Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/JdKnKUQgNB1Yy4H43wgibSXzdRM.roa
File: JdKnKUQgNB1Yy4H43wgibSXzdRM.roa (raw, json)
Hash identifier: 0S9u0egNlHyLf2o6FRzE/P+MVQvfJ9RMnLrJgBIcmds=
Subject key identifier: 25:D2:A7:29:44:20:34:1D:58:CB:81:F8:DF:08:22:6D:25:F3:75:13
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0196CE205FBFDF6B53C5B9073DF0D76778AE
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/JdKnKUQgNB1Yy4H43wgibSXzdRM.roa
Signing time: Wed 14 May 2025 09:29:10 +0000
ROA not before: Wed 14 May 2025 09:29:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50113
IP address blocks: 103.71.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:20:5f:bf:df:6b:53:c5:b9:07:3d:f0:d7:67:78:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: May 14 09:29:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25d2a7294420341d58cb81f8df08226d25f37513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:67:d9:2c:f6:1a:e2:e9:93:e3:2a:a6:3b:05:
01:9f:06:62:c3:ea:45:38:39:6d:45:4d:c9:29:c5:
d5:0a:0f:8c:bf:1b:26:b6:6e:f9:cb:f8:04:a3:c7:
a0:7c:93:95:1b:75:75:b1:89:1e:d7:06:31:89:d3:
4b:9a:59:63:11:58:e4:71:5f:33:dd:74:b0:43:78:
37:11:1a:3a:aa:cf:6f:a1:19:a1:ee:67:04:5a:50:
8a:22:a5:05:c6:ee:35:b4:96:c8:07:b2:7e:34:3b:
f0:6e:74:cc:79:2c:24:89:f1:d7:74:99:2b:7a:c3:
24:60:7d:cd:4b:5b:0f:6d:d7:82:57:a0:92:f1:86:
c7:9c:f0:73:8a:ed:fb:bd:e2:ce:97:ee:bd:a8:bd:
8e:10:16:e3:6c:20:38:9d:6a:a4:15:12:ca:bd:77:
ec:6f:8f:e3:ef:6d:da:dd:63:0c:7a:bf:fa:1c:d7:
4a:69:3d:16:29:2b:2e:45:af:35:5d:96:11:bb:0f:
2f:1b:60:9f:dd:e7:48:3e:fb:50:69:a0:6b:ca:56:
6a:20:29:09:c9:f2:e6:5b:d0:87:79:7d:6c:96:64:
54:43:6c:d3:94:8c:58:c1:81:17:98:46:c4:a4:39:
6a:6d:a4:1c:85:3f:ef:c8:9a:6b:fc:b1:27:d6:a4:
01:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D2:A7:29:44:20:34:1D:58:CB:81:F8:DF:08:22:6D:25:F3:75:13
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/JdKnKUQgNB1Yy4H43wgibSXzdRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.71.21.0/24
Signature Algorithm: sha256WithRSAEncryption
49:52:dd:bb:1f:80:ae:48:e2:60:24:a4:01:d7:04:15:ab:6a:
ac:0d:4e:70:d9:45:8e:f9:a1:8d:0a:51:55:35:35:8d:ce:c6:
76:b6:2a:eb:a1:de:54:75:0c:dd:eb:48:eb:32:4d:12:c8:64:
0f:23:78:15:0d:47:1c:a2:9e:01:7c:1f:05:ee:23:31:1f:b8:
78:84:8a:9f:11:c2:2d:7d:c3:ae:20:9a:e1:e4:d5:6e:a1:7a:
f7:4c:30:f1:9b:6f:43:7a:11:a5:e4:38:11:8f:97:76:92:89:
05:51:fa:41:0b:f3:6e:f6:9b:d7:d3:57:75:dc:88:9d:97:87:
12:06:4f:39:4f:90:f2:fb:94:f8:9f:22:16:bd:31:39:2c:1a:
0e:37:14:b2:b7:eb:3b:9a:d0:32:47:8b:de:11:30:9d:27:c6:
b7:fe:74:7a:dd:b4:b3:25:e3:e5:3c:5e:15:8e:f0:8e:22:90:
65:cc:86:12:1d:fc:fb:ac:88:16:49:a5:65:e9:f8:16:80:34:
ab:5c:4e:44:50:b4:31:3f:78:48:b3:e3:7b:c6:0b:de:95:8a:
ae:0c:ac:8c:23:38:b2:19:33:87:e2:2c:2b:e8:18:1c:55:39:
c2:c3:cd:35:2e:7f:e8:36:5d:b7:b4:54:6b:87:f5:f6:f8:0d:
1c:41:35:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:07:44 2025 by rpki-client