Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/6wlg7_4FPmuXNKS9TGtMblKpb18.roa
File: 6wlg7_4FPmuXNKS9TGtMblKpb18.roa (raw, json)
Hash identifier: NB4kxO5xhtaDmptY5MXonKpcqUfNico299jC167lw3c=
Subject key identifier: EB:09:60:EF:FE:05:3E:6B:97:34:A4:BD:4C:6B:4C:6E:52:A9:6F:5F
Certificate issuer: /CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0
Certificate serial: 01942522352A76BC25146255E2C45B13988A
Authority key identifier: F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/6wlg7_4FPmuXNKS9TGtMblKpb18.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136620
IP address blocks: 103.105.48.0/24 maxlen: 24
103.105.49.0/24 maxlen: 24
103.105.50.0/24 maxlen: 24
103.105.51.0/24 maxlen: 24
195.191.54.0/23 maxlen: 23
195.191.56.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:35:2a:76:bc:25:14:62:55:e2:c4:5b:13:98:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81fc8c82986310c5f6a9b56fb76b6bd9877fcc0
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb0960effe053e6b9734a4bd4c6b4c6e52a96f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:67:92:fe:fc:ba:26:60:53:56:8e:9d:02:96:
7b:26:5a:a6:ce:08:69:ee:ba:1e:a0:9c:01:ac:a5:
39:ed:c4:9e:70:9e:2b:44:0e:b2:91:5a:f9:ef:8a:
67:58:8b:e0:fe:cc:64:87:7c:1d:d6:cf:91:8d:3c:
5f:fc:d3:99:ef:2a:40:88:20:29:60:f9:b1:dc:7f:
f3:d9:1e:04:c3:dd:9a:6e:1e:3e:c8:e5:64:de:f0:
79:38:ab:ca:ae:99:80:7a:77:26:ab:33:b3:6a:a8:
3b:66:07:af:2f:ac:22:90:72:28:17:e4:38:4d:d3:
f1:27:9e:15:c5:be:b5:98:61:a4:9d:60:75:b3:f6:
39:b8:a4:de:5e:d2:d6:8c:2a:67:2d:6f:90:a9:55:
9c:61:7f:09:0e:10:6a:c9:8f:39:ee:5f:9b:a6:f3:
c2:43:7e:ef:66:43:7b:ef:8c:8c:8b:53:61:b5:17:
5a:fe:56:73:90:b9:56:42:7b:34:de:e0:d5:7a:4e:
54:12:28:ab:ac:05:3a:e7:23:49:7f:06:97:83:95:
f5:af:24:16:57:06:88:40:e8:1f:37:31:31:2e:da:
5d:79:59:c1:a7:30:ec:f5:e0:13:2f:ee:dc:56:81:
71:7e:6d:f3:c7:dd:d5:3d:25:d2:08:e2:ca:29:4d:
dd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:09:60:EF:FE:05:3E:6B:97:34:A4:BD:4C:6B:4C:6E:52:A9:6F:5F
X509v3 Authority Key Identifier:
keyid:F8:1F:C8:C8:29:86:31:0C:5F:6A:9B:56:FB:76:B6:BD:98:77:FC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B_IyCmGMQxfaptW-3a2vZh3_MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/6wlg7_4FPmuXNKS9TGtMblKpb18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3e59c9-9f01-4562-921d-513ca8e6cece/1/1-B_IyCmGMQxfaptW-3a2vZh3_MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.105.48.0/22
195.191.54.0-195.191.57.255
Signature Algorithm: sha256WithRSAEncryption
1f:94:10:e0:76:00:96:f9:e7:c6:0a:c8:43:a5:09:f1:3a:44:
ec:d5:fd:11:df:33:38:44:8a:de:71:75:c8:7a:44:1e:1c:00:
a8:72:e1:d5:05:eb:cd:f8:1c:2b:de:60:7b:9d:00:d1:cf:d0:
46:dd:4b:dd:12:88:b6:34:eb:63:08:a1:5d:d2:47:11:50:b8:
78:67:43:bf:49:1a:b6:93:f8:84:42:80:e2:61:2b:85:c5:d2:
d7:7f:03:45:76:11:59:67:3d:6e:e9:7f:89:7a:c4:f6:c1:f1:
9c:1a:27:33:1b:4e:20:ee:1a:a1:1b:02:d7:b7:5b:20:a7:9e:
f4:f7:6f:b8:85:b4:2b:e9:e1:dd:ad:b8:fc:df:8c:40:13:f8:
96:36:85:92:ae:6c:dc:c8:6d:f4:59:72:20:11:b2:64:6f:8c:
a8:d8:3b:fe:2f:32:c5:2e:d6:46:7d:20:44:b7:df:01:46:48:
40:d2:f4:98:b0:3b:d8:27:84:2a:37:bb:da:90:e2:70:21:f7:
6f:5c:9f:e0:cd:1b:cd:93:42:a1:e4:82:71:77:49:40:f6:1f:
c2:04:11:e4:61:6e:c5:0f:76:bf:0c:36:b3:7f:76:3b:74:e9:
71:51:64:b5:65:95:57:89:29:49:29:12:3a:8a:b5:9d:8f:00:
b4:4b:32:4d
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZQlIjUqdrwlFGJV4sRbE5iKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MWZjOGM4Mjk4NjMxMGM1ZjZhOWI1NmZiNzZiNmJkOTg3
N2ZjYzAwHhcNMjUwMTAyMDM0OTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjA5NjBlZmZlMDUzZTZiOTczNGE0YmQ0YzZiNGM2ZTUyYTk2ZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02eS/vy6JmBTVo6dApZ7Jlqmzghp
7roeoJwBrKU57cSecJ4rRA6ykVr574pnWIvg/sxkh3wd1s+RjTxf/NOZ7ypAiCAp
YPmx3H/z2R4Ew92abh4+yOVk3vB5OKvKrpmAencmqzOzaqg7ZgevL6wikHIoF+Q4
TdPxJ54Vxb61mGGknWB1s/Y5uKTeXtLWjCpnLW+QqVWcYX8JDhBqyY857l+bpvPC
Q37vZkN774yMi1NhtRda/lZzkLlWQns03uDVek5UEiirrAU65yNJfwaXg5X1ryQW
VwaIQOgfNzExLtpdeVnBpzDs9eATL+7cVoFxfm3zx93VPSXSCOLKKU3dhQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFOsJYO/+BT5rlzSkvUxrTG5SqW9fMB8GA1UdIwQY
MBaAFPgfyMgphjEMX2qbVvt2tr2Yd/zAMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1CX0l5Q21HTVF4ZmFwdFctM2EydlpoM19NQS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvM2U1OWM5LTlmMDEtNDU2Mi05MjFk
LTUxM2NhOGU2Y2VjZS8xLzZ3bGc3XzRGUG11WE5LUzlUR3RNYmxLcGIxOC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOGYvM2U1OWM5LTlmMDEtNDU2Mi05MjFkLTUxM2NhOGU2Y2Vj
ZS8xLzEtQl9JeUNtR01ReGZhcHRXLTNhMnZaaDNfTUEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUHAQcBAf8EHjAcMBoEAgABMBQDBAJnaTAw
DAMEAcO/NgMEAcO/ODANBgkqhkiG9w0BAQsFAAOCAQEAH5QQ4HYAlvnnxgrIQ6UJ
8TpE7NX9Ed8zOESK3nF1yHpEHhwAqHLh1QXrzfgcK95ge50A0c/QRt1L3RKItjTr
YwihXdJHEVC4eGdDv0katpP4hEKA4mErhcXS138DRXYRWWc9bul/iXrE9sHxnBon
MxtOIO4aoRsC17dbIKee9PdvuIW0K+nh3a24/N+MQBP4ljaFkq5s3Mht9FlyIBGy
ZG+MqNg7/i8yxS7WRn0gRLffAUZIQNL0mLA72CeEKje72pDicCH3b1yf4M0bzZNC
oeSCcXdJQPYfwgQR5GFuxQ92vww2s392O3TpcVFktWWVV4kpSSkSOoq1nY8AtEsy
TQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:51:33 2025 by rpki-client