Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/hYYmw5fVDAR1P_MMb_9KXEfTATs.roa
File: hYYmw5fVDAR1P_MMb_9KXEfTATs.roa (raw, json)
Hash identifier: 094S5zaCMwQU0QTJCaSJoP16OB3rfJsQF3J8+250u5M=
Subject key identifier: 85:86:26:C3:97:D5:0C:04:75:3F:F3:0C:6F:FF:4A:5C:47:D3:01:3B
Certificate issuer: /CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Certificate serial: 019424B317A5E06BEE493FF44315CB814045
Authority key identifier: 69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/hYYmw5fVDAR1P_MMb_9KXEfTATs.roa
Signing time: Thu 02 Jan 2025 01:48:24 +0000
ROA not before: Thu 02 Jan 2025 01:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214785
IP address blocks: 103.55.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:17:a5:e0:6b:ee:49:3f:f4:43:15:cb:81:40:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Validity
Not Before: Jan 2 01:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=858626c397d50c04753ff30c6fff4a5c47d3013b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2d:d7:e9:c3:26:71:fd:8d:f0:d4:eb:bd:82:
92:0f:dc:73:bb:49:d3:a8:5f:bd:9f:72:3f:a9:12:
fb:74:9e:50:c9:d6:e2:f4:1c:84:c2:c4:50:70:0b:
7f:ed:d7:d6:43:6f:f9:5c:73:5b:9c:56:f7:15:89:
d1:c2:74:71:09:f0:5b:ea:e7:34:dd:c3:f4:a5:56:
e3:e9:aa:df:4b:90:ef:a8:68:a6:a3:f0:ce:bb:94:
16:48:c5:8d:32:cf:59:97:9f:3b:42:2b:fe:3a:96:
78:27:40:cc:c4:d5:1c:f0:64:01:4e:85:82:48:77:
d6:f9:47:0a:66:df:41:2d:40:26:aa:64:0b:4f:dd:
4d:a4:8a:1d:f6:1d:5d:65:c0:46:07:01:94:d3:77:
51:38:56:ed:d7:a4:b5:04:fa:d6:eb:22:d2:f7:b6:
09:a8:4f:3c:98:1d:85:18:90:50:54:4c:7d:ee:96:
79:96:33:ca:31:0e:41:52:40:7f:3d:68:6f:67:33:
5c:85:d7:0f:5d:1e:31:09:f8:14:aa:1c:d4:ed:e4:
9d:90:8a:ce:41:e4:d3:47:4f:90:1b:99:ac:a6:83:
4f:c1:fb:f3:05:bf:37:c8:f7:31:7d:0c:d6:82:c3:
9a:f1:5c:e7:bf:3e:a8:0e:c3:9b:26:51:ab:02:ec:
d6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:86:26:C3:97:D5:0C:04:75:3F:F3:0C:6F:FF:4A:5C:47:D3:01:3B
X509v3 Authority Key Identifier:
keyid:69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/hYYmw5fVDAR1P_MMb_9KXEfTATs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.55.164.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:dc:35:4c:13:65:1a:fe:2f:8b:78:dd:cb:92:54:0a:8b:e0:
1d:a5:c9:02:0f:94:59:b6:5e:06:6c:77:7e:76:f7:53:6c:96:
20:37:c2:84:e4:ec:89:cb:de:84:14:36:a3:86:d6:eb:03:95:
3a:c7:e1:5f:09:8c:f0:fd:89:68:46:1f:ba:82:fd:24:57:50:
72:f8:e3:88:3e:72:ab:a2:b3:de:11:b3:e7:d2:40:51:66:aa:
13:6c:15:03:86:41:da:7c:6f:f3:cb:ab:11:aa:eb:d9:e0:62:
1c:8c:0c:ea:2a:e7:ca:c5:60:6e:7a:b1:e6:e2:7f:27:34:bf:
21:af:48:46:f3:c5:3b:5a:08:2a:ba:0b:56:fa:41:53:f8:e8:
49:70:d2:e2:02:df:dd:76:d6:f7:d0:48:ab:1b:7f:e4:2f:ea:
a1:5a:86:04:aa:7c:e6:b9:f4:cf:21:64:cb:d9:23:a0:87:3a:
5e:02:2b:e9:6f:20:d9:e4:8b:dd:c8:a8:2b:75:69:3b:b7:39:
6e:1e:5f:6e:ac:a3:70:7c:15:7a:26:83:b3:32:ff:97:3f:c6:
88:3d:02:c5:bf:8c:32:20:f4:cb:dd:8a:00:9f:70:4d:ff:3d:
5e:ee:6d:d4:4b:e0:69:41:33:e3:f2:ec:ec:03:10:b3:af:e5:
9e:62:5f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:16:47 2025 by rpki-client