Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/sDmkBA1dK9BujbOx1JUeSinCGs0.roa
File: sDmkBA1dK9BujbOx1JUeSinCGs0.roa (raw, json)
Hash identifier: cbr13ejwtvQbyoyvg+8X0OR/MTCPmFSmC5KjzxF0U7I=
Subject key identifier: B0:39:A4:04:0D:5D:2B:D0:6E:8D:B3:B1:D4:95:1E:4A:29:C2:1A:CD
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01941F8C3C53A4270D503D8165EF84930307
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/sDmkBA1dK9BujbOx1JUeSinCGs0.roa
Signing time: Wed 01 Jan 2025 01:47:51 +0000
ROA not before: Wed 01 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 103.75.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3c:53:a4:27:0d:50:3d:81:65:ef:84:93:03:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b039a4040d5d2bd06e8db3b1d4951e4a29c21acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9b:31:74:c8:77:3e:94:c4:43:e3:f1:d0:41:
7c:83:ea:19:5d:dc:e2:5c:b3:a0:85:6b:6b:38:2c:
7c:72:c1:0f:43:06:ba:8e:ec:e2:e3:31:72:43:44:
18:6b:e7:6a:9c:af:77:62:f4:94:15:8a:fe:88:cf:
42:6d:47:04:4b:5b:64:ea:fa:b6:9a:ee:08:1e:7e:
6b:43:ac:06:28:e8:44:4e:cd:19:8f:c9:52:73:0d:
6d:e3:0e:b9:e9:38:38:8b:3c:32:70:40:a6:21:2d:
73:e7:ef:2e:6c:b2:bb:41:e7:e6:05:93:d0:bf:13:
1a:50:c0:90:84:03:67:58:ad:61:b8:38:84:bb:bb:
53:05:d8:27:c3:e5:25:5a:7e:fe:fc:f3:b7:07:f2:
de:59:1c:92:d7:7a:0b:c3:38:40:61:a1:b8:24:2c:
0e:d9:6d:65:13:c4:95:30:82:d0:69:e2:dc:17:9f:
0d:30:9b:a5:5e:26:e1:7e:8e:0f:7d:88:b4:1c:af:
63:74:86:53:b9:a8:1f:86:73:cd:41:43:dc:51:24:
8e:df:b4:e3:fa:27:61:bd:a8:77:3e:9b:8a:73:96:
21:ab:63:00:06:1d:28:27:5c:c0:df:11:72:e1:f4:
72:7e:91:bb:2f:7a:5c:25:5d:3e:be:25:24:f8:c1:
9c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:39:A4:04:0D:5D:2B:D0:6E:8D:B3:B1:D4:95:1E:4A:29:C2:1A:CD
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/sDmkBA1dK9BujbOx1JUeSinCGs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.69.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:1e:b4:cd:bf:37:99:6e:4b:5a:b2:e4:ad:cb:25:2c:c0:37:
63:db:ca:7c:04:2a:54:59:81:d9:c5:05:4e:fd:ba:04:23:c2:
dd:53:11:5d:e1:74:aa:3e:2b:57:6b:c4:66:18:c0:d2:d1:05:
8a:59:ee:04:86:80:e0:96:f1:2f:6a:66:2e:a3:a7:29:15:d5:
ce:49:4e:98:96:c2:9c:f7:bd:24:c0:5c:a7:c1:7e:fe:f1:75:
18:f0:f7:2c:39:ce:d4:45:43:d0:7b:0a:da:31:87:e6:34:ab:
dd:40:78:a2:d4:c2:43:3f:49:1c:46:bf:d5:e4:da:ae:51:2e:
04:53:de:1d:ed:70:7f:54:c3:73:50:3d:e9:d2:03:a7:3e:d0:
b9:13:d1:91:ca:09:42:27:c2:92:6b:16:ee:31:44:51:42:91:
cd:e1:cf:39:d5:97:c8:90:10:f8:0b:33:b7:04:6a:c3:f1:93:
e9:f0:be:81:be:d9:2d:a6:30:8b:c3:b8:32:13:e9:58:c3:84:
4e:58:2d:41:2e:c6:ad:4f:03:b1:b8:65:79:e5:81:02:da:19:
fb:1c:70:9a:c5:19:71:d3:66:72:a7:14:a9:71:61:b3:0a:ef:
83:78:2a:62:aa:81:35:2e:17:29:51:ea:f4:86:2d:29:9d:e2:
c2:1a:b6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:13:10 2025 by rpki-client