Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/hfuRGlqVtKevQ2aso0eoSK4pVxA.roa
File: hfuRGlqVtKevQ2aso0eoSK4pVxA.roa (raw, json)
Hash identifier: VpMw91SkiTDR66ATsA8lTKqxFJHRA3o6ciJ2kUnbAN8=
Subject key identifier: 85:FB:91:1A:5A:95:B4:A7:AF:43:66:AC:A3:47:A8:48:AE:29:57:10
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 0197AB6DB2922C8B93D9FEC4EF3330604AD0
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/hfuRGlqVtKevQ2aso0eoSK4pVxA.roa
Signing time: Thu 26 Jun 2025 08:49:42 +0000
ROA not before: Thu 26 Jun 2025 08:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 103.151.103.0/24 maxlen: 24
103.152.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ab:6d:b2:92:2c:8b:93:d9:fe:c4:ef:33:30:60:4a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Jun 26 08:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85fb911a5a95b4a7af4366aca347a848ae295710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:1e:4f:57:1d:ad:91:ed:34:82:0a:c6:3a:
9f:73:d5:e5:b4:19:48:68:33:17:c5:f2:03:6a:41:
d2:0f:93:0b:ca:29:2d:a9:5d:5a:65:a3:e3:b8:55:
cf:b7:25:30:44:6b:9d:61:ab:dc:82:e1:52:85:7b:
6a:1b:5b:10:c2:d6:48:3a:20:7d:dc:8f:46:e3:b7:
9d:74:08:07:c8:9f:7f:cd:bd:88:cf:eb:6c:eb:28:
66:9c:50:eb:4f:46:38:5a:21:60:6a:98:66:49:7a:
55:38:2e:32:74:07:d8:b7:4e:67:0e:f1:7e:61:06:
26:b9:d1:f2:21:e2:4b:c3:98:7b:f0:38:31:01:49:
e6:9e:3e:57:eb:ef:ee:41:7c:d3:99:bd:d9:25:fa:
5f:c4:31:f8:ec:65:7e:be:86:67:24:98:11:96:7f:
16:74:fa:c2:d3:01:b5:6a:b2:68:f4:18:4a:8d:b4:
3e:87:06:87:3f:30:45:ec:97:74:f8:23:c6:8f:02:
eb:38:81:bb:e1:14:21:e4:0d:99:51:18:ef:87:b3:
8a:a0:db:c7:1a:e7:86:5b:7d:67:b5:e6:2a:7e:c1:
65:3e:5b:38:96:48:f2:92:39:19:77:bb:e4:b1:d7:
39:a6:aa:da:c1:eb:db:a6:45:d5:00:40:36:38:89:
7e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FB:91:1A:5A:95:B4:A7:AF:43:66:AC:A3:47:A8:48:AE:29:57:10
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/hfuRGlqVtKevQ2aso0eoSK4pVxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.151.103.0/24
103.152.17.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:24:12:f1:15:22:34:9b:b1:14:20:d8:08:27:b5:bf:87:78:
82:12:92:80:7e:17:2a:26:94:c9:dd:94:ad:97:d4:e9:9d:8f:
65:5d:3c:8b:33:7a:83:dd:c9:f1:3b:5c:b7:a5:22:f6:db:58:
ff:51:81:84:21:37:d6:2e:b3:d8:10:e7:ec:fa:22:5d:78:9c:
b0:d1:67:88:03:0a:3b:cd:f2:df:18:e6:8e:b0:b3:40:6f:2a:
f2:c6:b8:3b:6c:ae:3c:86:d9:5b:7d:5f:50:19:50:2e:cb:26:
82:73:18:1a:b4:36:ad:f1:03:86:9e:a8:50:7f:68:5b:24:23:
1e:00:62:c9:e8:66:11:b3:21:25:67:90:99:2f:37:34:09:c2:
54:2f:21:ba:21:1b:24:f4:38:b6:f7:5d:4d:2a:21:88:e3:5b:
73:c1:10:38:cf:e7:39:ca:8f:6e:f9:49:d4:34:9a:10:67:cd:
97:59:4f:c5:13:3c:5f:f1:f9:32:3f:77:74:e1:e5:14:b3:d6:
64:aa:1a:5f:62:e5:35:d3:b3:ee:45:64:97:3a:64:1f:f1:51:
cb:a6:9b:76:65:9a:e5:f4:25:52:af:55:f8:e7:f3:0a:67:d8:
9a:45:15:cc:20:09:81:d8:63:24:8b:d7:44:20:26:28:ca:db:
73:b4:fc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:24:54 2025 by rpki-client