Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/dPuUFhV8NKMg1Eyzpo3XKKBrSyQ.roa
File: dPuUFhV8NKMg1Eyzpo3XKKBrSyQ.roa (raw, json)
Hash identifier: JZO95le0AT9qZyGk77wE0TYV+xtaUVyy4hxb89m5QEk=
Subject key identifier: 74:FB:94:16:15:7C:34:A3:20:D4:4C:B3:A6:8D:D7:28:A0:6B:4B:24
Certificate issuer: /CN=7373c1ff55403d4792346493f769f8d033bef02c
Certificate serial: 019426D994B96F7EA619DA67A97BB53A74B0
Authority key identifier: 73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/dPuUFhV8NKMg1Eyzpo3XKKBrSyQ.roa
Signing time: Thu 02 Jan 2025 11:49:41 +0000
ROA not before: Thu 02 Jan 2025 11:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 213.230.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:94:b9:6f:7e:a6:19:da:67:a9:7b:b5:3a:74:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7373c1ff55403d4792346493f769f8d033bef02c
Validity
Not Before: Jan 2 11:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74fb9416157c34a320d44cb3a68dd728a06b4b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4e:da:ab:af:69:ce:32:1e:ec:14:8b:44:ea:
dd:e1:55:6f:9e:ec:2d:ec:d6:5e:72:9b:4f:2b:fa:
05:e6:8b:14:65:79:3c:26:d2:6b:b6:c0:e8:37:50:
9d:61:76:d5:d4:32:99:45:7e:00:30:b1:4f:b4:78:
a6:7a:b9:9b:91:63:f3:d5:ba:6d:52:d6:0d:1f:a2:
62:4e:69:6e:67:a5:31:90:8b:53:32:30:81:86:24:
d2:2b:c8:fe:3a:47:e8:7b:8d:6b:0d:45:47:6e:b2:
37:4a:a0:3a:95:79:df:7b:d9:d1:54:9f:79:eb:bb:
63:db:6c:78:72:11:6d:65:9a:d7:16:40:bc:b5:c1:
d7:55:ee:39:f0:c7:84:e4:62:bc:88:96:9d:56:40:
f7:21:e4:22:4d:fd:68:51:40:27:41:38:93:9d:d0:
d2:eb:9b:29:8c:30:bb:9c:01:f5:84:41:f6:9d:54:
5f:ef:60:20:d7:ad:f1:97:96:6b:7d:22:3b:6f:81:
94:6e:98:f9:4f:d5:9d:73:75:ed:4d:4d:95:8c:2a:
69:ad:f2:99:0e:1d:53:d1:18:08:1a:ef:ee:b4:ca:
81:20:bf:4e:cd:5b:df:39:40:2e:19:45:46:3a:00:
66:4a:73:45:da:17:2a:d5:9e:e7:83:9e:10:47:4e:
e3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FB:94:16:15:7C:34:A3:20:D4:4C:B3:A6:8D:D7:28:A0:6B:4B:24
X509v3 Authority Key Identifier:
keyid:73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/dPuUFhV8NKMg1Eyzpo3XKKBrSyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.230.203.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:4c:f6:d7:36:06:aa:c2:71:61:98:01:2e:58:32:a7:1d:da:
c8:7e:1b:64:58:d2:0c:e7:ce:b5:80:0c:5c:ca:54:e9:72:df:
9a:b7:f9:fe:33:3f:8e:93:ed:2f:8a:05:d0:39:2f:8d:61:a7:
2f:f2:b7:a0:ac:49:cd:30:bf:dc:de:26:21:42:e9:2e:16:c0:
3d:ba:98:f6:7f:e1:a2:18:20:df:14:b7:74:d8:95:79:11:e5:
6f:f5:47:54:e7:88:c2:40:9b:f3:14:21:03:2f:18:f8:3e:2f:
16:09:07:26:0b:33:a8:18:e5:17:c3:8b:16:70:ca:71:1f:16:
ce:32:55:86:63:ee:2d:f0:24:20:3c:17:ff:80:a6:24:db:4d:
1f:95:4c:b0:e9:3a:06:6d:bf:9d:6f:6d:29:46:3f:ee:2c:e9:
a2:d3:0c:02:4c:6a:96:32:57:f0:f9:12:b7:35:6c:84:2d:6c:
b3:31:21:32:8d:75:9d:25:42:fd:8c:35:34:ee:31:89:da:d4:
fd:9d:88:4c:cb:22:fa:18:27:7f:1e:aa:b6:40:8a:c1:55:50:
0d:ef:6a:5e:79:14:dc:46:0c:2b:a3:fa:aa:b3:f4:e0:80:39:
47:8f:19:61:e0:8b:9e:3f:94:b0:08:fc:94:99:b3:df:4a:80:
5a:d3:94:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2ZS5b36mGdpnqXu1OnSwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNzNjMWZmNTU0MDNkNDc5MjM0NjQ5M2Y3NjlmOGQwMzNi
ZWYwMmMwHhcNMjUwMTAyMTE0OTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGZiOTQxNjE1N2MzNGEzMjBkNDRjYjNhNjhkZDcyOGEwNmI0YjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnE7aq69pzjIe7BSLROrd4VVvnuwt
7NZecptPK/oF5osUZXk8JtJrtsDoN1CdYXbV1DKZRX4AMLFPtHimermbkWPz1bpt
UtYNH6JiTmluZ6UxkItTMjCBhiTSK8j+Okfoe41rDUVHbrI3SqA6lXnfe9nRVJ95
67tj22x4chFtZZrXFkC8tcHXVe458MeE5GK8iJadVkD3IeQiTf1oUUAnQTiTndDS
65spjDC7nAH1hEH2nVRf72Ag163xl5ZrfSI7b4GUbpj5T9Wdc3XtTU2VjCpprfKZ
Dh1T0RgIGu/utMqBIL9OzVvfOUAuGUVGOgBmSnNF2hcq1Z7ng54QR07jsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHT7lBYVfDSjINRMs6aN1yiga0skMB8GA1UdIwQY
MBaAFHNzwf9VQD1HkjRkk/dp+NAzvvAsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzNQQl8xVkFQVWVTTkdTVDkybjQwRE8tOEN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xYWZmMTAtZGQyOS00MzlmLThkMjMt
YmM5YTVmNjYwNWZjLzEvZFB1VUZoVjhOS01nMUV5enBvM1hLS0JyU3lRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8xYWZmMTAtZGQyOS00MzlmLThkMjMtYmM5YTVmNjYwNWZj
LzEvYzNQQl8xVkFQVWVTTkdTVDkybjQwRE8tOEN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ebLMA0G
CSqGSIb3DQEBCwUAA4IBAQCaTPbXNgaqwnFhmAEuWDKnHdrIfhtkWNIM5861gAxc
ylTpct+at/n+Mz+Ok+0vigXQOS+NYacv8regrEnNML/c3iYhQukuFsA9upj2f+Gi
GCDfFLd02JV5EeVv9UdU54jCQJvzFCEDLxj4Pi8WCQcmCzOoGOUXw4sWcMpxHxbO
MlWGY+4t8CQgPBf/gKYk200flUyw6ToGbb+db20pRj/uLOmi0wwCTGqWMlfw+RK3
NWyELWyzMSEyjXWdJUL9jDU07jGJ2tT9nYhMyyL6GCd/Hqq2QIrBVVAN72peeRTc
Rgwro/qqs/TggDlHjxlh4IueP5SwCPyUmbPfSoBa05Ru
-----END CERTIFICATE-----
Generated at Thu Apr 17 10:09:01 2025 by rpki-client