Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/fV-ve7Wa4dozF0kIZaI9gH4sz3E.roa
File: fV-ve7Wa4dozF0kIZaI9gH4sz3E.roa (raw, json)
Hash identifier: fLbMrZEwjpI3fq51pmMrJ7acL9c+FAUptAIUa+VqM7o=
Subject key identifier: 7D:5F:AF:7B:B5:9A:E1:DA:33:17:49:08:65:A2:3D:80:7E:2C:CF:71
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01973C739800ADDCCD1240B704206EC1915D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/fV-ve7Wa4dozF0kIZaI9gH4sz3E.roa
Signing time: Wed 04 Jun 2025 19:38:17 +0000
ROA not before: Wed 04 Jun 2025 19:38:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151734
IP address blocks: 103.63.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3c:73:98:00:ad:dc:cd:12:40:b7:04:20:6e:c1:91:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 4 19:38:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d5faf7bb59ae1da3317490865a23d807e2ccf71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:f8:a8:16:41:f2:dc:1b:59:72:aa:a3:a5:
0f:73:0b:6d:49:29:6b:71:b2:c1:d3:cb:94:1f:89:
75:37:91:40:26:7b:5d:ba:65:66:93:5b:43:90:5a:
ee:e1:9f:9c:ae:ec:74:c2:8e:a2:cd:04:38:4c:a1:
e4:89:ab:41:03:43:8a:e2:5a:e8:3e:d9:c5:54:74:
10:41:59:cc:cd:f1:d5:b4:61:3d:40:27:e0:f3:13:
25:fe:39:cd:f3:8d:a0:a8:3f:56:88:7f:9c:7c:76:
92:1a:e1:21:32:da:e5:1e:5d:50:b9:1c:a9:36:58:
e9:dd:7b:7a:0a:1c:01:4f:4f:35:72:bd:b6:e0:9d:
6c:63:34:74:fd:1a:f9:24:bf:9e:3c:9a:51:32:db:
d8:58:be:29:17:42:6b:48:ae:e8:b5:29:3d:ea:6e:
dc:0d:63:2d:a1:ca:50:b4:87:ad:be:33:06:88:8e:
ae:05:94:da:26:20:f6:7b:3b:19:88:c2:cb:44:32:
fa:c7:d1:8e:d4:87:e3:81:61:bc:77:be:fc:02:3a:
73:ab:29:bf:ea:35:13:41:a4:68:4b:3c:7a:79:46:
31:46:be:b1:5a:f2:34:36:00:3d:07:f2:35:51:d6:
b6:48:11:c1:bc:b4:b3:8d:07:d7:9f:fa:75:b4:a4:
d3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5F:AF:7B:B5:9A:E1:DA:33:17:49:08:65:A2:3D:80:7E:2C:CF:71
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/fV-ve7Wa4dozF0kIZaI9gH4sz3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.63.31.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:16:f1:fc:14:cf:fd:a0:f7:a1:ea:4d:6d:02:c8:5b:37:fd:
4a:21:e3:8b:cc:bd:12:1b:ad:28:91:87:cb:9d:71:84:90:8e:
df:ea:6f:5d:af:96:37:1f:b0:8a:02:52:f8:37:cd:37:56:f7:
89:a5:ac:20:16:66:9c:b5:c2:6c:d8:ce:e8:6c:51:98:ca:f7:
46:d1:15:6f:5a:09:a1:e3:32:25:c5:f9:35:63:9e:45:67:09:
20:e1:c9:25:2b:61:3a:ac:56:09:62:3a:b4:97:c5:ce:68:fd:
79:02:6c:65:93:d6:b5:c2:c4:c9:49:cd:ad:a2:12:df:6d:85:
7c:4b:f1:32:25:4f:44:02:a5:99:81:6a:6d:6e:6b:99:0b:4d:
4a:b6:7c:bd:fe:5f:c0:a5:4d:e5:89:a6:95:9d:b1:b8:ea:b4:
c5:32:62:3e:4c:e2:02:6c:23:ef:a9:ef:f4:53:85:87:03:87:
28:9b:95:88:44:4c:11:73:0b:2d:84:a4:47:08:81:8e:51:f1:
c8:a0:7b:90:55:19:e9:b2:2c:82:e3:1d:b1:0a:d6:88:3f:19:
64:8a:d0:93:ec:0f:71:54:2b:8d:b4:43:a1:e1:f3:84:34:c2:
88:e1:6e:8f:4a:b5:c2:55:81:52:90:11:9a:30:8c:55:6a:6c:
bf:9f:4d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:59:48 2025 by rpki-client