Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/k9gMryjoJLUP6qNkSrHn3NyUL9M.roa
File: k9gMryjoJLUP6qNkSrHn3NyUL9M.roa (raw, json)
Hash identifier: +4cY7aYPDgn8SiY4DzHDW1ESWZn51RgjJZ/uxK7zi3A=
Subject key identifier: 93:D8:0C:AF:28:E8:24:B5:0F:EA:A3:64:4A:B1:E7:DC:DC:94:2F:D3
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019717D7991D6063C940D1996811398E1D4F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/k9gMryjoJLUP6qNkSrHn3NyUL9M.roa
Signing time: Wed 28 May 2025 17:01:34 +0000
ROA not before: Wed 28 May 2025 17:01:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209179
IP address blocks: 103.63.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:17:d7:99:1d:60:63:c9:40:d1:99:68:11:39:8e:1d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 28 17:01:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93d80caf28e824b50feaa3644ab1e7dcdc942fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a9:e7:2e:87:a8:9b:ef:bf:82:2c:64:5f:ee:
10:49:66:6b:ec:97:0d:85:25:f8:0a:36:59:91:a4:
b3:4c:10:ea:26:9b:fa:a3:67:4b:10:f7:7f:5e:81:
54:15:25:83:9f:d1:e1:6b:67:3d:96:46:ac:80:42:
17:e0:95:7b:62:cf:51:7d:ad:a4:b5:57:0b:26:fb:
23:3c:23:40:4a:1d:d4:f5:aa:f8:b1:08:e2:40:02:
7d:fe:72:e8:b4:51:9d:35:de:0d:8d:15:ff:7a:75:
1a:d3:f8:f6:be:e6:ee:d3:c1:37:7d:96:34:dc:f0:
4d:f2:f3:ae:8f:23:3a:41:71:d8:30:d2:46:8d:55:
b5:79:d6:0e:36:08:bd:55:24:24:d1:5c:9a:20:cd:
84:dc:00:95:2a:91:b1:bc:6a:ac:0e:34:a8:93:df:
a9:c8:69:37:e1:38:1e:7e:3f:e3:cd:81:e9:fd:14:
26:8e:ef:7d:f4:61:72:48:51:3b:50:88:aa:9a:39:
1e:a6:8e:89:8b:ae:eb:09:2c:ae:ea:ae:2d:bf:a4:
60:a0:0d:4e:0b:38:e3:7a:d1:8e:fb:cc:f2:b0:10:
ef:1a:11:0f:ca:4f:c6:5c:38:3a:6a:d7:19:d5:df:
a8:04:b1:d1:a0:82:a1:7e:66:38:9d:e7:7c:20:c6:
68:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D8:0C:AF:28:E8:24:B5:0F:EA:A3:64:4A:B1:E7:DC:DC:94:2F:D3
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/k9gMryjoJLUP6qNkSrHn3NyUL9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.63.29.0/24
Signature Algorithm: sha256WithRSAEncryption
57:3b:5f:c0:34:57:3a:b8:5f:bd:1c:01:e1:34:a8:10:dc:eb:
b0:84:05:be:33:c4:5a:da:09:2d:d2:85:82:ce:27:18:01:4e:
39:4c:43:00:2a:ca:f1:4d:3a:99:29:e7:6a:37:db:2b:10:58:
8c:a7:db:36:28:a5:5f:24:94:85:6c:f6:e8:4f:90:f3:ae:db:
64:e0:01:b7:92:45:28:22:6a:1d:98:0c:a2:88:7e:8d:d4:c4:
7b:de:8d:6b:fd:fb:9b:0c:81:43:23:af:68:47:b8:c9:25:66:
f6:91:9b:1c:b5:2a:e9:2b:1f:0b:d8:74:a7:16:1a:16:5d:05:
14:89:f2:d3:1c:7e:07:42:4a:84:ff:8a:be:37:4a:9a:3e:87:
c0:8f:b8:71:f5:67:64:18:b3:05:59:9c:06:a4:39:b0:af:4b:
b3:d9:0b:3d:d0:16:7a:1e:f4:ca:9f:31:c0:a1:37:58:20:9f:
92:d7:48:bd:51:30:0c:40:0b:3c:37:7b:d6:68:ec:de:45:e0:
d9:1d:51:d1:50:59:88:ca:55:fe:a8:19:b7:95:80:18:85:c7:
6e:d7:ec:cb:d8:b3:21:ac:75:21:63:1e:89:ea:1b:1e:e9:88:
c7:ff:ef:47:5f:63:f2:87:30:aa:99:7a:a5:14:7c:0a:81:80:
57:9f:94:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:52:35 2025 by rpki-client