Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/cAvPgJnDexIKpiHvGayqSS9-kC8.roa
File: cAvPgJnDexIKpiHvGayqSS9-kC8.roa (raw, json)
Hash identifier: 4W7cnhuEBxCD2cWqtC/raaWqxEh9cF8vkDRXNWnz3ZE=
Subject key identifier: 70:0B:CF:80:99:C3:7B:12:0A:A6:21:EF:19:AC:AA:49:2F:7E:90:2F
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 0194206813504D823F74F26309B261CBBC2D
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/cAvPgJnDexIKpiHvGayqSS9-kC8.roa
Signing time: Wed 01 Jan 2025 05:47:58 +0000
ROA not before: Wed 01 Jan 2025 05:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206388
IP address blocks: 103.215.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:13:50:4d:82:3f:74:f2:63:09:b2:61:cb:bc:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Jan 1 05:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=700bcf8099c37b120aa621ef19acaa492f7e902f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:77:92:66:2b:c6:63:5c:9b:f2:b0:ca:7d:97:
17:4e:0f:cb:6e:77:f0:e4:e5:2a:d7:08:80:34:38:
03:e4:27:68:f2:ba:73:dd:71:65:1c:10:37:8e:75:
a0:36:3b:18:9a:d1:a4:ad:d4:2f:5d:9b:6c:6c:52:
92:5e:37:41:5a:98:a5:7f:87:f7:57:b9:ca:c7:92:
9a:b2:df:d1:b7:b0:a6:be:ce:88:07:42:6b:6b:27:
eb:ba:03:9e:ff:4c:26:01:33:4c:88:39:5d:88:d3:
e5:7d:d8:ff:22:27:92:be:d2:8e:2f:98:b5:90:2b:
78:b0:2e:33:da:ab:39:f1:86:2e:0b:4a:34:77:cb:
74:bc:6d:3b:9f:d2:fc:ea:3d:8c:19:b2:9e:78:e0:
1f:dd:57:50:76:8b:8d:a3:09:7b:43:8d:01:80:85:
2f:56:85:e0:8c:58:ef:d9:c6:0f:85:72:99:b1:b1:
f9:ba:9f:05:f4:ba:76:fb:0c:4d:fa:63:ad:20:2e:
d9:de:72:b0:00:59:13:9a:d8:29:50:b2:57:bb:e8:
cd:ca:4b:6d:f8:c9:58:75:7f:91:ee:02:7e:61:e4:
a8:44:d0:2b:47:e6:93:09:e8:4a:92:db:e0:61:58:
e0:c4:aa:59:e4:6a:07:6b:ba:96:7a:24:80:64:b4:
14:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0B:CF:80:99:C3:7B:12:0A:A6:21:EF:19:AC:AA:49:2F:7E:90:2F
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/cAvPgJnDexIKpiHvGayqSS9-kC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.215.221.0/24
Signature Algorithm: sha256WithRSAEncryption
21:dd:96:29:0e:e4:c7:07:87:92:89:48:99:3c:45:1a:0a:01:
0e:34:7d:be:68:23:21:f2:f1:ec:69:3e:b5:cd:b9:9c:cc:96:
ad:18:58:45:73:f1:f5:39:19:81:35:e6:07:4f:4d:63:f5:37:
e4:17:1c:52:e5:f6:4a:32:50:dc:d2:02:67:f0:a3:47:9c:b5:
8b:0e:2b:74:e0:11:1f:d2:2d:b0:94:f0:5d:29:92:cd:b6:b3:
55:98:57:9f:a8:10:4f:74:0b:9c:4d:ea:e2:27:44:15:1f:ad:
bd:2f:62:f3:9b:8d:9a:62:95:8c:d6:ea:64:d6:42:2d:4a:9f:
5f:51:96:e1:1b:3c:19:70:a9:ca:21:82:eb:62:2b:e4:4c:89:
60:f4:ae:82:b1:35:92:70:7d:11:56:14:1a:cb:c8:77:68:0f:
4c:db:be:fe:de:8e:56:0d:74:de:f8:50:45:bb:e0:ea:ca:1d:
75:3d:55:78:a1:3e:a3:48:78:e3:37:58:5d:b6:66:ff:74:43:
c0:16:db:80:3f:13:f5:8d:5b:64:89:ce:62:ed:18:0b:20:91:
7e:68:64:65:38:14:4c:cf:3b:38:b6:d3:e0:e5:7c:f9:d9:16:
7f:1e:dc:69:28:98:d9:07:c1:8a:53:42:25:0d:5f:16:14:b6:
02:e6:be:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:33:54 2025 by rpki-client