Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/K5YH042-XH50dBzA1pNHg2KYQRI.roa
File: K5YH042-XH50dBzA1pNHg2KYQRI.roa (raw, json)
Hash identifier: MSY1559D2Go4XZO1cpj9tiuJT6KXRl0Uu3WtnwQ3wzo=
Subject key identifier: 2B:96:07:D3:8D:BE:5C:7E:74:74:1C:C0:D6:93:47:83:62:98:41:12
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019859EF913A01BAEB6901E805318B86FED7
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/K5YH042-XH50dBzA1pNHg2KYQRI.roa
Signing time: Wed 30 Jul 2025 06:05:29 +0000
ROA not before: Wed 30 Jul 2025 06:05:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12025
IP address blocks: 124.158.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 22:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:ef:91:3a:01:ba:eb:69:01:e8:05:31:8b:86:fe:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 30 06:05:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b9607d38dbe5c7e74741cc0d693478362984112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:b2:a9:13:0d:f2:0b:86:7c:16:ae:27:f9:
25:6b:ec:19:8d:75:c2:fe:63:bc:93:6e:74:b6:5b:
0b:d9:10:87:48:80:d3:c0:36:22:7c:3c:1c:aa:ef:
e7:38:8e:70:dc:0a:56:35:e9:96:2e:17:8f:df:94:
ed:c8:2d:cd:85:66:f7:c9:77:66:55:f6:68:5f:a6:
89:f8:f8:9b:44:80:9e:06:34:0c:40:13:57:b3:4a:
f4:15:cf:9e:21:33:8a:f9:71:03:37:9b:33:36:5f:
5a:01:ff:d1:f3:c4:37:08:90:00:04:10:97:bf:b5:
53:9b:c3:d0:b2:8d:5e:bb:d4:3a:b0:35:be:64:92:
72:d9:e3:e1:29:12:80:cf:07:4c:8d:11:d9:0d:79:
04:6f:ac:0e:dd:8a:63:d7:2b:ff:44:74:f7:d7:c9:
f0:3b:2d:a0:91:6a:94:6a:a3:01:0e:59:15:c0:44:
ce:5d:68:5e:a7:8b:c0:8f:a6:ba:14:f6:0c:73:b8:
77:07:39:07:bd:00:b3:4d:bc:e1:95:92:71:56:4e:
71:3a:10:9a:a0:00:a2:8e:51:30:5e:d9:12:64:65:
0b:33:e8:ca:d9:95:66:c9:83:c1:eb:03:07:e6:98:
cc:16:b9:da:56:6b:86:28:84:c1:98:6f:74:73:6d:
c6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:96:07:D3:8D:BE:5C:7E:74:74:1C:C0:D6:93:47:83:62:98:41:12
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/K5YH042-XH50dBzA1pNHg2KYQRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.158.103.0/24
Signature Algorithm: sha256WithRSAEncryption
97:34:c7:f5:2b:72:84:cd:e6:9d:ac:68:b1:cf:13:07:ff:c7:
14:78:fc:4f:fd:eb:36:e6:5a:87:03:92:f5:82:97:25:05:92:
61:8e:d8:e2:35:f7:80:e9:ab:82:5c:2a:db:d0:fe:17:03:53:
78:a3:60:2b:47:d9:9d:20:f5:bd:31:22:c8:89:3e:3f:bd:da:
0b:56:fc:74:27:a4:e4:38:f7:af:bf:6d:25:70:c4:69:ae:d9:
3c:8e:31:2e:83:ad:80:2f:21:67:ef:33:32:4d:7e:c1:b2:38:
25:63:42:9f:9e:a6:c6:ab:87:a7:dc:ac:6c:cf:ad:c7:18:05:
ea:30:a6:16:69:4b:15:89:90:02:3d:7b:eb:41:24:c5:3e:da:
b7:c9:b1:2a:6b:c7:8c:02:26:fd:fb:48:1f:96:d1:d7:32:0d:
dd:5d:d4:0e:96:cd:92:c4:4c:8c:cc:73:96:89:27:82:4e:43:
e9:13:49:7a:02:8b:a5:cd:7c:2d:47:3b:e0:ae:30:24:e7:31:
61:70:c3:b7:e0:c0:eb:b3:db:e9:bd:36:48:71:f1:f8:b6:14:
65:30:ed:5e:78:16:35:0b:75:83:5f:18:4b:34:cb:4b:e5:f5:
63:d6:d5:d0:ce:e0:c0:7e:c8:4f:35:8b:d8:ca:18:bc:c0:b7:
f4:a1:c4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:27:18 2025 by rpki-client