Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/3V6q1-UeO36fLmJlReM_Gz13sMA.roa
File: 3V6q1-UeO36fLmJlReM_Gz13sMA.roa (raw, json)
Hash identifier: PylpUbq0fhCG4XR5C05AhKT8758HGTKJAPQDgwx9IwI=
Subject key identifier: DD:5E:AA:D7:E5:1E:3B:7E:9F:2E:62:65:45:E3:3F:1B:3D:77:B0:C0
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 01972A8872B8215F915E327291D28BA35057
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/3V6q1-UeO36fLmJlReM_Gz13sMA.roa
Signing time: Sun 01 Jun 2025 08:07:54 +0000
ROA not before: Sun 01 Jun 2025 08:07:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206596
IP address blocks: 103.130.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2a:88:72:b8:21:5f:91:5e:32:72:91:d2:8b:a3:50:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Jun 1 08:07:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd5eaad7e51e3b7e9f2e626545e33f1b3d77b0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:15:58:86:12:99:8b:fe:3a:4f:fb:43:c7:15:
62:47:ba:d5:dc:c1:a2:02:69:5f:f1:87:d7:4a:b3:
5a:81:59:ec:67:a5:ea:c8:3a:d3:a1:b8:28:a5:7b:
30:e1:26:fc:f8:7b:3e:2d:e7:a6:f0:4d:b5:24:9b:
c6:ed:5a:29:e1:1b:73:af:ff:d6:52:29:71:13:db:
25:2f:fd:7a:21:76:81:e7:5a:9e:0a:c0:8f:3e:f8:
67:75:50:c6:05:86:ca:f7:9a:67:c5:01:11:ff:01:
20:a6:6a:06:22:e0:fc:73:71:ff:ee:e4:96:68:20:
e9:f2:51:b7:aa:6d:8d:6e:24:15:43:45:df:b7:2a:
71:fe:4e:02:cd:65:79:7b:fc:ba:65:02:9b:6a:30:
71:20:2e:9c:03:45:72:d2:0c:f6:62:bb:ff:eb:a0:
d9:33:48:76:27:09:50:b2:b9:88:fb:34:57:ac:52:
65:95:32:66:4d:14:c5:e8:ad:49:cb:bc:be:82:b8:
9f:5d:bd:f9:ad:a3:54:14:7e:13:58:22:49:6e:a3:
56:9f:c7:05:ba:9a:00:3a:0e:37:44:01:0b:65:ec:
c1:9b:46:c8:11:02:22:bc:23:2d:02:de:62:c4:70:
c5:3b:25:8c:9b:20:4a:3c:37:74:6e:21:54:64:41:
b6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5E:AA:D7:E5:1E:3B:7E:9F:2E:62:65:45:E3:3F:1B:3D:77:B0:C0
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/3V6q1-UeO36fLmJlReM_Gz13sMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.130.147.0/24
Signature Algorithm: sha256WithRSAEncryption
34:28:72:ef:e2:c0:34:07:cc:99:4b:81:68:8f:fb:72:35:21:
bc:8b:7a:1d:97:e6:35:1c:9d:96:24:27:3f:db:d3:42:3f:b8:
ed:f1:44:61:7a:0b:29:17:3f:3e:55:e1:27:17:83:7a:d3:14:
41:d4:ea:50:82:5d:25:1d:5c:6b:f3:83:19:b9:8a:13:40:2d:
28:c4:e4:1f:21:81:8c:50:99:02:c5:58:fa:90:e7:4f:d4:2b:
03:8c:9f:c3:91:b1:ed:19:10:58:bb:f0:01:51:ce:85:e9:23:
1d:56:6e:22:16:44:7a:8e:70:32:53:49:ef:5c:d1:f3:5b:2b:
0b:94:ef:28:45:e0:72:ed:cd:04:ad:bf:5f:51:a9:f6:d7:3d:
b6:52:24:f7:8c:9c:7a:21:6d:e4:7f:1d:a1:f9:20:86:03:fc:
67:71:53:1d:d4:7e:8b:91:22:9b:99:2c:dd:19:a2:d7:6e:b5:
b4:70:ba:56:ee:74:ad:f1:22:aa:ff:95:19:ba:34:9e:26:c6:
1c:ab:d4:fb:69:76:f3:57:9e:40:26:38:09:d2:a2:56:db:67:
a9:8f:1f:32:b7:b1:76:e4:2b:62:dd:b4:b5:e2:8e:63:f4:53:
04:23:f9:c4:d4:a2:00:2f:8f:d4:4e:17:6b:f0:84:4d:8b:f7:
bf:27:68:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:29:00 2025 by rpki-client