Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/KjKCe6ofT1MaWcqvEHzd3y83DsE.roa
File: KjKCe6ofT1MaWcqvEHzd3y83DsE.roa (raw, json)
Hash identifier: fYONeSb8sEFnngSaKpwSRO2ffbgtr5Gv/r9LK52dcNs=
Subject key identifier: 2A:32:82:7B:AA:1F:4F:53:1A:59:CA:AF:10:7C:DD:DF:2F:37:0E:C1
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01944F9B827B18B3A50A52B5F0D2BB865368
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/KjKCe6ofT1MaWcqvEHzd3y83DsE.roa
Signing time: Fri 10 Jan 2025 09:46:19 +0000
ROA not before: Fri 10 Jan 2025 09:46:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208287
IP address blocks: 103.83.86.0/24 maxlen: 24
103.83.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4f:9b:82:7b:18:b3:a5:0a:52:b5:f0:d2:bb:86:53:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jan 10 09:46:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a32827baa1f4f531a59caaf107cdddf2f370ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:69:56:2c:26:75:35:26:39:4c:3b:56:5c:bc:
27:75:3d:e8:1b:d4:73:ff:b1:ef:86:10:1a:86:89:
1f:2b:45:32:36:40:15:ab:b1:94:3b:ee:f2:62:7b:
32:91:42:39:eb:4b:c2:0e:bc:7e:b2:89:9a:44:57:
cf:d8:5e:34:28:f9:31:67:bd:00:09:d4:79:ca:25:
9d:6a:ef:41:e4:0e:a6:9e:9f:c8:18:a3:5c:e2:08:
f4:9e:fe:60:df:24:e3:c6:8f:5e:0a:e3:d1:a0:8b:
58:cf:e8:c6:dc:a5:90:26:72:f9:2c:e0:23:9f:e4:
96:41:c3:ce:89:bf:7c:96:a0:34:15:73:01:2d:6c:
11:5c:d7:14:ee:65:ee:c2:64:47:15:97:38:84:e1:
31:c7:0e:8c:38:52:46:55:45:1a:27:3d:61:f9:fe:
2d:c0:a9:3a:5d:49:75:4f:8c:f9:79:75:5d:6f:b4:
ee:55:2e:21:ab:0b:3e:42:67:61:7e:f2:c7:af:cb:
10:ee:9d:aa:f8:51:7b:f7:a8:cd:b1:59:64:3d:f3:
14:c6:28:65:b6:1d:81:f0:c2:bd:d5:82:a0:9a:d7:
ea:78:f7:cf:cd:3f:43:b5:be:82:e1:c3:1c:32:29:
a7:3c:a2:bc:20:f2:d9:09:81:37:76:b0:b8:f7:49:
21:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:32:82:7B:AA:1F:4F:53:1A:59:CA:AF:10:7C:DD:DF:2F:37:0E:C1
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/KjKCe6ofT1MaWcqvEHzd3y83DsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.83.86.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:53:8b:6e:09:48:19:12:ba:32:f3:af:23:a8:87:15:41:58:
fb:65:d2:17:92:48:e8:c8:ae:b5:d6:a4:2d:ba:52:e0:60:43:
8e:25:ee:46:86:40:80:b2:c7:72:18:ac:07:2c:0c:47:ab:2b:
4c:36:1b:27:47:0c:a3:a7:bc:16:e1:04:6a:b4:88:82:db:eb:
d8:bd:b4:f5:bc:b3:aa:25:d8:01:78:c5:49:ff:a1:5c:88:b9:
58:b8:39:af:34:50:d2:02:1b:62:18:ac:46:1f:28:48:ad:87:
c1:4c:48:74:2f:51:03:c0:29:60:18:b4:4e:67:30:e8:82:86:
dd:08:13:48:ea:94:4e:24:1a:2f:8f:58:26:21:1c:f8:9d:77:
e1:9d:fe:ad:70:8e:e2:62:29:72:4d:7c:08:86:96:75:3b:a3:
65:5c:75:bf:d3:36:c6:47:1a:4b:23:1e:17:f8:d9:f5:7c:e5:
3c:88:f0:04:7a:4e:d1:3d:91:55:4c:49:dc:f8:e0:79:45:ae:
1e:4e:22:7a:65:47:87:50:e7:67:57:93:f7:0c:c1:04:62:fa:
e7:f9:c3:b2:03:ba:25:32:63:71:cb:1f:c4:8b:ca:c7:18:35:
4a:7e:22:91:5d:2d:2c:75:c4:52:3a:ea:cf:13:d0:c7:92:2d:
d8:22:42:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRPm4J7GLOlClK18NK7hlNoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz
ZWRmNGIwHhcNMjUwMTEwMDk0NjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTMyODI3YmFhMWY0ZjUzMWE1OWNhYWYxMDdjZGRkZjJmMzcwZWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GlWLCZ1NSY5TDtWXLwndT3oG9Rz
/7HvhhAahokfK0UyNkAVq7GUO+7yYnsykUI560vCDrx+somaRFfP2F40KPkxZ70A
CdR5yiWdau9B5A6mnp/IGKNc4gj0nv5g3yTjxo9eCuPRoItYz+jG3KWQJnL5LOAj
n+SWQcPOib98lqA0FXMBLWwRXNcU7mXuwmRHFZc4hOExxw6MOFJGVUUaJz1h+f4t
wKk6XUl1T4z5eXVdb7TuVS4hqws+QmdhfvLHr8sQ7p2q+FF796jNsVlkPfMUxihl
th2B8MK91YKgmtfqePfPzT9Dtb6C4cMcMimnPKK8IPLZCYE3drC490kh2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCoygnuqH09TGlnKrxB83d8vNw7BMB8GA1UdIwQY
MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt
OTQ0OTk1N2ZkNWE1LzEvS2pLQ2U2b2ZUMU1hV2NxdkVIemQzeTgzRHNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1
LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ1NWMA0G
CSqGSIb3DQEBCwUAA4IBAQCdU4tuCUgZEroy868jqIcVQVj7ZdIXkkjoyK611qQt
ulLgYEOOJe5GhkCAssdyGKwHLAxHqytMNhsnRwyjp7wW4QRqtIiC2+vYvbT1vLOq
JdgBeMVJ/6FciLlYuDmvNFDSAhtiGKxGHyhIrYfBTEh0L1EDwClgGLROZzDogobd
CBNI6pROJBovj1gmIRz4nXfhnf6tcI7iYilyTXwIhpZ1O6NlXHW/0zbGRxpLIx4X
+Nn1fOU8iPAEek7RPZFVTEnc+OB5Ra4eTiJ6ZUeHUOdnV5P3DMEEYvrn+cOyA7ol
MmNxyx/Ei8rHGDVKfiKRXS0sdcRSOurPE9DHki3YIkK1
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:47:50 2025 by rpki-client