Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ESViLtCBKlteUOPU13HjALhivAQ.roa
File: ESViLtCBKlteUOPU13HjALhivAQ.roa (raw, json)
Hash identifier: 7BetrCS9Fr0PSlTviNcH7L1shFXlyrWzO+ltAG4Tq0k=
Subject key identifier: 11:25:62:2E:D0:81:2A:5B:5E:50:E3:D4:D7:71:E3:00:B8:62:BC:04
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019834A7253FDAD98C5C2B1E4C19D11619DB
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ESViLtCBKlteUOPU13HjALhivAQ.roa
Signing time: Wed 23 Jul 2025 00:20:26 +0000
ROA not before: Wed 23 Jul 2025 00:20:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149457
IP address blocks: 103.25.84.0/24 maxlen: 24
146.19.135.0/24 maxlen: 24
188.253.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:a7:25:3f:da:d9:8c:5c:2b:1e:4c:19:d1:16:19:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jul 23 00:20:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1125622ed0812a5b5e50e3d4d771e300b862bc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:1b:34:b2:ed:04:5f:94:f7:85:90:b7:79:
34:98:54:fb:85:3a:57:c0:13:0d:12:32:45:35:9a:
3a:a8:dc:40:53:5c:90:c9:c0:77:92:61:7b:bb:c6:
13:0b:78:3a:82:48:65:29:63:af:bb:f0:ce:f5:0b:
3e:4c:1c:91:3e:00:9d:55:70:a5:f5:5f:5f:bf:61:
77:9c:bb:77:79:34:93:ed:9b:83:28:6f:b4:02:5e:
9d:cb:83:4a:82:84:f5:3e:00:8b:da:b5:55:f5:6b:
10:86:d5:97:72:25:e9:44:af:96:88:3e:72:66:04:
c8:14:cf:75:49:7a:81:3f:9c:1a:f1:08:14:ab:03:
c0:bb:48:ce:5c:24:bf:8f:9f:b2:76:a4:89:5c:50:
d9:f6:0d:bc:72:b1:39:10:7f:5b:8b:b7:08:d1:eb:
85:57:78:e7:bb:85:5f:7e:b3:32:d5:b2:76:c5:87:
2b:cd:c4:bf:16:e6:09:18:95:e9:3c:d6:65:d1:f6:
20:61:f2:6b:47:9e:64:fc:86:9f:e1:3b:03:70:92:
e3:22:c0:4a:d5:3e:d1:64:0b:51:4c:68:ed:18:94:
1e:92:93:4f:ea:7c:35:e0:a7:63:00:61:ec:9e:d5:
13:4f:81:96:d2:b0:08:b1:16:79:9b:3d:e2:d8:0d:
cc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:25:62:2E:D0:81:2A:5B:5E:50:E3:D4:D7:71:E3:00:B8:62:BC:04
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ESViLtCBKlteUOPU13HjALhivAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.84.0/24
146.19.135.0/24
188.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:f7:5d:94:cc:2d:41:22:ba:8b:de:cf:e7:84:6a:17:d2:91:
a9:46:f4:20:f1:90:43:23:f6:ba:2a:70:a6:c2:50:69:31:55:
d0:4b:62:8b:af:b8:1b:b7:f5:65:17:da:3c:9c:6e:3c:58:78:
54:1e:fa:17:c9:6b:60:c7:26:fc:87:49:a1:9e:90:3b:1b:7e:
03:42:25:11:7d:92:68:88:8d:0b:5a:b9:fd:c7:36:15:f5:fb:
3f:98:79:7f:f0:ec:e6:50:e2:76:2a:0b:14:dd:f9:7f:51:9d:
93:c2:5a:51:a6:af:0c:af:9d:39:aa:35:89:bc:8c:b7:a5:df:
b5:1d:00:41:47:6c:c5:aa:c5:f6:50:b3:8c:ae:59:b8:ea:50:
14:d6:3f:be:05:81:15:95:71:7f:3e:68:56:a1:a1:a0:63:cc:
85:11:6e:3a:60:78:28:36:3b:77:52:5a:f1:d8:4c:68:53:de:
5f:f5:b0:8b:05:cc:69:c9:a3:8f:ff:96:11:b9:4e:11:1f:12:
80:57:09:34:92:e7:b4:ac:ca:f2:9f:2e:ea:e6:52:72:03:b9:
44:a4:5b:e8:aa:95:db:87:d3:a1:bc:e9:ee:35:c0:b9:65:a4:
dd:0a:9d:67:41:ee:5c:ee:73:ac:35:41:4d:a3:83:d2:89:cd:
e5:d2:4b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:32:07 2025 by rpki-client