Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/K9OoJ9oRdDGRAG9_JEraDylQYiQ.roa
File: K9OoJ9oRdDGRAG9_JEraDylQYiQ.roa (raw, json)
Hash identifier: EDky965lH+7d9zEKg3uh2UPLM5EYLdR0gznw5lmNnpo=
Subject key identifier: 2B:D3:A8:27:DA:11:74:31:91:00:6F:7F:24:4A:DA:0F:29:50:62:24
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 019421442DAB1C317FE3B22E20AD9810E01B
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/K9OoJ9oRdDGRAG9_JEraDylQYiQ.roa
Signing time: Wed 01 Jan 2025 09:48:23 +0000
ROA not before: Wed 01 Jan 2025 09:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214140
IP address blocks: 103.69.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2d:ab:1c:31:7f:e3:b2:2e:20:ad:98:10:e0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Jan 1 09:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bd3a827da11743191006f7f244ada0f29506224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:69:b9:bd:09:46:d5:42:37:bc:82:c9:78:60:
69:58:15:ad:8b:9b:7f:81:59:e4:54:26:32:b6:e9:
62:d0:61:49:2a:7b:23:dd:89:70:5a:4b:c6:f3:03:
51:73:6c:e8:a8:50:53:2d:4e:35:17:ac:87:10:71:
52:5b:f5:56:9d:94:ee:eb:34:8d:b6:86:64:9f:31:
39:88:6d:d1:88:19:94:ce:ba:a2:5f:21:88:4b:d4:
db:8c:6d:a1:d0:15:dc:01:0a:ad:55:7f:7d:2b:63:
f4:49:3b:49:dc:d4:46:93:c5:b2:64:0e:98:37:80:
cc:05:aa:e9:7b:01:79:6d:e3:6d:aa:bd:5b:5e:5c:
69:9f:f4:6b:56:0a:83:9a:c8:b2:8c:1e:0c:90:d4:
95:4b:f8:ee:70:1b:d7:b9:bb:9e:af:39:21:8f:bd:
81:32:60:2b:b0:5c:5d:d8:28:4d:ee:e0:77:37:31:
8d:98:27:76:1a:81:7c:b3:f8:bb:e5:99:fb:8f:04:
d4:dd:5f:94:b8:00:95:d4:db:a5:50:bc:99:44:1f:
dc:03:8f:3d:19:da:4e:68:18:27:96:66:e5:e8:8e:
b3:c8:57:8d:ba:7c:aa:a9:c4:3b:86:59:f6:d6:b6:
7b:ca:85:f6:ac:50:25:07:9c:88:9e:23:fd:67:ea:
74:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D3:A8:27:DA:11:74:31:91:00:6F:7F:24:4A:DA:0F:29:50:62:24
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/K9OoJ9oRdDGRAG9_JEraDylQYiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.227.0/24
Signature Algorithm: sha256WithRSAEncryption
50:c7:94:80:09:a1:c4:41:85:d7:4e:24:a2:9b:6c:0b:74:6c:
cd:5f:20:81:25:42:81:b1:47:20:22:f1:57:e5:44:e5:88:fd:
fb:90:59:88:ef:9d:59:53:75:77:bb:f6:e8:c9:0e:be:2a:66:
92:0a:18:3c:ab:35:69:6b:5a:75:5d:de:30:ee:ba:73:fb:50:
0a:16:d9:38:ae:3e:75:a0:52:b0:1e:a7:b7:3b:4d:a0:0d:87:
4d:65:83:cc:4c:ac:8b:2c:36:c9:3a:3b:57:3a:9a:28:a2:47:
5b:82:66:ff:10:53:b3:71:0c:f2:b2:32:7f:ba:ba:20:d0:9a:
00:3f:c9:ad:75:aa:5b:b6:aa:76:01:7a:0e:4a:bc:13:e5:fd:
63:d0:99:ff:3c:32:68:af:c1:90:1d:d1:c3:a8:6d:da:99:69:
aa:fb:f4:66:f3:61:4f:61:b2:39:91:77:22:5e:78:12:2b:be:
ae:d5:16:9c:87:27:c1:48:94:9b:e0:83:eb:1a:fe:e6:5a:e6:
98:9e:1c:a9:cc:b4:fa:b2:ea:38:b8:e0:2e:dd:a0:a0:ae:16:
f7:d4:24:88:3d:5c:33:8e:fe:b9:4a:dd:2c:c1:68:a7:4e:17:
37:94:c4:94:04:01:b0:bc:12:64:8b:17:9d:07:5a:2d:b9:e1:
86:37:3b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:28:04 2025 by rpki-client