Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/uCMSjxkOkfzHdypyvUOewV8qw9A.roa
File: uCMSjxkOkfzHdypyvUOewV8qw9A.roa (raw, json)
Hash identifier: bfz4N8RVke/0ZUN0349iWnmXb4vrOxiJS20dfxPr4zQ=
Subject key identifier: B8:23:12:8F:19:0E:91:FC:C7:77:2A:72:BD:43:9E:C1:5F:2A:C3:D0
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 01960FF88E5794EB11D1B7EE6D895950CACE
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/uCMSjxkOkfzHdypyvUOewV8qw9A.roa
Signing time: Mon 07 Apr 2025 11:17:49 +0000
ROA not before: Mon 07 Apr 2025 11:17:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63801
IP address blocks: 103.31.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:f8:8e:57:94:eb:11:d1:b7:ee:6d:89:59:50:ca:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Apr 7 11:17:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b823128f190e91fcc7772a72bd439ec15f2ac3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:d2:77:d4:7f:c5:55:f9:73:24:f3:8a:38:
20:c3:a6:9a:d7:10:10:23:57:e3:07:bb:2a:3f:9b:
a0:c5:e4:d2:3d:9b:69:e8:63:86:34:b4:ce:6f:41:
3a:eb:92:39:20:5f:2d:13:aa:25:37:fc:ec:3a:bf:
35:0f:9f:4b:5a:f1:df:34:ac:63:d1:f4:5e:ea:16:
95:1b:91:48:96:6e:7e:ee:f4:14:98:42:58:a6:a1:
11:68:78:1d:24:40:94:07:3f:02:27:8c:33:be:52:
9e:86:fc:0b:02:0b:b5:a9:46:ba:6d:df:b0:48:36:
f8:b6:05:1d:6c:55:14:be:eb:0f:fe:ef:2a:0e:1a:
39:3b:5b:da:8b:e0:16:df:71:97:26:15:58:5f:9d:
f4:49:1e:55:30:95:13:75:43:4f:9c:b0:6b:a8:35:
7a:e9:81:37:8b:97:2e:1f:76:4f:37:dc:06:82:35:
a9:55:65:16:d0:84:6f:5b:0b:7e:6f:fe:aa:0e:71:
97:d6:d2:09:d1:98:96:bf:51:72:26:9e:7c:b2:ca:
24:c2:e6:8c:26:66:11:53:6b:4e:6a:22:88:84:ae:
37:b9:46:cf:bc:9c:97:cb:4a:ff:70:7d:f8:0f:49:
bc:da:eb:11:a1:a9:bf:b7:09:d7:9f:4d:4b:54:00:
dd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:23:12:8F:19:0E:91:FC:C7:77:2A:72:BD:43:9E:C1:5F:2A:C3:D0
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/uCMSjxkOkfzHdypyvUOewV8qw9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.77.0/24
Signature Algorithm: sha256WithRSAEncryption
24:6e:47:87:17:52:59:55:b9:ad:dc:ad:d5:0e:82:cc:f9:8f:
34:10:03:f9:54:62:22:13:fc:dc:5b:45:09:22:8a:25:42:60:
79:2c:8e:2f:d0:e0:39:43:95:60:62:71:10:a8:dd:8a:b1:6b:
61:be:7f:fd:57:a5:8b:87:cc:7e:cc:2e:58:a1:f7:84:6b:c5:
e1:38:7e:48:2e:95:1b:c9:a4:fd:a9:20:f6:9e:0b:6b:17:1b:
b3:69:82:f7:14:b0:3d:a6:9f:a6:97:53:00:72:3e:80:da:82:
59:82:8f:14:50:00:da:b5:46:dc:bc:5a:c5:25:3f:9a:fb:6a:
a2:45:dd:91:c0:2d:a0:18:da:4d:7b:07:9e:96:77:db:26:67:
48:d7:41:e6:a0:cf:6d:9c:8e:ac:8d:a3:ee:29:3b:80:ca:29:
56:45:cf:7d:81:b1:09:17:24:d9:44:c2:ed:7f:9f:9b:ce:b8:
66:e5:ed:01:b7:66:6c:a6:ef:a0:fd:1a:68:89:28:59:d2:ac:
b0:17:30:6a:c7:cb:16:ea:71:f4:52:f9:70:37:00:f8:4b:f3:
74:59:26:fa:9d:f7:6a:01:94:5c:7a:7f:f4:0d:fe:f6:d8:84:
a1:f3:43:7e:e0:69:8d:ac:bb:fd:a9:4b:e2:ea:d4:2f:ef:1d:
f8:6c:40:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:47:07 2025 by rpki-client