Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/DvrQKayO1qR3b51aqmWxyiukjXc.roa
File: DvrQKayO1qR3b51aqmWxyiukjXc.roa (raw, json)
Hash identifier: F/ReTwVt54QYwWLD2sKzU3ZxCMeOu1A3XfV7mSUKHq8=
Subject key identifier: 0E:FA:D0:29:AC:8E:D6:A4:77:6F:9D:5A:AA:65:B1:CA:2B:A4:8D:77
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0197BFBA3C683836B67D6C22627F65548435
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/DvrQKayO1qR3b51aqmWxyiukjXc.roa
Signing time: Mon 30 Jun 2025 07:25:42 +0000
ROA not before: Mon 30 Jun 2025 07:25:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60798
IP address blocks: 62.169.133.0/24 maxlen: 24
124.198.130.0/24 maxlen: 24
155.2.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:ba:3c:68:38:36:b6:7d:6c:22:62:7f:65:54:84:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 30 07:25:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0efad029ac8ed6a4776f9d5aaa65b1ca2ba48d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:25:2e:5d:a9:1d:ab:66:00:7b:f6:80:62:b3:
b0:7d:61:f5:4a:28:51:0a:27:1c:c9:31:9d:f1:3d:
40:13:17:ea:c2:43:e9:f6:f8:46:eb:b2:39:ef:0e:
dd:70:f3:5b:75:5a:48:3b:f2:26:d7:51:05:d8:2e:
c1:60:5a:60:cf:b8:0c:d5:6b:d4:b0:05:20:5e:c0:
e8:56:8d:51:86:c3:c3:b9:c3:7b:b4:f5:af:14:9e:
98:c4:5d:c7:0a:2c:ff:99:3e:24:20:1f:3f:2f:a7:
05:b8:14:c8:ff:80:44:85:4f:54:74:7f:42:4b:bd:
50:ac:54:53:e5:03:5e:c5:d2:b5:1d:1b:75:72:0c:
31:4b:f1:cf:0e:b3:97:ea:7a:60:1c:3b:8b:72:ba:
4e:1c:79:36:b8:8d:e9:b9:cb:cb:8a:12:7f:59:eb:
e8:19:6e:01:62:22:7b:77:98:2b:9c:a6:b1:1c:a5:
26:1c:0d:78:d2:a6:d2:ba:fd:fb:97:88:44:12:1f:
dc:ea:6d:d6:04:24:2b:fd:06:03:90:f2:58:4a:9f:
0c:09:8e:18:57:a0:1c:c1:9c:76:8b:61:16:98:09:
26:3b:68:93:fd:a6:21:c6:40:3c:71:2a:20:8b:ee:
e1:09:32:f2:c4:c2:c4:01:12:60:c2:b5:c7:01:fd:
ea:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FA:D0:29:AC:8E:D6:A4:77:6F:9D:5A:AA:65:B1:CA:2B:A4:8D:77
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/DvrQKayO1qR3b51aqmWxyiukjXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.133.0/24
124.198.130.0/24
155.2.213.0/24
Signature Algorithm: sha256WithRSAEncryption
18:97:a5:5f:8a:f6:7a:a7:5d:83:9a:ae:09:63:de:4d:68:8a:
4f:c3:bd:bc:65:89:83:2b:cd:24:c8:48:22:14:fd:76:35:38:
d7:8c:1c:91:ec:e8:b5:c7:60:d4:8c:d2:2b:38:65:76:10:bc:
d5:a3:4b:d9:c6:95:91:52:20:f8:a4:b6:27:bc:3a:36:c9:65:
5c:e4:f6:bb:68:6b:0f:f7:1f:87:e9:6f:25:d4:f5:b5:4e:33:
66:d0:fd:1e:50:e6:87:16:f5:11:a4:60:fa:f6:9d:15:63:b3:
a9:ac:8c:a0:0a:28:be:2e:c1:6d:8f:64:d4:83:60:29:df:25:
5b:eb:ad:35:43:8f:d9:01:c0:94:86:22:a8:71:b8:b0:14:f6:
81:a4:e6:7d:72:ea:cf:d0:bd:da:11:d9:f9:c6:57:00:41:75:
31:f2:63:63:27:16:94:8f:42:ca:87:0d:0d:48:ac:46:c3:f4:
58:7d:a3:bd:5e:71:54:13:a3:53:63:4c:68:a2:a5:a8:99:4a:
a7:3b:d8:05:73:27:1a:99:22:b0:2f:6e:51:3f:9f:48:99:fe:
4d:2d:e0:c3:05:9e:70:b6:d5:f6:f3:83:b2:86:a5:45:50:86:
7e:2e:53:ea:4d:35:db:ec:71:c6:3c:d1:8d:6e:c8:f3:70:1d:
62:d4:99:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:41:21 2025 by rpki-client