Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/dPWQRCK8tRywmupRDBF6DjHlK3w.roa
File: dPWQRCK8tRywmupRDBF6DjHlK3w.roa (raw, json)
Hash identifier: x3kzJU8BweqPucCaALH2PYkhzYGBJVs7x16v7REGfN4=
Subject key identifier: 74:F5:90:44:22:BC:B5:1C:B0:9A:EA:51:0C:11:7A:0E:31:E5:2B:7C
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 0194228DA618C2DA59EDB650033610C0FF29
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/dPWQRCK8tRywmupRDBF6DjHlK3w.roa
Signing time: Wed 01 Jan 2025 15:48:15 +0000
ROA not before: Wed 01 Jan 2025 15:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60659
IP address blocks: 213.74.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:a6:18:c2:da:59:ed:b6:50:03:36:10:c0:ff:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 15:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74f5904422bcb51cb09aea510c117a0e31e52b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9d:d9:e4:64:1c:b5:54:92:6a:c8:49:8f:75:
4a:6c:d0:b4:e0:b7:79:e6:49:2c:ef:07:d2:92:6a:
f2:fd:6b:48:ce:c0:d9:d6:0f:0b:e4:32:26:54:8f:
c5:99:ca:47:a1:73:f1:de:de:8b:7a:d7:56:81:1d:
41:d9:2c:65:82:76:5a:72:60:04:d7:cd:7f:24:4f:
bf:3c:9f:a0:ff:c1:e6:da:d2:fe:00:48:6d:66:2f:
4b:1a:b4:9d:ea:62:fb:0b:b0:3e:04:f2:12:bc:4f:
6c:d0:da:90:86:6f:10:09:d6:ba:cc:da:2f:32:82:
87:27:16:d4:c2:f1:dd:9b:1a:34:39:80:1f:64:9a:
71:f1:f3:94:95:ed:33:10:43:dd:85:39:c5:82:c8:
d7:29:71:01:68:0e:21:55:08:63:0a:92:e0:ce:21:
41:c9:d3:67:51:c3:b6:6b:21:c8:20:58:a6:d3:2f:
d8:a9:ae:8b:7b:06:02:16:9b:34:ee:84:9a:01:fd:
38:87:90:b3:b1:e7:0f:7a:d3:3d:88:d5:87:69:60:
28:af:97:7f:ea:ce:16:9b:68:1c:b4:2e:b2:ec:44:
0e:67:9c:86:50:0f:0b:1f:b4:4a:98:d4:f0:5f:f6:
fb:1c:53:91:04:4f:0f:bf:fb:2c:2a:f8:0a:a6:3e:
9a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F5:90:44:22:BC:B5:1C:B0:9A:EA:51:0C:11:7A:0E:31:E5:2B:7C
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/dPWQRCK8tRywmupRDBF6DjHlK3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.74.102.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:dc:be:68:38:7d:6b:3c:2d:c7:d3:aa:4e:83:fc:9b:61:ed:
b3:88:ba:f8:72:99:e0:b9:0b:a7:70:40:eb:8c:e7:1c:8b:40:
d1:38:4a:2a:37:66:94:ee:08:80:d6:49:38:1e:1d:f9:12:82:
d1:76:63:ac:99:ff:db:ea:be:05:eb:9b:17:c2:29:2e:f4:ef:
4d:5b:cd:70:28:c8:66:b9:a9:7a:de:5f:98:c8:ad:0c:4d:3d:
cb:d2:e1:e9:83:9c:a2:f3:db:04:83:65:57:01:26:fa:15:3e:
1c:c1:96:84:95:31:9b:bb:cf:90:3a:6a:8e:3e:ed:5e:3f:9d:
3c:2a:f8:f2:9c:60:e4:11:28:be:39:a1:35:e5:67:60:74:72:
cc:0f:a1:29:f8:e6:05:77:40:2e:92:41:70:c8:d3:49:e8:6f:
59:07:46:f4:5e:ca:30:a5:a2:60:74:34:b4:7e:6e:85:65:98:
22:de:d2:86:0b:90:f5:7d:c6:35:42:d0:72:0c:44:9f:47:8a:
c7:bc:fa:3a:e4:0d:0d:a7:de:a6:a2:4c:27:b7:b9:99:27:91:
00:46:0a:dc:90:54:d1:dc:17:c0:98:e9:e0:d1:30:29:d7:91:
97:5a:7a:d2:b5:77:3a:6e:18:14:48:89:39:ea:f2:e1:bc:ae:
a7:33:00:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:06:13 2025 by rpki-client