Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/07XIUnf8cmvXYqF5xsAU6C1hKCk.roa
File: 07XIUnf8cmvXYqF5xsAU6C1hKCk.roa (raw, json)
Hash identifier: YSsCq9TNRccN7UEAzQ5p8y3ZhGncC/PjWk5u6i1pvhs=
Subject key identifier: D3:B5:C8:52:77:FC:72:6B:D7:62:A1:79:C6:C0:14:E8:2D:61:28:29
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0198B4E4B5C2AE1A826A908F35A7CB9E255D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/07XIUnf8cmvXYqF5xsAU6C1hKCk.roa
Signing time: Sat 16 Aug 2025 21:59:04 +0000
ROA not before: Sat 16 Aug 2025 21:59:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54103
IP address blocks: 124.158.102.0/24 maxlen: 24
124.158.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b4:e4:b5:c2:ae:1a:82:6a:90:8f:35:a7:cb:9e:25:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 16 21:59:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3b5c85277fc726bd762a179c6c014e82d612829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:82:b7:9b:62:07:87:ea:a9:27:a9:4d:d4:67:
ef:05:b9:51:74:b6:0f:b7:77:af:fc:5a:03:3f:f3:
a4:23:fc:6f:93:78:bd:ba:19:8b:5f:22:98:d4:4c:
ae:a9:c7:52:48:ab:98:b9:aa:36:e2:7e:15:c6:9b:
a8:df:80:64:f3:47:13:37:e0:97:f8:d2:84:9f:19:
6a:50:1c:00:aa:a8:8d:4e:ad:2a:72:51:75:9d:80:
62:0a:96:db:04:1a:be:12:ca:d2:ea:1b:18:4e:c3:
0d:ea:9c:ce:39:97:12:5b:80:ff:06:87:fa:ef:37:
8e:c7:7c:16:93:ea:bc:0c:dc:75:f0:9e:3c:cc:69:
ee:cd:48:0e:2e:08:6d:d0:89:84:19:fb:9a:a6:f1:
e6:21:94:da:30:b7:af:3b:e6:3c:b3:c3:5b:31:25:
03:0f:6a:7a:60:90:76:62:66:62:91:83:2c:fd:b3:
e2:72:68:2d:b6:8d:1b:35:1b:ab:7b:ab:0e:3f:24:
27:35:08:88:04:ab:2e:f6:08:47:6a:2b:55:97:f2:
e2:b0:0d:0e:74:0d:eb:2e:9f:9b:91:d7:02:bc:c4:
2f:a2:bf:28:80:b7:d8:f1:7e:b3:b8:48:f9:6d:02:
57:48:eb:fa:0a:46:b7:4d:08:8a:e6:24:d7:31:37:
22:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B5:C8:52:77:FC:72:6B:D7:62:A1:79:C6:C0:14:E8:2D:61:28:29
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/07XIUnf8cmvXYqF5xsAU6C1hKCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.158.102.0/23
Signature Algorithm: sha256WithRSAEncryption
34:02:2a:25:80:56:b7:88:e0:8d:28:aa:4a:13:8b:e4:d5:10:
5a:6a:53:7d:e6:3f:da:4f:99:e6:19:ae:af:c9:78:5d:d7:d3:
1f:d3:36:8d:fe:37:41:43:f8:5e:26:1a:2b:55:30:d1:44:09:
f5:55:1c:90:cf:df:fe:d9:82:db:6d:38:bb:37:54:b3:37:2e:
8f:95:96:89:6a:05:0a:31:25:ad:d9:db:ff:c2:ab:ae:64:05:
d9:b6:f8:b6:8b:df:45:ff:7d:aa:46:9c:06:b5:d0:c5:26:78:
b7:50:ca:fd:2c:15:e0:51:66:89:f0:36:a2:de:31:a8:e2:4d:
68:64:90:35:52:ec:ea:74:5a:f6:98:50:0b:fc:9e:e1:9a:38:
0b:39:2d:8a:d5:8d:f5:cc:ef:22:f1:2d:33:a1:50:50:fd:86:
2a:38:a9:24:32:90:90:f3:c2:50:68:9a:f4:f0:ce:ce:3b:47:
f4:96:40:d5:45:58:20:e9:1d:04:bc:4d:36:56:40:03:8b:02:
1d:73:f9:c5:a4:da:9f:67:77:6d:90:84:f0:be:bf:ed:e4:cf:
fd:62:14:0f:3e:b8:85:d3:40:46:b2:da:5b:91:f7:39:c7:4d:
6d:b6:be:9f:b5:70:cb:45:2b:b3:c2:27:d3:56:1c:fa:05:c9:
76:49:c2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:34:50 2025 by rpki-client