Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/_v6OGldOMUPA91DrhU6xyqPT8d8.roa
File: _v6OGldOMUPA91DrhU6xyqPT8d8.roa (raw, json)
Hash identifier: srExzqQ0MRNpZgHMuu41p9bjJ2cAwgSr/E3UqsqybOQ=
Subject key identifier: FE:FE:8E:1A:57:4E:31:43:C0:F7:50:EB:85:4E:B1:CA:A3:D3:F1:DF
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0195F7B59EAF1F14C850BB7A9BE038072501
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/_v6OGldOMUPA91DrhU6xyqPT8d8.roa
Signing time: Wed 02 Apr 2025 18:13:49 +0000
ROA not before: Wed 02 Apr 2025 18:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47959
IP address blocks: 104.239.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f7:b5:9e:af:1f:14:c8:50:bb:7a:9b:e0:38:07:25:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 2 18:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fefe8e1a574e3143c0f750eb854eb1caa3d3f1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ca:36:6d:70:84:4c:b1:48:f9:69:2c:49:98:
fe:54:a9:bb:3b:60:b4:5c:fd:73:c2:19:71:6a:ac:
3b:94:bd:04:ef:27:90:08:ac:98:6f:1a:42:d4:3f:
34:82:96:bf:6b:cc:22:61:75:fb:87:14:83:51:8d:
6f:0b:9e:bf:a7:70:9c:31:ab:e5:f0:ba:77:ee:3f:
4a:9f:15:14:2e:02:d9:17:79:f5:dc:b9:ab:5d:b6:
45:87:c0:2d:18:15:36:b3:92:c4:b3:86:c5:3b:77:
32:7c:27:e2:d2:e2:97:0d:10:a2:21:21:58:b6:e3:
03:e3:f7:d4:f9:4d:c5:6d:4c:0d:8a:95:66:47:ce:
28:e7:e9:a1:25:fd:1b:6c:b7:1a:3d:f6:28:78:f8:
39:78:50:5b:f5:0c:c7:b2:fb:9a:fd:85:ed:50:ef:
09:c8:d6:dd:37:63:36:be:62:57:0a:1f:06:07:c2:
f6:f6:a2:75:2a:d5:48:63:43:57:1f:41:4a:58:72:
9f:39:b1:31:ff:a8:65:69:f7:32:20:8f:a9:ac:80:
7c:d6:93:72:ed:9f:1c:4c:f3:48:5b:da:d5:44:b5:
dc:b5:1c:05:ba:a9:96:8d:8a:b5:84:d4:20:84:3e:
dc:ce:fb:06:52:68:2e:51:93:f5:4e:41:cc:d1:68:
39:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FE:8E:1A:57:4E:31:43:C0:F7:50:EB:85:4E:B1:CA:A3:D3:F1:DF
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/_v6OGldOMUPA91DrhU6xyqPT8d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.239.103.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a3:dc:10:06:f3:3d:4a:2f:bb:40:78:a4:b9:fb:95:a3:e5:
e2:09:e3:a9:c8:26:05:51:5d:e8:fd:78:ed:1f:0b:94:01:f1:
f3:e8:a7:30:da:be:10:80:17:b3:e4:32:8a:87:f9:29:5f:c6:
f0:a3:9b:41:ca:cb:3d:93:a4:08:dc:03:01:ef:97:75:aa:64:
2f:a4:b5:b4:b1:4a:16:c7:91:fc:99:95:22:52:2e:0d:42:0d:
53:a6:71:3d:cb:e6:e8:4d:ac:7c:40:b4:d5:3e:cb:23:eb:4d:
5e:57:2e:cd:18:38:7f:2e:13:b2:eb:7e:34:45:7b:f2:d4:ff:
1f:51:cc:0b:25:9c:00:ec:33:52:c1:09:95:43:cf:2d:25:28:
7f:8e:1d:44:0c:8b:f6:99:ca:08:e4:49:46:d8:4b:b2:8d:6c:
3e:16:36:13:6c:59:60:62:6c:25:81:11:a7:14:fa:10:69:bf:
c7:b2:79:46:9b:2f:e9:10:65:66:67:dc:5f:1b:3f:ec:60:39:
eb:a3:a7:3c:16:7a:7c:a8:f5:42:2d:9c:92:c0:e3:86:72:ac:
97:f1:5e:b5:16:59:ec:1e:2e:2e:b1:c6:8c:02:d1:cc:89:2c:
9a:74:37:d8:7d:08:cb:93:61:c5:a1:33:5b:aa:e3:61:04:9a:
8b:bf:1d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:44:45 2025 by rpki-client