Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/qagToqYwWoVNWzUu9qXg7Hb8iO0.roa
File: qagToqYwWoVNWzUu9qXg7Hb8iO0.roa (raw, json)
Hash identifier: NjTbRCsZpXfIxlTNVasjWSDHJx+yddX5ww6d4YwOJF4=
Subject key identifier: A9:A8:13:A2:A6:30:5A:85:4D:5B:35:2E:F6:A5:E0:EC:76:FC:88:ED
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0194228DBC9111D12C0EA5B8A1EC3E0AC871
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/qagToqYwWoVNWzUu9qXg7Hb8iO0.roa
Signing time: Wed 01 Jan 2025 15:48:21 +0000
ROA not before: Wed 01 Jan 2025 15:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 94.232.249.0/24 maxlen: 24
103.74.92.0/24 maxlen: 24
103.74.93.0/24 maxlen: 24
103.74.94.0/24 maxlen: 24
103.74.95.0/24 maxlen: 24
103.88.240.0/24 maxlen: 24
103.88.241.0/24 maxlen: 24
103.88.242.0/24 maxlen: 24
103.88.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:bc:91:11:d1:2c:0e:a5:b8:a1:ec:3e:0a:c8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jan 1 15:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9a813a2a6305a854d5b352ef6a5e0ec76fc88ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ca:20:d1:67:c3:7e:d5:e2:9a:78:d5:d7:56:
d0:be:24:ff:dd:b3:79:72:72:33:bd:6d:0b:05:d5:
40:99:c5:fb:75:f3:c2:de:c3:bf:e8:ff:d4:e7:43:
1f:0c:d8:85:9c:9e:37:e0:e9:a5:a8:72:c7:71:72:
81:6f:30:18:e5:48:a2:74:37:66:89:96:26:e8:d0:
65:3a:7a:62:ec:ee:93:d2:b5:a6:34:1f:c7:c7:30:
39:ca:8a:92:4a:74:46:15:50:3d:43:61:33:38:93:
77:82:44:71:a6:92:f7:76:6e:78:89:9c:60:63:20:
a0:df:de:01:58:bd:59:62:2d:af:d0:96:8b:bb:2f:
34:56:60:c1:b5:eb:06:35:ae:b5:08:64:54:7b:30:
36:bb:dd:4a:3f:27:8c:03:5d:bb:1d:8b:e7:31:51:
df:0e:44:2b:cc:f5:7a:4b:dd:64:0d:2c:f5:7c:8c:
c1:90:60:3a:75:55:f1:36:2a:c0:a9:68:42:b8:2f:
e5:ea:cc:73:28:33:c1:0d:7b:63:36:2a:a1:27:3f:
fc:d2:5d:e6:ac:1e:ea:22:dc:e0:56:a4:4f:9b:ee:
71:ef:f6:36:ac:61:2f:0e:e8:30:25:f9:dd:3c:1c:
e5:13:b2:d4:09:2a:7c:ff:36:80:7a:cf:92:10:fd:
b8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A8:13:A2:A6:30:5A:85:4D:5B:35:2E:F6:A5:E0:EC:76:FC:88:ED
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/qagToqYwWoVNWzUu9qXg7Hb8iO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.249.0/24
103.74.92.0/22
103.88.240.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:5c:58:eb:80:b4:3e:86:0b:60:e6:0e:64:5b:f9:e0:d6:82:
f6:1a:c1:1a:90:5c:24:74:12:f7:38:f1:2d:93:08:36:14:0b:
96:30:37:fe:15:be:0a:8c:b7:eb:f6:01:0c:c2:5e:0f:93:dd:
a0:83:18:b9:80:1e:c5:1b:bf:d7:6e:c0:21:f8:45:26:3b:3a:
1f:db:5e:39:cd:d6:1b:f3:64:3e:3d:e0:69:22:ab:fb:c6:6d:
e3:57:cc:67:e7:83:0e:67:10:53:d4:3f:26:88:19:36:d3:6b:
40:bb:58:8f:af:e8:71:dc:3d:9a:15:cf:68:8e:d7:9b:2c:35:
8e:41:29:e1:db:8c:ee:bc:1a:cb:e6:2c:bd:db:6f:6a:86:cd:
d9:79:8a:85:a0:6b:1c:36:de:de:8c:99:bb:6a:6c:8b:f6:63:
03:8a:89:c4:fc:05:72:6e:de:69:fa:12:ca:47:3f:b0:d6:76:
9d:17:c2:b8:02:2c:71:3b:d3:07:1e:dc:7f:ed:90:6b:c9:8d:
49:f0:40:02:a2:00:03:6b:4e:c7:5f:60:97:b1:12:c0:e6:b3:
e5:20:39:9b:34:b1:26:3c:99:6c:0b:58:8f:04:2e:f2:db:c2:
be:0a:4a:af:6f:03:a7:7b:1c:05:f4:de:d2:81:a3:cb:ba:24:
11:94:64:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:22:21 2025 by rpki-client