Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/CJcuaiMpQyoQn46xw-D6Thhavys.roa
File: CJcuaiMpQyoQn46xw-D6Thhavys.roa (raw, json)
Hash identifier: 37f0an+cXzNVOgfnUMDCZ1mYljjJ+Pt6QqAPWZ0deas=
Subject key identifier: 08:97:2E:6A:23:29:43:2A:10:9F:8E:B1:C3:E0:FA:4E:18:5A:BF:2B
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 019428232EC46D42E5444733CE5BBC2810FC
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/CJcuaiMpQyoQn46xw-D6Thhavys.roa
Signing time: Thu 02 Jan 2025 17:49:41 +0000
ROA not before: Thu 02 Jan 2025 17:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 212.113.117.0/24 maxlen: 24
212.113.118.0/24 maxlen: 24
212.113.120.0/24 maxlen: 24
212.113.121.0/24 maxlen: 24
212.113.122.0/24 maxlen: 24
212.113.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:2e:c4:6d:42:e5:44:47:33:ce:5b:bc:28:10:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 2 17:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08972e6a2329432a109f8eb1c3e0fa4e185abf2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:d9:26:b4:e6:4e:7e:15:a9:6e:d1:33:a5:
61:58:35:15:94:18:3b:36:c1:bb:36:45:d5:ac:4b:
53:07:99:d2:14:f2:4a:48:6e:26:7a:57:13:27:8a:
a8:0f:b1:bd:ed:d4:3e:e9:a1:ba:08:14:a8:57:e5:
0a:6b:4e:7b:a0:c6:50:8a:91:0f:2d:8d:2c:80:75:
14:1c:4f:7a:16:7f:54:df:e6:38:8c:43:67:a2:2c:
6d:65:4d:34:b6:b3:8c:9d:2a:d0:4e:6a:7b:41:09:
29:9a:b3:3a:78:7f:8a:d5:b5:71:9a:a0:c6:b7:8e:
24:2c:c5:c0:99:55:65:5a:18:15:8d:12:ba:26:ee:
4c:8d:02:f0:32:46:61:b9:b1:cc:f4:1e:52:01:3d:
fe:37:78:27:ca:53:5c:0d:c6:ce:4d:20:47:5d:54:
dd:ad:8c:68:b9:b5:df:84:d1:65:bb:64:e9:c9:16:
09:2f:b0:aa:fb:2f:61:98:a7:b2:a6:6f:a9:ba:7a:
c1:3c:32:5f:0c:04:9a:8e:b8:7e:1e:32:14:3e:c6:
db:11:4e:8f:de:3b:87:7e:f1:ff:7a:74:44:33:f5:
86:eb:93:5d:96:1c:ce:aa:30:64:60:29:03:9a:02:
85:c1:13:40:e8:8f:d2:1a:4b:ef:a6:8c:0a:c0:65:
f4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:97:2E:6A:23:29:43:2A:10:9F:8E:B1:C3:E0:FA:4E:18:5A:BF:2B
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/CJcuaiMpQyoQn46xw-D6Thhavys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.117.0-212.113.118.255
212.113.120.0/22
Signature Algorithm: sha256WithRSAEncryption
31:e2:2f:37:7a:fa:7e:36:6a:41:99:21:ba:25:c3:04:d5:5b:
9f:f2:30:68:27:f9:45:cc:0b:7a:1d:7e:cb:56:7d:d5:f7:2a:
97:1b:03:42:99:31:48:5d:bc:f9:8e:bc:58:48:dc:cf:c6:1e:
f0:48:9a:91:c3:d5:6c:19:e1:0c:68:07:9e:bd:4f:82:72:5f:
43:7f:bb:26:04:e8:28:43:66:64:9f:85:c2:a5:75:a9:a2:82:
9c:42:59:15:23:44:f0:b8:58:3a:6a:d1:1a:6a:ab:dd:58:53:
98:63:5b:1f:8f:1d:05:26:69:49:03:40:01:49:e6:35:88:8b:
5e:55:f9:2b:c5:b6:10:3c:9f:86:4e:e5:49:39:63:81:51:0a:
5e:b7:05:80:6f:a1:74:8c:d2:e5:d7:4b:01:d5:66:c4:44:52:
0d:d3:d6:da:1a:37:2c:f1:fa:5d:b7:37:c5:ae:02:47:80:15:
ff:b6:91:3a:fc:05:fe:0f:f1:7c:fe:28:83:88:7b:94:ef:8f:
b2:3a:e8:5e:54:01:9e:99:09:bf:b2:f4:74:ab:6c:d3:72:b4:
67:9c:27:e4:2a:b5:c9:14:f8:be:21:4a:28:61:e1:b3:01:0e:
a0:c8:20:9d:0e:3d:38:de:48:46:2e:0a:86:67:0d:90:dc:12:
4d:36:e2:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:07 2025 by rpki-client