Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/hq3xMLYu58E-C0pKKjxQOD1kigU.roa
File: hq3xMLYu58E-C0pKKjxQOD1kigU.roa (raw, json)
Hash identifier: dPdHlJZKotxKAavShKgk5PjirXm73ti2oqop05hSu5Y=
Subject key identifier: 86:AD:F1:30:B6:2E:E7:C1:3E:0B:4A:4A:2A:3C:50:38:3D:64:8A:05
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019668A649D25134D0F6F87D950645E4EB07
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/hq3xMLYu58E-C0pKKjxQOD1kigU.roa
Signing time: Thu 24 Apr 2025 16:34:10 +0000
ROA not before: Thu 24 Apr 2025 16:34:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 103.31.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:68:a6:49:d2:51:34:d0:f6:f8:7d:95:06:45:e4:eb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Apr 24 16:34:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86adf130b62ee7c13e0b4a4a2a3c50383d648a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:78:9f:19:21:0f:85:25:ad:78:cf:82:b7:
a4:4d:79:56:31:89:14:db:51:d8:b9:f9:74:f5:fd:
f3:77:fc:aa:de:3e:22:fe:66:cf:b4:e5:4d:b6:f1:
8f:1e:73:61:d3:f1:97:b3:08:93:a4:b0:d0:0d:38:
59:8a:b4:ea:b7:77:f8:78:81:f1:77:3f:fd:58:fb:
71:bd:f3:cf:dc:97:fa:05:ab:3d:fe:5f:73:aa:bd:
27:5d:b9:a2:37:c0:34:75:24:fa:d2:86:b7:7b:2f:
11:fb:fb:e4:b5:d6:66:66:a5:ab:78:31:ad:f9:54:
da:93:0e:68:33:b7:f7:83:80:9f:24:a9:18:5b:ee:
c6:a6:58:fb:4a:aa:cc:53:e2:ce:60:7f:03:c1:34:
10:aa:be:a6:fe:bd:3f:b0:db:62:f8:ae:91:9d:6e:
0f:db:3e:8b:89:bf:74:b0:c7:09:c0:01:9d:54:8d:
22:fb:39:52:04:90:bc:7d:04:41:f1:bf:2b:dd:86:
73:bd:3f:99:f7:85:2a:cc:d2:04:be:45:69:24:82:
3e:a6:f9:0f:fd:c8:a6:13:6e:e4:a5:62:77:0d:25:
7e:f6:96:a3:16:90:23:4f:7e:8d:0a:ad:38:0b:8b:
58:ae:f5:5b:86:5d:6e:9d:ed:b6:17:80:68:1c:e8:
10:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AD:F1:30:B6:2E:E7:C1:3E:0B:4A:4A:2A:3C:50:38:3D:64:8A:05
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/hq3xMLYu58E-C0pKKjxQOD1kigU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.79.0/24
Signature Algorithm: sha256WithRSAEncryption
63:0e:d9:bb:10:7c:4b:29:6e:f3:26:c5:6b:f8:33:27:06:c7:
20:8e:0f:a4:e3:1c:96:9c:17:fa:14:96:c9:06:a7:2b:24:4e:
a7:74:26:6b:9a:6f:92:f9:39:72:df:28:c5:34:e2:e5:24:ef:
c7:df:77:2b:b0:8a:8d:fb:b2:0e:4e:06:e7:13:89:9a:a0:94:
61:34:c1:ca:40:c8:f2:a4:35:5f:77:2b:11:f1:ed:bb:7c:c0:
c7:a3:c7:96:1a:37:f9:a5:20:3b:26:97:8e:d4:04:01:1e:2c:
5b:1a:8e:fb:d7:53:11:ed:10:14:37:6e:07:01:90:49:a3:9e:
c1:66:e5:d8:4b:49:f8:af:a2:e7:93:bf:34:d9:23:9a:94:79:
fe:a2:4f:16:0a:91:9e:b4:43:05:24:80:7f:96:e7:53:95:d6:
3b:f9:ff:50:04:90:ab:ea:f1:80:f2:eb:e7:a1:3b:c3:4b:e5:
d8:7f:9f:c4:3b:5f:60:8a:85:81:97:25:7b:bf:a4:6b:69:25:
c1:60:12:10:29:56:e9:46:45:0f:1f:01:80:51:9d:7f:74:09:
b7:dd:cd:01:6c:40:8f:a6:e7:10:76:a2:0d:03:20:88:c6:9b:
97:b1:8d:7c:f8:6f:fa:49:ba:83:8a:75:cd:a0:e9:5d:06:ae:
0f:d5:b1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:24:15 2025 by rpki-client