Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/s2q3u5eyvYJCHvune6FWh078ryM.roa
File: s2q3u5eyvYJCHvune6FWh078ryM.roa (raw, json)
Hash identifier: 2YCwbxgoTgvHEolKVdcJpumrWybHAqExQ49U7X8ltpk=
Subject key identifier: B3:6A:B7:BB:97:B2:BD:82:42:1E:FB:A7:7B:A1:56:87:4E:FC:AF:23
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01941F8C3D44F01E7D79A839BF9BADAB2729
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/s2q3u5eyvYJCHvune6FWh078ryM.roa
Signing time: Wed 01 Jan 2025 01:47:51 +0000
ROA not before: Wed 01 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61112
IP address blocks: 103.75.70.0/24 maxlen: 24
103.76.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3d:44:f0:1e:7d:79:a8:39:bf:9b:ad:ab:27:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b36ab7bb97b2bd82421efba77ba156874efcaf23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7f:9b:cd:40:22:7a:2e:2f:7b:e9:ed:cc:dd:
d2:73:05:c4:e5:20:1c:5e:b7:a3:21:44:59:1e:a5:
75:ef:95:d9:f2:9d:9c:2a:9c:50:1a:6e:29:06:cb:
1b:72:b5:6a:6e:dd:e9:55:bc:13:4d:fc:a5:98:a5:
6e:f0:a3:1f:51:a0:3c:b6:9f:04:9e:cf:d2:2d:65:
86:51:cc:0e:d6:57:b0:25:2c:9a:48:c0:ce:ff:e3:
88:58:92:21:49:92:59:b7:39:b8:7c:32:b9:4f:76:
69:4a:63:ca:2b:a8:25:3f:87:60:00:d9:68:89:ec:
3b:a0:e1:61:43:1f:08:a0:b3:9d:9b:b7:18:c9:90:
10:72:b8:46:95:d9:22:a0:1e:9d:67:b0:a6:92:d8:
6d:1f:7b:6b:6a:8d:90:96:cf:de:51:93:b5:c6:50:
07:74:44:2f:bb:a7:b2:a5:c6:03:93:0f:99:dc:85:
eb:dd:5c:f7:65:dd:7a:46:b9:12:6c:fc:bd:55:6b:
94:70:9a:4a:12:95:07:6e:a1:43:c3:ad:61:7f:6f:
9a:26:79:a1:f3:8e:b4:6b:82:ea:78:b4:a6:2a:b7:
22:50:65:18:cb:e6:19:0a:48:f8:00:bd:46:7a:cf:
e2:63:42:f9:c6:8c:b0:7b:b8:92:0f:73:80:a5:8c:
55:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6A:B7:BB:97:B2:BD:82:42:1E:FB:A7:7B:A1:56:87:4E:FC:AF:23
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/s2q3u5eyvYJCHvune6FWh078ryM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.70.0/24
103.76.128.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:3c:94:c9:f9:10:9b:b1:dd:cd:16:39:6b:ac:9a:b4:58:0b:
7d:89:87:1d:ed:65:1f:5b:d5:31:ef:43:10:2a:34:c5:3b:37:
97:55:cc:3b:aa:fe:bf:e4:a7:95:b8:4f:3e:ca:e2:0a:a2:34:
63:85:06:a2:fb:94:53:a3:90:09:7c:cc:f3:46:eb:46:e6:58:
6b:90:98:89:6d:d6:21:1d:21:96:49:5e:34:ce:96:58:50:42:
7b:0d:fa:94:7b:f4:2d:e0:42:ea:1d:27:7e:a5:1c:6f:87:52:
3f:03:16:a9:64:e1:3c:9f:96:7b:ef:d8:13:18:1b:bc:51:3e:
18:1d:4e:73:38:06:d4:af:3e:5d:c6:55:56:6f:e3:e5:34:44:
41:ca:54:a2:99:df:fb:e4:7d:c9:d7:17:6a:8f:a7:94:39:b7:
0a:f3:11:9d:5c:33:e0:01:e3:df:1c:e6:3c:f6:64:24:5a:ea:
97:e4:bd:21:64:1c:18:c3:ab:dc:1b:03:84:e1:fe:a4:a2:a7:
e8:d2:23:94:40:63:8f:21:a2:51:07:56:05:e6:b1:75:65:43:
2f:55:54:f4:f0:5f:02:ce:52:f0:b2:ff:20:76:a6:e3:ea:07:
d2:d3:57:39:93:c9:9b:f0:92:b1:ac:66:91:ad:8c:b1:2f:4f:
a9:19:41:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:43:12 2025 by rpki-client