Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uAO1OnPbPzuaGQbpzsE2zWLHYHQ.roa
File: uAO1OnPbPzuaGQbpzsE2zWLHYHQ.roa (raw, json)
Hash identifier: k4M5Oubc7X3CSZL1zqi4bwI3NaOUTtWbQTua/wO7eQA=
Subject key identifier: B8:03:B5:3A:73:DB:3F:3B:9A:19:06:E9:CE:C1:36:CD:62:C7:60:74
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019645498E5F421F5F8E3A35CDFC1F82597F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uAO1OnPbPzuaGQbpzsE2zWLHYHQ.roa
Signing time: Thu 17 Apr 2025 19:46:10 +0000
ROA not before: Thu 17 Apr 2025 19:46:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396077
IP address blocks: 103.84.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:49:8e:5f:42:1f:5f:8e:3a:35:cd:fc:1f:82:59:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 17 19:46:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b803b53a73db3f3b9a1906e9cec136cd62c76074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:99:85:64:b1:28:b3:74:63:7a:8f:10:f2:29:
2d:3a:63:30:3c:8e:cb:d1:76:7c:e4:cd:b6:9d:12:
5e:69:f6:6e:81:f4:d0:8e:0a:c5:ac:82:1f:ba:80:
1d:df:75:86:0c:29:d3:5f:ec:42:0b:67:14:cb:e3:
bb:0f:84:22:3d:c5:19:0a:80:43:07:3e:fa:69:49:
55:be:e9:97:47:b5:de:cc:45:4d:5d:e9:90:38:e9:
44:b4:82:b9:e1:5a:4b:9e:42:b3:c0:60:b0:d2:96:
0d:c5:bb:e6:81:93:23:6a:5d:4f:d2:86:23:7a:01:
26:5d:fd:df:10:9d:37:6a:5e:43:8e:61:20:7e:4d:
4c:1d:33:96:0d:77:fb:51:79:00:a4:fd:ec:0f:e6:
f9:ec:6c:fd:ef:1e:55:b5:d2:48:94:e1:94:be:b3:
bc:f7:17:9b:91:e4:96:63:97:9a:af:d2:8f:53:35:
76:cf:10:7a:a0:4b:5f:f9:07:03:3c:92:ea:e3:ba:
5a:89:93:1f:92:c2:c5:f6:78:b6:1c:65:b6:6b:dd:
ba:80:1d:05:50:91:f9:92:d3:1a:2c:e7:9f:16:9d:
53:73:27:df:ae:95:bd:54:09:c3:0d:fb:7c:1b:94:
f0:9c:96:53:8b:75:8c:e1:54:3b:56:77:a1:c8:c4:
b5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:03:B5:3A:73:DB:3F:3B:9A:19:06:E9:CE:C1:36:CD:62:C7:60:74
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uAO1OnPbPzuaGQbpzsE2zWLHYHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.84.212.0/24
Signature Algorithm: sha256WithRSAEncryption
af:32:40:de:81:49:28:6f:5c:51:84:27:68:88:53:25:21:04:
f6:2e:7a:fe:c9:9d:91:5b:9f:d9:46:23:95:3e:ea:4f:54:0b:
e8:21:9e:2a:eb:da:2a:f8:1c:c8:98:a0:ed:63:46:4b:87:62:
8b:cc:90:21:9a:eb:4c:58:48:4b:3b:e2:50:38:c2:fc:10:6e:
56:cb:c4:5b:b1:b3:96:3b:a3:5d:39:bb:28:cf:1f:58:63:31:
d8:f8:07:c9:ce:13:b1:5d:88:a7:bc:7f:86:0d:3b:31:3e:3d:
6b:73:05:d1:c8:10:49:e1:8b:77:06:5b:ae:8f:ae:fb:3e:a8:
ba:64:6e:3a:c0:c7:e4:ae:77:5d:76:17:df:0f:fe:26:ea:df:
4d:94:70:b5:c4:a9:45:a4:18:2c:a5:5a:eb:23:de:bc:d7:e9:
95:cf:7f:73:8f:4b:3c:0c:da:94:4f:94:24:0e:6e:fa:9c:39:
c4:ed:ef:be:d8:40:99:ec:47:15:76:ef:2a:d4:e1:00:46:ef:
b6:7c:57:c3:bc:25:89:68:0d:79:53:88:a2:19:a8:b7:96:a7:
0b:74:b8:dc:f9:ad:14:4a:f0:b4:d5:8f:8b:1e:0c:46:21:ea:
ca:e9:b3:87:11:7b:17:aa:8d:7f:60:6a:a4:40:be:64:64:3e:
6c:03:80:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZZFSY5fQh9fjjo1zfwfgll/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjUwNDE3MTk0NjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODAzYjUzYTczZGIzZjNiOWExOTA2ZTljZWMxMzZjZDYyYzc2MDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpmFZLEos3Rjeo8Q8iktOmMwPI7L
0XZ85M22nRJeafZugfTQjgrFrIIfuoAd33WGDCnTX+xCC2cUy+O7D4QiPcUZCoBD
Bz76aUlVvumXR7XezEVNXemQOOlEtIK54VpLnkKzwGCw0pYNxbvmgZMjal1P0oYj
egEmXf3fEJ03al5DjmEgfk1MHTOWDXf7UXkApP3sD+b57Gz97x5VtdJIlOGUvrO8
9xebkeSWY5ear9KPUzV2zxB6oEtf+QcDPJLq47paiZMfksLF9ni2HGW2a926gB0F
UJH5ktMaLOefFp1TcyffrpW9VAnDDft8G5TwnJZTi3WM4VQ7VnehyMS1VQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLgDtTpz2z87mhkG6c7BNs1ix2B0MB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvdUFPMU9uUGJQenVhR1FicHpzRTJ6V0xIWUhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1TUMA0G
CSqGSIb3DQEBCwUAA4IBAQCvMkDegUkob1xRhCdoiFMlIQT2Lnr+yZ2RW5/ZRiOV
PupPVAvoIZ4q69oq+BzImKDtY0ZLh2KLzJAhmutMWEhLO+JQOML8EG5Wy8RbsbOW
O6NdObsozx9YYzHY+AfJzhOxXYinvH+GDTsxPj1rcwXRyBBJ4Yt3Bluuj677Pqi6
ZG46wMfkrndddhffD/4m6t9NlHC1xKlFpBgspVrrI9681+mVz39zj0s8DNqUT5Qk
Dm76nDnE7e++2ECZ7EcVdu8q1OEARu+2fFfDvCWJaA15U4iiGai3lqcLdLjc+a0U
SvC01Y+LHgxGIerK6bOHEXsXqo1/YGqkQL5kZD5sA4Dn
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:29:37 2025 by rpki-client