Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/PQBUdlDifrQf9b3SKjwUP9QqyB0.roa
File: PQBUdlDifrQf9b3SKjwUP9QqyB0.roa (raw, json)
Hash identifier: Ar+0pAhjgV4ed/yHfXpFmPqa4VgSlYaWB9NlO2aUD3s=
Subject key identifier: 3D:00:54:76:50:E2:7E:B4:1F:F5:BD:D2:2A:3C:14:3F:D4:2A:C8:1D
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018D2044202B2A8820CD38F693C7456F2B21
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/PQBUdlDifrQf9b3SKjwUP9QqyB0.roa
Signing time: Fri 19 Jan 2024 05:49:12 +0000
ROA not before: Fri 19 Jan 2024 05:49:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136359
IP address blocks: 103.212.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:20:44:20:2b:2a:88:20:cd:38:f6:93:c7:45:6f:2b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 19 05:49:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d00547650e27eb41ff5bdd22a3c143fd42ac81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:76:2f:d8:b2:ad:a3:e6:bd:36:70:e9:77:3b:
36:b6:ca:27:b9:14:21:90:a5:d4:2f:98:a1:71:e7:
f0:5c:44:42:49:2c:a7:cd:0d:21:ad:90:5c:4a:bc:
30:f3:aa:26:8e:2f:56:41:3d:4c:3c:65:42:20:7b:
f6:53:9d:ef:6e:7a:0d:df:38:c5:39:c8:66:3d:d2:
6f:52:45:8f:c8:65:80:c7:d5:7b:64:69:17:06:1f:
2e:97:15:8d:e2:0b:83:0e:f6:f1:27:77:a3:81:78:
39:e7:75:c9:bc:6e:47:0f:8b:51:d6:ad:b5:60:f3:
2a:63:47:8b:00:24:49:ca:57:8e:fb:64:4c:73:24:
6d:e9:17:42:90:03:c2:54:5d:12:21:d3:d5:e2:72:
37:00:8a:f6:1a:98:f7:97:f2:3d:ed:6d:e9:6e:7d:
9f:0e:d7:7b:4a:3d:02:be:62:0b:67:96:e4:0e:81:
c8:80:fe:59:88:3a:47:ff:cb:47:58:f6:f6:80:ed:
9c:21:1d:a3:de:59:2f:04:9f:2f:4d:89:09:e7:8b:
4f:f3:d9:58:3f:d0:e1:04:d6:77:7e:4b:10:95:d0:
fa:95:48:4a:22:10:bd:96:8d:04:66:cb:e0:9e:8c:
4e:b9:47:29:5a:92:9f:6d:c3:d2:bb:8e:63:95:ed:
1b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:00:54:76:50:E2:7E:B4:1F:F5:BD:D2:2A:3C:14:3F:D4:2A:C8:1D
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/PQBUdlDifrQf9b3SKjwUP9QqyB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.212.81.0/24
Signature Algorithm: sha256WithRSAEncryption
75:52:ad:c6:0e:fe:a1:ae:d1:77:de:ce:80:db:14:d9:f3:0e:
ca:5c:15:9e:4c:08:c6:17:b8:cb:7b:76:f3:22:35:9f:c6:a9:
e4:7f:4c:c2:ed:aa:b6:ca:fa:ba:a2:49:6f:2f:e1:df:a8:fe:
23:7e:16:aa:92:dd:38:e4:49:01:50:a3:25:36:12:6f:76:5c:
9e:d6:2c:74:bb:ea:ef:0d:7b:33:64:d9:74:ee:35:bf:a6:30:
c1:80:fa:80:31:ae:d4:3d:51:23:fb:29:23:77:89:b9:85:25:
ac:d2:a5:d9:78:59:2b:fb:ad:ed:63:7a:5f:91:ef:82:06:52:
05:30:94:13:56:b4:e8:3b:cf:94:3d:fe:7d:c8:f0:78:7f:d5:
05:16:8d:3e:b1:9c:23:4a:33:00:56:4a:1e:07:a9:6e:ee:8b:
b0:44:e1:ee:de:e5:e6:2e:7e:70:e8:d6:86:b4:50:ab:d6:40:
ec:6a:48:4f:92:41:ce:4c:fb:28:8f:62:02:30:1a:ad:42:51:
28:41:1e:d0:c7:f5:23:7f:28:16:9f:a4:d6:88:2f:82:21:e7:
37:5d:45:5d:ff:7d:43:85:12:9a:c6:a0:e0:76:12:c3:77:06:
73:91:1f:5c:ca:ca:b0:1b:b5:af:85:47:9a:34:04:47:dd:60:
21:e0:8e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:53:50 2024 by rpki-client on console-fra.rpki-client.org