Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/0-NMnVLjVKOZDOfmqzCNdW1JqKs.roa
File: 0-NMnVLjVKOZDOfmqzCNdW1JqKs.roa (raw, json)
Hash identifier: u6dqyIpLKDltg88fb+BH3anakSfVc3JAUweuBPVL6es=
Subject key identifier: D3:E3:4C:9D:52:E3:54:A3:99:0C:E7:E6:AB:30:8D:75:6D:49:A8:AB
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01979DDE562C1C2A29F9C208BB96BFEBDBBF
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/0-NMnVLjVKOZDOfmqzCNdW1JqKs.roa
Signing time: Mon 23 Jun 2025 17:38:03 +0000
ROA not before: Mon 23 Jun 2025 17:38:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 27161
IP address blocks: 124.158.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9d:de:56:2c:1c:2a:29:f9:c2:08:bb:96:bf:eb:db:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 23 17:38:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3e34c9d52e354a3990ce7e6ab308d756d49a8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:64:74:d6:e0:30:89:10:2a:85:70:98:11:
bb:e6:a8:9b:b8:98:e2:cb:ee:bd:93:d4:d9:86:24:
e1:69:58:35:41:46:71:ce:8f:c1:a1:4d:ef:bc:f9:
e9:df:42:2d:18:5e:df:6c:79:b0:e7:05:82:7d:b9:
9e:2c:4d:38:a2:0c:f2:ec:95:34:53:53:90:85:b8:
96:b9:a0:49:9e:05:e3:b7:3b:53:8f:07:f3:07:8e:
ac:6f:2d:b1:bd:bb:9e:d6:84:94:91:9f:b3:a8:2c:
01:6a:b3:dc:17:3b:65:37:e9:3d:5a:1f:0b:11:14:
39:7b:04:f0:99:59:bc:30:05:1a:1c:14:c6:86:ac:
41:26:06:13:d2:7f:b3:4b:ab:39:1a:3e:f6:c1:91:
73:f6:11:22:00:23:c5:eb:af:31:88:64:05:3a:f0:
de:45:b9:d5:c5:d1:da:84:8d:63:61:a3:39:a3:33:
f3:22:72:a5:50:ed:1c:84:de:d1:74:51:4e:34:69:
49:88:ce:75:29:e0:4e:1d:b4:d1:5a:71:ca:88:d8:
9f:38:3f:ac:91:5d:6c:52:05:9c:94:15:2d:45:69:
a4:bc:90:0b:f4:41:5d:64:19:fc:02:75:95:88:15:
2d:aa:2d:ae:2d:3a:2a:bf:5e:5a:f2:61:df:e0:ef:
e0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E3:4C:9D:52:E3:54:A3:99:0C:E7:E6:AB:30:8D:75:6D:49:A8:AB
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/0-NMnVLjVKOZDOfmqzCNdW1JqKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.158.101.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:6d:1b:8b:65:87:d7:17:bf:29:05:b5:5f:59:ab:cf:b4:7c:
a4:ab:33:0e:14:81:5d:bb:4d:9d:18:06:dc:1b:c9:a5:4c:e7:
4b:ba:b2:58:18:51:93:dc:89:52:fc:ae:bd:ec:a8:f9:3f:fe:
e3:24:66:ae:2d:0e:5a:ba:d2:3c:95:e1:4f:39:a6:52:62:c8:
2f:c3:13:8d:72:55:d1:1e:50:e0:b5:0d:80:4f:4f:6b:f3:6c:
73:f8:da:c3:51:22:f5:e3:e4:59:35:00:4d:4b:04:b8:1c:42:
d4:a0:76:21:04:e0:6f:6b:e4:52:ea:c4:24:88:9c:39:84:a4:
a6:b0:66:90:12:45:97:ef:3e:3d:02:e2:01:09:4d:7d:a2:85:
37:5f:62:4c:9e:98:e2:59:f0:eb:09:92:e6:bc:79:8f:e2:ee:
fe:40:80:73:5b:e9:b7:46:ae:46:c3:70:ba:5a:9b:e1:a1:4f:
a8:ca:31:d8:d3:14:c1:90:66:10:1b:9f:a5:ec:03:56:1b:41:
0f:9f:e8:29:bd:4d:76:d2:89:a8:9e:9d:54:06:ea:99:db:e4:
a6:13:e7:ba:cb:79:3e:ec:dd:3e:52:18:ee:41:8d:da:34:7a:
3e:a7:47:80:47:7b:8a:fa:09:1a:9f:2a:71:6a:dd:92:25:61:
69:ff:fb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:53:14 2025 by rpki-client