Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/aP6x0mnXwzfZLwiif13FeJYJ6Cs.roa
File: aP6x0mnXwzfZLwiif13FeJYJ6Cs.roa (raw, json)
Hash identifier: jaCT4KMVTUAXhnBI+VJ4oOwFfylT0EP2yI4v4NRhrfk=
Subject key identifier: 68:FE:B1:D2:69:D7:C3:37:D9:2F:08:A2:7F:5D:C5:78:96:09:E8:2B
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 0197637E67F572E0075A1F1CAC1D0370B14B
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/aP6x0mnXwzfZLwiif13FeJYJ6Cs.roa
Signing time: Thu 12 Jun 2025 09:35:17 +0000
ROA not before: Thu 12 Jun 2025 09:35:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59253
IP address blocks: 103.148.140.0/24 maxlen: 24
103.149.84.0/24 maxlen: 24
103.151.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:7e:67:f5:72:e0:07:5a:1f:1c:ac:1d:03:70:b1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Jun 12 09:35:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68feb1d269d7c337d92f08a27f5dc5789609e82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1c:ae:22:7b:2a:5f:b3:df:99:f8:02:9f:73:
5a:a3:b5:14:4e:b6:d1:1d:e1:ea:2e:8d:94:bc:c1:
4d:6e:ad:2e:33:c5:e6:7d:a4:8d:bd:7d:dd:76:d5:
42:d5:64:ff:27:25:18:d9:e0:4f:cb:4d:fe:07:99:
7a:f4:fa:a1:52:1b:26:ca:4d:4b:40:09:a4:2a:17:
54:64:d5:d2:e6:a8:8e:b2:a5:1f:7f:50:21:ac:47:
26:3d:e9:4d:3e:d7:f3:22:97:68:42:e3:c2:c4:1a:
c9:1b:45:e1:41:fa:bd:45:58:85:42:bb:53:61:aa:
52:f8:de:cb:d2:f9:7d:4d:b1:59:52:f5:03:a9:15:
f2:01:51:71:da:53:37:cd:9d:a0:f6:44:52:6b:ab:
90:5e:72:2b:d8:49:00:4b:70:99:9c:48:90:14:45:
dd:b9:b1:39:b0:ff:09:6c:31:f2:3b:dc:8a:1d:18:
d7:1c:74:25:f0:97:13:de:d4:d3:fb:8f:fd:a7:f0:
55:2c:6a:b9:6f:99:5b:d0:82:06:5e:10:57:d9:d8:
67:e7:1f:27:a0:f1:c6:eb:4b:50:cb:08:f7:ca:fd:
7e:8c:b5:63:6a:b9:3b:59:cd:38:8a:95:de:d5:bf:
27:07:26:b3:b4:fe:03:d2:dd:b5:3c:79:4e:3c:7f:
bd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FE:B1:D2:69:D7:C3:37:D9:2F:08:A2:7F:5D:C5:78:96:09:E8:2B
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/aP6x0mnXwzfZLwiif13FeJYJ6Cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.148.140.0/24
103.149.84.0/24
103.151.102.0/24
Signature Algorithm: sha256WithRSAEncryption
41:39:d5:58:6a:5d:2f:39:ef:94:3c:36:29:16:65:75:6f:86:
5a:e8:7b:f7:ac:2d:85:fe:ea:53:66:0e:33:03:d3:c1:92:52:
5f:5e:a4:83:e3:d7:c8:e1:c1:5a:50:8a:2b:a9:39:0d:28:4d:
40:98:fd:60:8f:3f:a7:4f:9c:1e:7c:de:c2:c9:5c:33:23:de:
dc:77:16:a8:ea:d6:fb:96:84:29:a9:ec:4e:9a:c0:28:fd:24:
38:08:5c:ea:9e:9e:17:48:ec:e0:e9:11:20:2d:aa:09:ca:97:
f6:33:88:cf:44:e7:00:5c:d4:60:71:20:9d:87:28:d6:7e:2f:
30:be:a1:6d:ab:2c:fa:fe:f6:83:08:36:b0:d2:22:24:da:b9:
7c:d8:0c:8e:54:e8:3a:9b:bc:af:40:40:03:40:97:ca:a9:03:
b7:d8:81:57:74:ea:b9:66:57:54:ab:e9:b9:6c:97:8f:62:64:
ae:08:83:69:f5:03:2d:3a:1c:ec:c9:29:11:7b:79:ff:e2:da:
ce:f6:95:ab:32:48:83:5b:0f:c3:c4:1c:26:31:85:92:97:6f:
cd:86:e7:31:ef:b0:00:82:1a:46:45:e5:d5:b0:1d:b4:b5:db:
25:57:57:ba:1b:4f:28:b1:13:73:ee:d8:2a:6b:93:26:5b:97:
70:9e:73:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:02:07 2025 by rpki-client