.71.22.0/24 maxlen: 24
103.71.23.0/24 maxlen: 24
103.249.132.0/24 maxlen: 24
103.249.133.0/24 maxlen: 24
103.249.134.0/24 maxlen: 24
103.249.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:32:9b:75:d3:7c:e7:d6:6f:ed:ce:70:66:c7:91:c2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jul 22 14:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=516d1ea70544a6802436dbbe578c7762b5d1494b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a1:68:d7:94:11:9a:5f:37:5b:61:0c:ca:9b:
6d:43:12:54:be:76:af:92:54:80:e3:dd:46:52:c5:
00:80:9b:bf:08:cd:a3:86:0b:70:23:4a:6e:0a:54:
df:dd:98:d7:99:48:4a:2f:0d:1f:29:e3:75:81:d3:
48:50:23:2f:c9:ad:03:5e:ac:ec:c8:ed:c4:ea:7c:
f0:2b:bc:b6:5b:7e:20:9c:b2:48:62:0b:71:33:3b:
44:89:32:8f:c5:f4:b0:80:d8:9e:28:fb:eb:8a:08:
a5:5c:8f:54:81:6a:de:87:d0:fa:16:a1:ad:e6:55:
7f:95:c4:04:de:da:f0:d5:3c:ff:59:cb:92:1c:09:
1d:31:fe:b2:e3:dc:c7:97:ca:e5:57:4a:37:0c:e7:
84:79:c1:2e:c5:a9:b0:0b:17:0d:a3:99:6d:ee:d5:
04:02:af:4b:9d:65:cc:c3:d3:74:0c:46:3c:ce:df:
6d:72:6d:95:cb:ec:e6:60:a3:04:a7:72:45:9c:45:
c7:42:2c:6e:c8:16:0b:75:1f:19:ac:de:27:55:1e:
ad:95:b9:14:f2:36:a4:4b:23:ee:7f:dc:af:90:7a:
d2:95:71:d1:29:50:83:d1:d1:f4:53:6f:17:58:83:
4b:d5:77:12:70:1e:d9:8b:a4:32:f7:4b:60:04:7e:
13:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6D:1E:A7:05:44:A6:80:24:36:DB:BE:57:8C:77:62:B5:D1:49:4B
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/UW0epwVEpoAkNtu-V4x3YrXRSUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.12.0/22
103.71.22.0/23
103.249.132.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:15:2e:a3:94:20:8d:02:5b:0c:71:55:bb:56:b2:2c:84:ef:
31:9b:a2:ae:53:63:57:9c:5f:77:2b:e4:ed:fb:ee:7e:8d:bd:
e9:f0:06:6d:3d:38:f1:16:cf:5f:92:9c:45:5b:19:37:35:74:
8b:9a:09:ee:21:5b:e6:25:12:62:ae:6b:62:9f:57:8a:e0:3e:
73:5d:78:2a:6b:08:bc:7d:e6:4d:e1:7a:2d:89:df:02:c7:36:
c0:4a:e9:c1:8f:b0:a5:ef:3f:7e:a4:c3:a9:09:0e:de:2b:36:
1f:9e:0f:29:92:99:a1:9c:36:d1:9d:7c:36:e5:08:a6:8d:9a:
b3:82:be:b6:82:1d:8c:f1:63:de:18:92:75:23:19:01:7e:52:
32:60:3e:f9:93:3d:92:cf:85:3c:ba:dd:2f:d9:f7:37:53:83:
23:15:3a:d1:0e:1c:c6:6f:5f:b0:19:2f:e8:e9:dd:c8:35:28:
f7:ad:bd:db:b0:93:56:c8:99:50:a6:e5:65:88:d2:e6:0a:e7:
a2:a9:d7:c3:d0:09:73:d1:f8:72:58:3b:c5:ee:e5:9e:36:16:
8e:25:ec:df:7a:16:fd:ac:09:69:9c:37:65:32:3b:70:71:1b:
23:06:b7:2f:23:0d:a6:f2:56:43:bd:11:db:54:8b:f2:65:d8:
3b:92:f3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:27:01 2025 by rpki-client