Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/NLlq8DiYVFJMYAJlr9NHDav50Bs.roa
File: NLlq8DiYVFJMYAJlr9NHDav50Bs.roa (raw, json)
Hash identifier: 1feCq5rXN2U803Ez7sUO8zgEL070beNeKBUwCwKwE5Y=
Subject key identifier: 34:B9:6A:F0:38:98:54:52:4C:60:02:65:AF:D3:47:0D:AB:F9:D0:1B
Certificate issuer: /CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Certificate serial: 01941F8C09965078447062D56A371EF135DE
Authority key identifier: 26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/NLlq8DiYVFJMYAJlr9NHDav50Bs.roa
Signing time: Wed 01 Jan 2025 01:47:38 +0000
ROA not before: Wed 01 Jan 2025 01:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13237
IP address blocks: 31.204.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:09:96:50:78:44:70:62:d5:6a:37:1e:f1:35:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Validity
Not Before: Jan 1 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34b96af0389854524c600265afd3470dabf9d01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6f:68:94:16:ea:54:e4:3f:88:18:ed:8c:e7:
44:41:b4:45:bd:d5:09:70:46:35:c4:86:af:fd:af:
83:a7:b6:1f:b6:93:21:77:66:85:3c:14:f0:5e:34:
f6:17:da:30:38:f0:2b:46:50:56:4a:46:cf:2d:9d:
59:61:58:2c:69:f3:32:10:66:7e:06:a4:4d:e2:e4:
76:de:12:f9:9a:de:01:ce:e1:59:a5:e1:6c:b4:7e:
2b:98:65:88:1a:da:91:5c:f5:01:13:98:c2:84:93:
fd:4f:45:e1:1e:6f:30:b1:38:a4:76:91:4c:62:be:
70:fb:d4:5c:95:93:33:78:6e:9a:cc:54:17:42:d1:
79:ff:fa:12:ce:68:9a:40:70:2b:24:9c:e9:64:64:
9f:86:9a:91:37:39:04:7a:e5:6f:88:ae:94:ae:91:
14:ac:0d:de:62:5e:d6:ce:c5:e0:a3:e1:7a:08:08:
94:8d:f4:98:a4:dd:42:c4:6c:12:34:e2:15:ee:3c:
76:54:e4:87:b3:3e:db:68:a1:04:fe:9b:12:67:ad:
b0:8e:11:3c:f7:81:90:8d:39:c6:fd:7e:7a:3d:2c:
32:24:4f:9b:c5:fa:b4:ba:ba:bf:e1:5c:bb:87:89:
cf:78:97:64:b5:6a:c1:03:7f:cc:2e:de:77:c7:56:
15:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B9:6A:F0:38:98:54:52:4C:60:02:65:AF:D3:47:0D:AB:F9:D0:1B
X509v3 Authority Key Identifier:
keyid:26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/NLlq8DiYVFJMYAJlr9NHDav50Bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.204.124.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:8a:89:8e:4f:7f:73:71:44:e2:a3:c0:3b:a2:6f:d7:e8:c2:
44:d6:64:be:4c:ea:ab:5c:8b:ec:46:dc:9b:20:78:1b:86:85:
6f:1b:46:b4:c4:a9:a3:83:7c:80:ce:4a:0e:4c:ce:80:9c:c1:
12:98:36:8b:0a:1f:68:e8:5f:4a:8a:55:71:14:8d:60:ee:9d:
1c:4d:9e:eb:50:9f:5b:d3:2d:d8:dd:f4:ee:ae:47:f4:0f:06:
71:ae:16:d4:14:53:c4:89:e2:74:0c:5c:4b:aa:81:4f:d8:f5:
9f:76:35:d0:28:2b:66:73:a8:59:7e:38:ac:ec:e9:9e:31:44:
62:83:fa:0e:fc:9e:06:a4:5c:af:6f:ad:cd:fa:5c:49:82:46:
5d:4f:4e:f7:c6:0c:ff:6d:1b:44:64:dc:5a:b4:97:e6:e9:c6:
f7:9c:48:a1:e0:f9:06:54:42:5e:21:33:27:54:e2:d8:76:59:
3c:0b:ff:d7:64:91:0f:42:8f:7f:a3:7d:4f:86:2c:bc:e2:d0:
0c:0a:73:93:2d:86:35:80:2a:13:38:4c:ac:12:5d:e9:59:8d:
0d:ba:4c:14:ab:b3:bc:fa:36:9d:1f:71:89:07:c9:6b:33:ab:
d9:c8:e1:00:58:31:95:c5:4b:ce:5e:f8:b8:21:ef:01:31:7c:
f1:c8:ec:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:12:29 2025 by rpki-client