Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/WVsTj7MenBGl38xhkFqi5Z0aczs.roa
File: WVsTj7MenBGl38xhkFqi5Z0aczs.roa (raw, json)
Hash identifier: 7b6SsFE3NdlNY/Clv2Hjf1UktFQZh/V54AuKRqY5yFI=
Subject key identifier: 59:5B:13:8F:B3:1E:9C:11:A5:DF:CC:61:90:5A:A2:E5:9D:1A:73:3B
Certificate issuer: /CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Certificate serial: 0194258F2DB4818C8F2F703F640964A2F2BB
Authority key identifier: A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/WVsTj7MenBGl38xhkFqi5Z0aczs.roa
Signing time: Thu 02 Jan 2025 05:48:47 +0000
ROA not before: Thu 02 Jan 2025 05:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38237
IP address blocks: 123.253.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:2d:b4:81:8c:8f:2f:70:3f:64:09:64:a2:f2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Validity
Not Before: Jan 2 05:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=595b138fb31e9c11a5dfcc61905aa2e59d1a733b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:48:93:81:25:22:cd:79:d2:29:0a:76:75:
33:f1:65:e9:8b:e0:39:6a:41:c4:4b:d8:3b:38:6e:
4d:12:40:03:24:f5:42:e6:60:c9:48:6a:80:d5:79:
94:3c:69:8e:14:f5:a8:64:fd:cd:62:e2:08:e7:e4:
1f:8f:65:b6:25:09:a5:5e:a6:a2:9c:9a:80:d9:db:
99:bb:e9:ea:4f:db:5a:8f:ef:2d:b8:a1:12:6d:26:
4c:eb:0b:3f:14:0d:00:24:d7:f1:b9:d7:94:09:8e:
de:57:f5:a3:ee:1d:de:75:e6:15:01:57:b4:f4:68:
0c:d1:b4:09:bf:70:25:2c:fd:f7:b6:16:13:fe:3a:
7c:d2:8e:f8:79:64:40:18:51:18:95:70:43:aa:ef:
32:2a:42:5f:16:e8:18:71:8f:03:19:b8:0d:49:d1:
ab:a3:8b:5b:7c:3c:e7:c0:a5:7f:b4:b7:e2:1c:3f:
b1:b0:4f:0f:11:03:89:3f:93:5a:34:c0:ed:24:a1:
1f:cc:4d:6f:42:a1:31:fb:6f:36:e4:63:bb:d8:3e:
95:73:77:ee:e6:88:36:07:b3:36:93:b4:96:f4:e9:
68:d7:23:30:9d:2f:a9:c6:f4:c5:2e:2c:56:e5:db:
3e:96:5b:da:f7:5e:3e:3d:c5:9a:4b:35:be:34:89:
b9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5B:13:8F:B3:1E:9C:11:A5:DF:CC:61:90:5A:A2:E5:9D:1A:73:3B
X509v3 Authority Key Identifier:
keyid:A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/WVsTj7MenBGl38xhkFqi5Z0aczs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.253.104.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:e7:c0:5f:18:bc:90:4c:17:3c:71:84:80:2b:2e:3d:39:2f:
e2:55:ef:35:0f:79:3e:ab:9e:7a:23:6e:44:99:66:94:12:41:
fc:02:bb:71:06:72:9e:ce:dc:2f:08:d6:de:58:57:88:b8:65:
e1:2d:fb:7b:9b:bb:61:4c:f1:09:e4:8e:ff:86:20:8a:e9:1b:
ab:cb:15:07:a2:59:c9:74:b1:a4:d2:0f:57:ca:65:21:61:ed:
a2:86:24:68:07:2e:10:1b:ab:a5:c0:d3:25:26:47:d8:43:ed:
62:31:90:81:47:a1:a7:5c:88:2f:c2:26:55:85:53:d7:ae:10:
cc:fc:af:76:26:35:82:a9:db:90:9c:be:51:ef:81:52:1c:15:
95:77:25:a3:01:a3:a8:3b:92:df:96:20:74:10:74:44:0c:72:
54:13:93:f4:94:c4:5c:17:71:2e:3c:c9:19:e0:11:99:f9:85:
2d:e6:3f:a1:1b:13:63:fb:ba:0c:91:8b:51:29:4f:97:a7:58:
26:08:a6:f1:f7:d3:90:bc:f8:70:43:9c:4d:0f:c0:fe:62:a4:
7e:6f:a1:f0:c3:db:86:d8:b6:02:32:62:a4:17:fb:34:66:bb:
4f:f2:4b:da:46:72:81:69:8b:b6:76:ad:9e:70:4a:d2:e2:48:
ec:30:f0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:55 2025 by rpki-client