Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/oh0XV65YIjdPGSIJ7PD_zZ4p67U.roa
File: oh0XV65YIjdPGSIJ7PD_zZ4p67U.roa (raw, json)
Hash identifier: 7e1oJaXb3/41hP9ujsjLyET/XGJagyCSsaNbbL5zAI0=
Subject key identifier: A2:1D:17:57:AE:58:22:37:4F:19:22:09:EC:F0:FF:CD:9E:29:EB:B5
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01983B3B702B31649BA4554D0DC86AEB3B8A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/oh0XV65YIjdPGSIJ7PD_zZ4p67U.roa
Signing time: Thu 24 Jul 2025 07:00:07 +0000
ROA not before: Thu 24 Jul 2025 07:00:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150654
IP address blocks: 103.110.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3b:3b:70:2b:31:64:9b:a4:55:4d:0d:c8:6a:eb:3b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 24 07:00:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a21d1757ae5822374f192209ecf0ffcd9e29ebb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4c:41:eb:7b:c9:33:80:74:c1:d0:48:6a:5d:
0b:37:68:c9:e2:e1:9c:49:cc:35:28:f4:81:b3:0b:
00:6b:c1:ba:5b:23:9d:f5:f4:4e:a5:ae:25:b2:2d:
06:fc:88:a5:0f:c9:c6:f6:17:a5:b8:16:cb:21:b7:
06:ad:22:97:53:90:69:51:02:8f:4f:93:35:a2:7f:
db:c5:64:b9:23:08:56:f2:77:c5:16:ac:6f:bc:17:
35:24:b4:1a:79:50:cb:62:d2:4a:04:25:12:fc:7a:
6c:38:1d:8a:bc:31:d1:02:a5:5f:95:ad:b3:48:93:
c7:9b:d4:92:94:0b:78:b5:40:1d:1a:ba:1e:f2:10:
1b:c3:a8:9e:d5:60:43:32:15:e0:28:62:43:b7:72:
ff:25:54:f1:d7:2f:fe:32:00:e5:f3:5c:0c:ac:23:
f5:56:12:d3:59:84:c1:e4:c6:54:58:26:5e:ce:41:
09:7a:c3:b6:1f:c8:a5:2d:5f:5e:3c:b8:e0:0f:47:
dc:2a:c0:44:3b:62:2c:56:6d:39:c0:c0:2c:8f:27:
06:55:b6:4c:19:95:c7:b7:3c:04:84:3f:97:1d:61:
b9:58:bf:48:15:2f:e6:ad:a2:af:7f:ee:a2:86:6c:
60:28:cf:09:a5:8f:bd:8c:49:c1:1b:f1:d0:0c:93:
e7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1D:17:57:AE:58:22:37:4F:19:22:09:EC:F0:FF:CD:9E:29:EB:B5
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/oh0XV65YIjdPGSIJ7PD_zZ4p67U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.110.39.0/24
Signature Algorithm: sha256WithRSAEncryption
03:5f:42:86:34:53:36:8a:dd:2c:06:f0:6d:fb:cd:0d:a1:57:
cc:ff:c4:7e:5c:fc:b4:3c:dd:01:68:9c:fa:0f:2c:7c:d6:04:
8e:cd:6c:80:fb:8d:d9:1b:2e:0b:dd:5e:00:e0:05:41:45:f8:
15:83:28:dc:4f:1c:2b:7a:23:6f:a8:99:12:fe:a1:90:74:aa:
7c:23:37:d4:d8:c8:94:8c:a6:2d:6b:a0:5b:5c:ce:23:5a:7b:
e2:58:b2:15:8c:7e:98:96:71:95:28:78:92:96:2f:c4:a4:aa:
7f:df:a9:c9:35:96:05:06:90:f3:ae:bb:c6:50:3d:5b:67:83:
9a:9d:71:d5:b4:4b:db:b3:5c:e2:23:9e:5d:fa:28:9a:96:70:
b7:87:50:97:f6:6e:1a:6e:9e:c9:a6:7f:36:64:28:8e:be:83:
4c:75:9b:f4:fc:be:58:dc:31:64:5c:47:67:64:d9:69:5d:54:
c0:11:8b:71:ec:e8:d9:36:58:79:91:25:37:8b:2d:19:ff:d1:
cd:a5:62:78:00:7a:24:e9:64:04:73:a7:b6:62:b6:98:14:2b:
ec:da:46:b5:3b:6a:e0:f7:0e:6a:a9:7c:e0:32:a4:84:83:ce:
db:05:38:32:d8:a7:7c:0d:80:6a:cd:3e:d9:11:35:b5:0b:81:
3e:7d:22:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:22:08 2025 by rpki-client