Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/_Nr1ZIwL3kVqHmpSbWhGtTcak-w.roa
File: _Nr1ZIwL3kVqHmpSbWhGtTcak-w.roa (raw, json)
Hash identifier: r+W8KRhrjGQulPkjPOpjd/Vkj9mqkvbHwy3L9pdNavU=
Subject key identifier: FC:DA:F5:64:8C:0B:DE:45:6A:1E:6A:52:6D:68:46:B5:37:1A:93:EC
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0194258F7FE9C7341590FFC2318613E37B53
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/_Nr1ZIwL3kVqHmpSbWhGtTcak-w.roa
Signing time: Thu 02 Jan 2025 05:49:08 +0000
ROA not before: Thu 02 Jan 2025 05:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 212.111.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:7f:e9:c7:34:15:90:ff:c2:31:86:13:e3:7b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 05:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcdaf5648c0bde456a1e6a526d6846b5371a93ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:c7:ee:55:b7:fb:95:b8:44:29:26:0a:75:
7c:4c:cb:ef:1d:ab:15:f9:74:73:b4:98:b0:c9:38:
ab:ca:c5:15:ab:f1:4b:af:51:02:30:05:ff:08:ee:
7e:32:9b:47:8b:b3:9b:54:23:d9:55:e4:d8:f5:c4:
e0:5d:d0:a5:a9:28:2f:a3:58:c8:14:27:8e:cf:0b:
5f:d4:46:1c:cd:d8:e2:66:4f:ce:43:2d:08:15:68:
8a:67:f6:b4:dc:85:9c:64:bb:56:c5:11:11:4d:75:
31:c4:0a:85:e0:34:01:4b:4e:66:41:46:7b:28:b6:
09:24:87:3f:aa:7d:94:d8:08:cd:89:0e:32:6d:df:
a9:91:2b:3f:21:b6:31:92:34:fc:ce:48:08:41:d8:
59:4e:16:3d:a5:5f:2b:26:82:8e:47:9d:76:12:cc:
fd:35:37:41:a4:66:b3:4c:2f:83:24:d6:66:12:81:
fa:52:28:24:c9:e2:a2:e8:7f:a2:39:d1:10:8f:e0:
8b:4d:94:ea:c6:d3:ea:da:90:b6:d4:7e:36:cf:67:
41:98:86:d7:19:bd:70:a4:e1:a7:78:59:fa:2f:e3:
3c:57:81:b8:9a:74:63:e2:87:61:f0:c8:b6:d0:77:
68:d1:9c:30:a0:c2:07:77:53:c9:dd:d1:20:16:e6:
e4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DA:F5:64:8C:0B:DE:45:6A:1E:6A:52:6D:68:46:B5:37:1A:93:EC
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/_Nr1ZIwL3kVqHmpSbWhGtTcak-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.111.220.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:e8:57:20:20:64:b6:51:e2:33:ec:a7:02:76:72:37:9d:ef:
96:a0:56:ab:ba:31:30:ca:ae:6b:45:b0:aa:fa:2a:5a:38:82:
66:d9:7a:2a:69:9d:2a:4a:3f:40:c5:de:f7:d4:ff:0d:12:34:
10:f3:61:9f:24:89:e8:a7:b3:16:a1:e7:fd:0f:ea:26:63:b5:
d9:70:97:63:56:dc:39:61:50:93:d0:5d:1e:2f:bd:3f:19:15:
ad:a2:2e:1b:b0:c7:c7:c8:72:8a:f6:57:86:6f:8a:04:6f:6b:
10:62:cc:cf:ce:0d:ff:ab:ec:27:cb:3b:69:5c:73:6a:be:6e:
0f:a1:ed:a5:b3:d1:f2:af:e1:53:7e:c6:0b:8d:bb:d3:56:b4:
46:a8:78:c2:18:ab:03:e4:3f:b1:e6:bf:3c:ac:7a:d5:95:79:
a8:29:65:65:41:0e:cf:7a:16:e6:9a:23:eb:89:c5:0e:90:49:
d4:ad:14:30:ac:da:8c:00:48:05:b3:af:14:6f:87:c6:48:85:
f9:fb:3f:8b:7f:1d:ed:8a:20:a6:09:0d:b7:35:72:e2:41:75:
e4:23:e8:1b:72:b1:f8:f5:55:c8:ca:2e:5d:b9:2c:4b:c3:d0:
6d:f1:1c:49:8c:d6:06:45:70:aa:e3:f3:be:86:3e:8f:c4:52:
1d:d0:6d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:23:18 2025 by rpki-client