Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5UFZL4A3qpb2vvr-sy1EB4JPXNI.roa
File: 5UFZL4A3qpb2vvr-sy1EB4JPXNI.roa (raw, json)
Hash identifier: rqPmU5GYlmtmcn+5Gk60g2EsO1rZHChQmMqfdfyVrZ4=
Subject key identifier: E5:41:59:2F:80:37:AA:96:F6:BE:FA:FE:B3:2D:44:07:82:4F:5C:D2
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01979D9D569E2CFA6F8AEE0E9E93EC562443
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5UFZL4A3qpb2vvr-sy1EB4JPXNI.roa
Signing time: Mon 23 Jun 2025 16:27:03 +0000
ROA not before: Mon 23 Jun 2025 16:27:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 103.73.35.0/24 maxlen: 24
167.17.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9d:9d:56:9e:2c:fa:6f:8a:ee:0e:9e:93:ec:56:24:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 23 16:27:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e541592f8037aa96f6befafeb32d4407824f5cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:04:4d:4e:5e:77:51:8b:82:73:29:56:84:90:
dc:d4:3b:72:40:48:d7:b9:0f:f2:d4:49:ab:f3:ae:
68:27:94:eb:10:13:de:49:b8:a6:86:d8:ac:fc:dd:
9d:27:7e:f3:0a:d5:a6:3d:f3:1f:26:82:7c:7a:d2:
bd:8f:04:b1:a7:33:b4:ef:50:4c:d0:dc:de:07:0d:
fe:50:59:2b:3a:30:ad:29:18:74:f5:82:2d:2e:11:
fa:41:50:d6:ad:1d:95:b5:05:bd:e4:73:72:1c:3d:
15:b0:9e:66:26:65:c5:4b:94:8d:2d:e3:27:2c:93:
47:ef:09:a5:2f:43:a4:f6:de:d5:de:d2:a0:d2:f8:
32:b7:81:40:87:e1:2c:ff:b4:e9:ec:43:ea:15:c8:
34:24:2e:cc:24:79:e3:a2:ec:e3:8a:0c:db:dc:db:
b3:97:00:92:f5:5a:85:dd:65:d6:dd:ad:bd:a3:d4:
9b:ae:2a:36:e6:e4:ba:09:44:30:24:1c:77:1d:b6:
f6:c2:a9:d0:35:ca:11:73:73:eb:ae:22:d4:18:75:
7d:bd:d9:a6:6a:c2:cd:2b:56:44:f2:85:b8:1c:27:
90:90:c3:1f:38:34:dc:83:c1:23:b7:b0:41:22:d0:
91:54:70:fd:66:5f:01:83:c6:6c:54:93:e6:61:e7:
80:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:41:59:2F:80:37:AA:96:F6:BE:FA:FE:B3:2D:44:07:82:4F:5C:D2
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5UFZL4A3qpb2vvr-sy1EB4JPXNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.73.35.0/24
167.17.180.0/24
Signature Algorithm: sha256WithRSAEncryption
06:55:a4:b4:08:03:1f:45:95:24:cc:88:e5:25:72:5d:99:82:
80:87:d6:f2:49:2c:fa:90:69:2e:a8:70:57:33:13:b9:41:77:
c1:19:51:23:e5:17:e0:e8:ec:74:67:d8:d4:2b:c6:d5:25:4a:
29:48:58:4f:f6:12:06:ec:6b:e6:0e:a7:ab:9b:39:ad:3f:df:
f1:73:7e:ec:f9:d7:7b:f5:a3:5f:fd:eb:6d:22:d1:ed:7a:7c:
f6:5c:3d:5a:9f:8c:72:fd:9b:59:70:87:08:39:a6:0a:c0:ff:
b1:ff:c0:d5:2a:58:72:f7:97:1a:ec:33:35:12:63:07:eb:4e:
1e:70:25:db:10:12:89:1a:e5:6e:2d:af:2c:f3:1b:46:c8:95:
62:13:e1:7f:d4:34:e3:6e:32:30:f0:d7:ba:72:cf:80:f3:02:
90:85:42:86:08:e1:86:4d:3c:7f:85:95:73:e9:c6:e1:42:3a:
95:95:b8:75:81:74:77:40:91:e9:2f:a7:8e:99:da:43:da:fd:
b8:5f:09:a5:e9:cb:68:da:58:18:4e:34:7e:88:f9:1d:76:bc:
f8:54:d6:de:64:90:0c:ba:3c:39:23:16:53:be:fb:95:d6:1d:
1e:9f:c3:ef:23:26:23:4d:3d:b4:98:28:bc:51:a8:c9:9c:b7:
86:9c:b4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:04:04 2025 by rpki-client