Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/iZ5BNUFZRJn7y_9ZxCJ-W-SdfaY.roa
File: iZ5BNUFZRJn7y_9ZxCJ-W-SdfaY.roa (raw, json)
Hash identifier: pEFIpnuch1qRnOFnkvakcOhoMdolz6e61+pO/vjQc1g=
Subject key identifier: 89:9E:41:35:41:59:44:99:FB:CB:FF:59:C4:22:7E:5B:E4:9D:7D:A6
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01941FFA8C79536E136AD330315D5C97AF0A
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/iZ5BNUFZRJn7y_9ZxCJ-W-SdfaY.roa
Signing time: Wed 01 Jan 2025 03:48:21 +0000
ROA not before: Wed 01 Jan 2025 03:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212667
IP address blocks: 103.146.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:8c:79:53:6e:13:6a:d3:30:31:5d:5c:97:af:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Jan 1 03:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=899e413541594499fbcbff59c4227e5be49d7da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:10:27:08:87:48:8e:51:48:96:c8:2a:57:
cf:6f:2c:7c:18:22:55:b8:71:3e:d8:cb:6f:79:69:
8e:9c:e7:75:ba:ad:0d:59:e8:a5:80:62:d6:18:34:
83:2e:ea:85:05:80:23:53:2d:d2:ec:9d:a6:5e:df:
10:28:39:51:e1:09:93:58:7d:53:58:13:53:72:75:
d1:25:43:f1:06:2b:bf:3c:53:d2:11:fe:70:18:0c:
75:b9:5f:71:a3:b9:5b:1a:be:75:c5:0b:74:9a:66:
8d:14:2b:60:cc:4a:d2:fc:c2:3f:1e:a1:df:bf:ba:
a0:06:71:2a:6b:58:ab:68:ef:dc:a3:23:38:8a:f1:
d8:9b:1d:db:c8:71:23:35:44:6a:d0:00:91:26:96:
c1:a8:79:0f:45:9e:0c:b5:35:66:62:f6:75:93:e2:
35:d8:47:34:66:48:03:6b:ea:78:1e:95:99:99:ca:
a0:8c:d7:da:79:ea:85:b8:2c:c8:dd:31:c9:9b:95:
de:3b:1b:d7:8f:87:e7:78:ad:22:b1:da:60:d2:7b:
7a:d3:4f:ae:2a:39:ec:f9:1c:81:97:ce:f8:f7:2b:
0a:ce:5a:e7:91:4c:3b:bb:c8:35:aa:42:63:ac:45:
64:a4:13:10:6c:d4:bd:c6:74:5a:c4:a7:63:d3:d1:
c8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9E:41:35:41:59:44:99:FB:CB:FF:59:C4:22:7E:5B:E4:9D:7D:A6
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/iZ5BNUFZRJn7y_9ZxCJ-W-SdfaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.146.97.0/24
Signature Algorithm: sha256WithRSAEncryption
59:27:7f:11:5d:6b:15:bd:d0:67:46:f1:68:14:f0:8e:9a:3d:
59:77:78:cf:1c:74:94:20:1e:ad:cb:a3:e5:db:b5:ab:fc:40:
c8:4c:9f:df:96:2c:13:ae:7f:8c:af:27:67:7b:0e:5e:3b:c2:
cd:dc:d1:a6:59:22:2a:19:56:aa:73:03:12:43:23:4f:c7:b2:
0d:63:14:29:43:03:eb:8c:b9:ee:6e:82:5c:0d:1f:a5:d8:74:
35:d9:7a:39:20:f1:fe:19:3a:3f:a3:63:81:be:a3:1e:94:52:
b2:3f:b3:3d:40:f7:76:85:82:a4:76:8e:a4:08:6c:5c:2b:74:
b6:bf:46:92:ba:07:fd:e2:16:d5:10:00:a0:9d:91:04:42:5e:
b3:2a:1e:9c:60:cc:02:7a:9c:93:d5:d0:cc:f3:af:14:07:4c:
a6:23:1f:b6:6c:22:e4:19:e6:15:1f:2c:7f:b2:71:3f:06:ad:
b8:b7:60:4a:87:69:cd:70:62:c2:2d:e6:2a:de:cb:da:2c:76:
89:ae:b4:ed:e6:59:23:2a:f6:49:9e:fa:df:9f:0f:94:2d:b4:
37:c0:24:d7:31:16:19:bb:f8:07:00:01:6d:a0:64:b6:67:c8:
8f:6b:00:90:25:be:46:14:02:df:bc:94:30:e8:00:47:dc:4f:
65:93:01:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:01:06 2025 by rpki-client