Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WDJJsPYUcqZ5dpq15JxkZ2I2KDY.roa
File: WDJJsPYUcqZ5dpq15JxkZ2I2KDY.roa (raw, json)
Hash identifier: 3xx8ZfCnODekgoFrNKfKKSmu5V3JrO74WzhHQh/XsJs=
Subject key identifier: 58:32:49:B0:F6:14:72:A6:79:76:9A:B5:E4:9C:64:67:62:36:28:36
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019422200579B243847B36B0D5E701F88E78
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WDJJsPYUcqZ5dpq15JxkZ2I2KDY.roa
Signing time: Wed 01 Jan 2025 13:48:31 +0000
ROA not before: Wed 01 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 103.212.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:05:79:b2:43:84:7b:36:b0:d5:e7:01:f8:8e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=583249b0f61472a679769ab5e49c646762362836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:95:d3:59:10:cf:48:db:2c:bb:be:cb:c0:
dd:d6:be:db:36:a6:0e:3a:5a:c8:56:18:11:49:e1:
f7:2f:93:10:83:fe:1a:48:2d:d3:6f:8b:98:4b:61:
46:4e:f8:52:42:8f:3e:26:fb:ba:6b:4e:38:d4:ed:
b8:1a:d2:89:9b:ec:cc:14:ba:47:6a:f2:ae:69:33:
80:b0:3b:18:1e:7d:e3:61:62:7d:d7:74:82:0b:ad:
a3:d4:fb:40:33:93:70:2d:82:62:96:ad:22:25:91:
12:63:0c:f9:35:b1:15:80:33:2a:01:da:9f:19:5f:
dd:c7:24:14:b7:a4:ec:7c:9e:02:e3:dd:2f:8e:1c:
d1:66:0d:55:0e:06:66:df:00:6e:19:62:d7:40:41:
95:7f:f2:f7:42:93:77:d1:de:43:04:d6:83:33:7e:
05:3f:9d:31:ec:09:9d:de:b9:e4:4f:c5:7f:18:fa:
9a:48:c2:6f:0e:e3:47:01:79:dc:3a:b6:fc:fd:50:
a5:ae:6d:3a:81:90:ca:e9:22:ee:98:75:6c:f4:80:
b2:89:39:13:b8:c5:e0:03:41:da:32:84:8c:d6:54:
1e:1c:38:82:42:09:1d:92:6f:c6:a6:91:b7:2e:21:
47:25:03:be:41:fc:75:10:21:89:25:6f:f1:62:ab:
a4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:32:49:B0:F6:14:72:A6:79:76:9A:B5:E4:9C:64:67:62:36:28:36
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WDJJsPYUcqZ5dpq15JxkZ2I2KDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.212.81.0/24
Signature Algorithm: sha256WithRSAEncryption
68:5e:39:f0:c2:42:b6:d8:39:a0:ac:7c:65:3e:a7:88:88:c4:
b1:20:d8:83:04:f6:60:26:0c:ac:7e:ea:69:3e:20:f1:91:4b:
96:bc:3f:1f:61:5b:24:20:b5:87:e4:d4:65:62:1e:35:a2:97:
55:be:1c:09:ac:b2:61:8f:8f:9f:c4:77:a6:5b:0e:84:33:04:
51:8d:22:d3:ad:5b:13:d7:74:19:14:f5:e3:a4:f9:e6:19:22:
56:b8:22:ce:e6:be:94:52:96:8a:d8:39:f1:f4:8f:0c:52:1a:
3e:e9:a8:52:2a:70:04:36:3b:fb:b4:f5:d8:39:4a:44:d9:85:
05:d0:a5:c7:46:74:17:6c:2f:e6:52:58:49:b1:e5:14:9f:ae:
29:e3:ba:50:eb:c9:62:eb:37:19:d1:24:e4:e3:70:41:0f:03:
da:fb:6b:cb:3c:ea:87:d0:6d:60:2f:0c:23:31:b7:c7:93:9a:
93:ba:41:68:60:e6:96:f1:eb:2d:99:1f:44:ba:56:f2:94:18:
8b:3c:13:6d:67:08:05:52:06:94:3a:8c:1d:21:c4:a7:6c:62:
53:85:84:f6:67:9f:6a:b6:46:ed:bd:4a:06:50:3c:03:53:ec:
76:52:66:3e:64:b7:ea:90:b1:4a:90:4d:6d:89:26:5b:24:ae:
82:5a:96:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:36:04 2025 by rpki-client