Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/juRwNc8QuIZ_n_Panmu33Xzp_D4.roa
File: juRwNc8QuIZ_n_Panmu33Xzp_D4.roa (raw, json)
Hash identifier: NBxW7qr9gV1kKHAaWwc86JpqZPNLxXs/uJK0u8bNATc=
Subject key identifier: 8E:E4:70:35:CF:10:B8:86:7F:9F:F3:DA:9E:6B:B7:DD:7C:E9:FC:3E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194B2E7DBDAE166ECACF6E2055A3C9265CB
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/juRwNc8QuIZ_n_Panmu33Xzp_D4.roa
Signing time: Wed 29 Jan 2025 16:32:06 +0000
ROA not before: Wed 29 Jan 2025 16:32:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 103.245.228.0/24 maxlen: 24
103.245.229.0/24 maxlen: 24
193.124.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b2:e7:db:da:e1:66:ec:ac:f6:e2:05:5a:3c:92:65:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 29 16:32:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ee47035cf10b8867f9ff3da9e6bb7dd7ce9fc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:13:d5:36:f0:74:c9:76:d8:71:83:73:a1:22:
8d:85:b9:be:41:62:e0:50:12:c5:0c:e0:37:ea:e5:
c3:0d:21:6a:26:c6:9c:5e:0c:2e:d6:02:51:1c:9a:
9a:85:24:3a:88:d6:6f:fc:92:8f:49:46:ee:42:57:
e5:a7:0f:8b:cc:34:58:1c:c1:0d:82:2a:e5:59:1b:
d0:fe:31:7e:9f:5d:93:27:a5:ab:d2:a1:d3:a3:5d:
e0:8e:02:ed:95:d3:9b:71:7d:13:a4:b3:65:da:29:
e1:9e:2d:2d:65:7c:77:57:fb:9f:e8:f8:49:2b:b3:
39:7a:7c:55:b2:3e:81:4e:f2:c2:91:06:f2:57:b4:
ab:69:72:e6:07:07:72:d7:45:3d:77:c4:f6:eb:97:
51:a6:bf:97:b5:12:02:25:0f:81:bd:b2:28:7e:7b:
69:91:da:d5:1d:96:4b:5b:7d:10:4d:b1:2b:99:3c:
ef:3f:61:90:62:d9:ae:31:82:d8:f8:b5:bd:e1:48:
d8:a6:08:24:91:5c:b6:6a:16:96:f3:1d:9a:89:ce:
d3:f1:e2:3f:36:b8:6e:85:f5:26:94:49:f2:4e:eb:
f7:d4:cd:e9:2e:da:16:76:26:99:7e:8a:27:f0:6d:
c0:73:ca:70:00:bb:b9:73:74:ae:5f:e1:2f:a7:6c:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E4:70:35:CF:10:B8:86:7F:9F:F3:DA:9E:6B:B7:DD:7C:E9:FC:3E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/juRwNc8QuIZ_n_Panmu33Xzp_D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.245.228.0/23
193.124.224.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:d1:b8:7a:a9:ea:c4:33:42:59:24:8e:fa:a0:e4:45:30:ee:
bf:a9:76:90:93:ea:15:34:e9:95:e1:f7:ee:39:61:20:a2:96:
ea:3a:74:06:35:03:ba:6c:08:c6:13:23:be:65:30:f7:b5:f5:
30:18:45:ad:af:c7:22:b7:c0:e2:89:78:10:2a:17:00:18:eb:
ac:d1:86:7b:88:c9:5d:4a:c0:75:e2:95:ae:e6:ea:59:18:74:
e9:12:92:ba:aa:55:bd:f7:eb:93:b5:15:8e:a1:42:d7:24:29:
75:8a:56:17:8e:88:fa:ac:c5:3b:65:9c:28:b6:b5:0d:b2:1d:
48:fb:d0:32:84:75:1d:81:c1:3b:cd:72:c7:cd:7b:54:15:e6:
fc:df:92:14:80:73:3f:72:0c:0b:3e:d0:8f:a5:82:db:b0:e8:
e2:b0:91:5b:72:0b:95:ea:96:01:72:cb:c9:f8:6f:a2:86:fe:
cf:43:ea:71:80:1a:6f:43:7c:dd:5b:1c:0e:bd:bf:5e:20:bc:
91:4f:c4:fd:ac:e7:a2:cc:8a:ff:b5:d4:7e:96:d4:f3:ec:be:
2d:a8:50:85:05:5a:ac:bd:7e:fd:3d:fb:0f:ec:aa:d2:78:15:
75:fd:79:89:3a:aa:70:81:60:3a:06:48:64:96:f5:71:0a:02:
60:e8:44:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:10:39 2025 by rpki-client