Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/1qKATTVt2l9Amr30ivUd4qpcDQ8.roa
File: 1qKATTVt2l9Amr30ivUd4qpcDQ8.roa (raw, json)
Hash identifier: D9mOfQXdZlNktupQVZacZwiNwms/ptwHflaY7QzV5Xk=
Subject key identifier: D6:A2:80:4D:35:6D:DA:5F:40:9A:BD:F4:8A:F5:1D:E2:AA:5C:0D:0F
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 0194221F8048BBECF9DB97A999374279DCC7
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/1qKATTVt2l9Amr30ivUd4qpcDQ8.roa
Signing time: Wed 01 Jan 2025 13:47:57 +0000
ROA not before: Wed 01 Jan 2025 13:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202421
IP address blocks: 103.229.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:80:48:bb:ec:f9:db:97:a9:99:37:42:79:dc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Jan 1 13:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6a2804d356dda5f409abdf48af51de2aa5c0d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7f:80:61:ee:6c:4c:6b:ac:52:1e:76:ac:61:
c6:a3:41:41:42:2d:a4:62:a4:35:e2:5d:94:88:25:
ef:eb:0f:be:03:41:25:d5:ca:5e:f9:fb:3b:c1:15:
76:16:39:b2:66:66:dc:a7:91:90:ef:e4:0b:ac:13:
7b:45:ca:86:9f:30:25:1a:16:94:dc:e1:ee:bf:4f:
b7:d6:ca:01:3c:04:83:99:93:1d:c7:c9:f7:d5:77:
af:45:fe:4f:5c:3b:85:57:67:50:14:ab:68:77:57:
eb:d8:70:70:f9:1a:85:8a:e0:5a:8b:56:a0:2b:90:
c3:80:3b:81:43:6c:52:8c:ad:c2:8b:d6:f1:77:78:
f0:cf:b3:89:25:71:c1:e1:a6:0e:fc:c9:29:af:0b:
6b:98:38:fa:14:61:7c:ca:b5:8a:12:7a:87:d0:1a:
b6:f3:35:13:ab:4f:03:b0:ea:41:1f:05:42:57:f1:
f9:34:36:a7:a9:76:41:f7:d3:dc:51:68:d7:1b:c6:
e1:d4:c1:a2:6a:d2:d3:eb:d2:64:aa:c3:33:e6:a9:
cd:69:fb:98:8d:45:27:77:97:c7:6d:19:7b:89:38:
d2:dc:1f:e7:f9:49:78:34:f2:0c:da:68:5e:60:ce:
2f:05:61:95:fd:2d:e4:0d:3b:eb:ee:d4:7b:e6:53:
67:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A2:80:4D:35:6D:DA:5F:40:9A:BD:F4:8A:F5:1D:E2:AA:5C:0D:0F
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/1qKATTVt2l9Amr30ivUd4qpcDQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.229.169.0/24
Signature Algorithm: sha256WithRSAEncryption
33:2b:0a:ed:e5:c9:ca:6b:91:3a:40:18:18:5b:94:88:7d:cf:
0f:28:d7:bb:be:6b:e1:85:92:b2:45:fe:6f:25:e1:71:66:92:
fa:1d:d2:a5:48:2f:f0:a8:dd:de:a0:56:97:ac:61:eb:e9:38:
7a:11:ec:c7:4c:89:57:42:c8:2e:37:c1:f5:3f:1a:86:83:68:
45:e8:4d:7d:62:22:ee:d2:5e:25:24:11:2c:96:c5:3f:12:48:
e1:06:b3:ef:78:62:33:6f:43:b2:02:50:80:cf:85:90:de:6b:
08:da:71:2b:34:3a:a6:09:7e:ba:fb:19:74:db:10:5b:ae:58:
62:c4:7d:a8:83:48:63:76:6f:8d:38:94:6a:05:af:49:54:c5:
cc:45:da:f5:b7:0f:64:db:7e:d5:fa:a1:bb:65:27:ef:ec:4e:
6a:ce:ce:89:9d:2c:46:12:d6:6c:b1:a9:7e:5a:d9:30:f8:66:
fd:1f:10:10:9e:fe:24:f6:40:70:e5:bc:6f:a8:fc:86:be:15:
2c:8d:84:2a:af:88:58:cc:a4:74:73:e1:16:65:bb:f1:2f:8d:
1c:b0:b4:57:b2:50:6c:ae:97:ae:64:13:bf:12:f3:a9:69:de:
60:af:20:8a:c5:54:b8:b1:89:57:90:1c:91:61:83:ca:74:fb:
59:22:b7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:40:58 2025 by rpki-client