Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/FsDy2cHnyFzmkQXT65jnMG-Kv5Q.roa
File: FsDy2cHnyFzmkQXT65jnMG-Kv5Q.roa (raw, json)
Hash identifier: 79BKQaza4yIQIheh4gwrObaM9c2fPwgCIaGF+rPd+5M=
Subject key identifier: 16:C0:F2:D9:C1:E7:C8:5C:E6:91:05:D3:EB:98:E7:30:6F:8A:BF:94
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0194258F87F69FF0F9C71D6B1578FA527706
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/FsDy2cHnyFzmkQXT65jnMG-Kv5Q.roa
Signing time: Thu 02 Jan 2025 05:49:10 +0000
ROA not before: Thu 02 Jan 2025 05:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204879
IP address blocks: 212.111.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 17:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:87:f6:9f:f0:f9:c7:1d:6b:15:78:fa:52:77:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 05:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16c0f2d9c1e7c85ce69105d3eb98e7306f8abf94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:5c:07:68:6d:43:0b:04:27:3c:b4:c8:ef:
82:19:c7:8e:f6:00:ea:07:9d:d9:6d:78:5e:bd:01:
a6:83:55:d0:43:22:10:7b:29:ce:80:ea:0b:fd:fb:
1d:d4:72:b0:1a:88:d5:4b:fc:b0:18:bb:1f:78:a4:
df:31:29:c7:24:77:12:ec:ec:15:53:c7:8a:de:51:
9f:a6:63:6c:37:1d:94:39:ad:50:74:4a:ac:dd:d1:
5e:41:13:4d:45:12:f9:2c:f9:d1:04:80:e1:59:db:
d4:84:83:8a:00:41:9a:70:51:bc:17:c9:e0:5a:19:
7c:f2:f0:f4:d6:a9:af:f9:9a:90:82:f0:91:82:94:
c3:c5:ca:2c:85:09:ee:8a:7e:58:9d:e2:f6:f3:df:
af:6d:8a:16:a1:0b:3b:46:6b:34:c9:7a:ac:ea:e7:
a1:22:dc:c4:f4:51:10:84:7d:f3:1a:ea:7d:13:35:
45:d4:32:b1:e2:fb:d3:57:e9:32:48:48:4d:01:d0:
1f:20:61:7c:ac:d3:ce:bf:ab:b2:03:c1:84:6a:39:
b0:68:42:59:2c:af:cf:60:4a:6d:1b:1b:57:5a:c5:
9d:a1:d5:3f:3a:da:31:49:69:00:2f:27:5a:86:aa:
fa:42:d5:99:f3:68:ac:1f:32:51:a9:cf:6a:bd:7f:
e8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C0:F2:D9:C1:E7:C8:5C:E6:91:05:D3:EB:98:E7:30:6F:8A:BF:94
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/FsDy2cHnyFzmkQXT65jnMG-Kv5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.209.0/24
Signature Algorithm: sha256WithRSAEncryption
91:39:87:df:a7:b6:78:e9:27:1f:bc:64:9b:d1:c3:b8:12:e4:
ae:56:3a:a1:5a:ef:b6:ab:e3:10:91:a8:4d:9d:84:29:88:c6:
d6:1a:50:c7:9b:e6:a3:35:91:5b:d6:33:52:32:d7:cd:df:01:
c2:dd:67:2c:33:8f:0b:4d:ba:1f:86:d6:97:58:21:ba:b1:fb:
05:f4:b0:d3:a6:1d:5b:00:bf:dc:8b:62:d5:a3:05:3e:b1:49:
b9:e3:3b:b4:64:23:83:5c:65:1e:ee:a4:a3:3a:17:c0:da:7f:
af:41:49:eb:f0:eb:35:4f:0a:71:a9:c6:b2:60:92:f5:0d:1c:
04:03:31:eb:d4:96:49:16:6e:4a:5d:15:47:86:d5:59:db:e4:
53:12:16:9e:33:17:67:be:9d:46:6f:15:ae:5b:0d:86:74:b2:
1a:5f:0f:d2:9a:db:c3:eb:18:da:49:59:91:2e:53:5c:83:9e:
67:dd:4b:61:b2:ca:ca:49:d0:f8:a8:7a:64:05:78:ed:49:09:
7f:8a:a0:28:53:6d:96:ee:44:a1:d0:d7:97:61:5b:d5:f3:4e:
74:d7:1b:aa:f6:32:33:15:6b:c5:07:28:54:6e:40:a3:8b:01:
59:ae:05:ca:06:24:94:21:85:9c:97:b2:3d:ca:08:d6:3d:3b:
a0:e5:30:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:25:12 2025 by rpki-client