Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/_d1GEPj08rPnUJ5e0jIgKD6QCFQ.roa
File: _d1GEPj08rPnUJ5e0jIgKD6QCFQ.roa (raw, json)
Hash identifier: vnr1x2ojeLhbVafxW9oqVV43qotLr8cLQwIIuErWSfg=
Subject key identifier: FD:DD:46:10:F8:F4:F2:B3:E7:50:9E:5E:D2:32:20:28:3E:90:08:54
Certificate issuer: /CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Certificate serial: 01941FFA2472FFCB244F5FF4C7E1DCA2AABD
Authority key identifier: 24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/_d1GEPj08rPnUJ5e0jIgKD6QCFQ.roa
Signing time: Wed 01 Jan 2025 03:47:54 +0000
ROA not before: Wed 01 Jan 2025 03:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50307
IP address blocks: 109.71.112.0/21 maxlen: 21
2a06:7c00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 18:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:24:72:ff:cb:24:4f:5f:f4:c7:e1:dc:a2:aa:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Validity
Not Before: Jan 1 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fddd4610f8f4f2b3e7509e5ed23220283e900854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2a:49:82:1f:06:f0:e7:ac:95:01:3a:97:bb:
9f:9b:ad:55:ba:84:e7:ab:19:64:99:63:79:16:c1:
b9:5c:8d:03:d7:5c:59:14:f8:39:7d:5f:ae:8d:05:
e8:81:9b:f4:28:7c:01:1d:27:7b:53:61:b3:f9:38:
71:28:1c:7b:6b:90:74:f8:b2:3e:bf:3f:c6:6d:f2:
e9:9b:75:1d:30:3b:41:6b:f9:ed:04:03:00:3d:0f:
72:30:4f:7f:d7:ba:5b:da:25:1a:28:37:84:ef:91:
49:c1:55:9c:5a:ea:38:e7:b3:d8:bc:f3:bf:18:ba:
c3:94:b3:86:ea:26:c4:15:e8:07:25:47:67:2f:47:
0f:e7:58:b9:dd:4d:4a:20:53:d7:80:90:32:17:96:
9d:b4:f7:c2:b8:32:96:81:18:ee:f1:ee:21:7d:1c:
a8:6e:e9:33:9e:90:eb:80:0b:1a:99:82:a5:40:9a:
12:78:ca:10:1a:26:38:bf:c6:39:b7:1c:72:d3:8f:
2d:9a:0a:33:2c:5a:32:3c:78:a5:20:fd:dc:fb:de:
a7:90:01:e2:57:72:06:cd:e3:a7:11:f8:d4:b4:37:
85:34:c3:bc:00:c9:1e:c0:cb:c9:71:78:7b:a7:6f:
a3:20:df:c6:5e:af:a4:c5:8a:a7:15:24:e3:be:91:
89:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DD:46:10:F8:F4:F2:B3:E7:50:9E:5E:D2:32:20:28:3E:90:08:54
X509v3 Authority Key Identifier:
keyid:24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/_d1GEPj08rPnUJ5e0jIgKD6QCFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.112.0/21
IPv6:
2a06:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
4e:c1:02:de:c4:f2:11:aa:27:f4:8b:c2:c8:ec:40:62:ff:85:
ca:0d:7e:8e:55:2b:d1:66:4b:0d:11:e8:3d:85:27:34:9c:7e:
47:5c:cf:e3:b3:eb:ad:89:f7:a2:a4:ff:7d:1b:8e:d3:f0:ae:
0b:51:64:ac:49:20:7e:62:5c:3c:60:a3:74:8d:01:c5:86:1b:
a8:1a:a6:51:42:1c:b5:2e:66:af:80:68:61:68:3a:b9:85:eb:
4d:18:19:8f:79:71:65:52:b2:29:03:68:83:00:56:fd:51:10:
4b:e8:22:a5:03:dd:76:d6:59:66:00:82:45:87:ff:bf:ba:e8:
4f:ba:bc:4c:ea:96:ba:fa:df:cf:0b:2d:f3:e3:04:13:d5:58:
17:1d:85:6a:f7:87:70:2f:56:0d:90:cc:13:f6:01:14:9d:d5:
06:5b:e6:f4:45:47:21:09:11:70:04:c8:e3:8d:0c:82:c7:dd:
fd:c6:40:26:4e:49:a3:7a:ce:3c:21:6f:f9:8a:7d:25:bd:2b:
f2:1e:54:a3:e0:cb:10:1d:cf:f8:66:18:9d:2c:0c:b4:a2:fb:
50:86:2b:34:0e:15:2a:f9:ac:79:7e:84:81:6e:80:db:7d:1f:
17:08:e7:d9:bc:47:72:b3:69:56:f3:51:06:15:48:fa:a5:52:
b6:48:3e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:15:18 2025 by rpki-client