Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/wsTT632mSdxjjtkR6vqGboav_aE.roa
File: wsTT632mSdxjjtkR6vqGboav_aE.roa (raw, json)
Hash identifier: wUZ5YM+btuQeoKtHBwBqXGvSMu0ePcfUOHFJpp7e93E=
Subject key identifier: C2:C4:D3:EB:7D:A6:49:DC:63:8E:D9:11:EA:FA:86:6E:86:AF:FD:A1
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0195D115EEFD8465FDFA135FB117A8B132F6
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/wsTT632mSdxjjtkR6vqGboav_aE.roa
Signing time: Wed 26 Mar 2025 06:13:50 +0000
ROA not before: Wed 26 Mar 2025 06:13:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208959
IP address blocks: 103.212.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d1:15:ee:fd:84:65:fd:fa:13:5f:b1:17:a8:b1:32:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 26 06:13:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2c4d3eb7da649dc638ed911eafa866e86affda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2b:ed:3b:69:a5:ff:9f:51:10:64:d5:2d:31:
c8:42:ab:67:c4:80:df:fb:6b:c6:a6:c8:19:e8:a1:
b4:a8:1d:3f:83:32:b4:60:00:69:3e:79:06:b4:72:
e4:9a:28:a7:f5:7a:07:df:22:8b:c6:86:18:ce:4d:
8b:78:b7:ed:ac:78:78:ca:30:a0:4a:13:52:32:73:
50:1b:e0:39:07:18:0b:26:aa:a0:bf:82:cb:18:91:
66:86:7c:09:6b:10:a5:17:c1:6b:92:c5:72:76:8a:
ed:ba:b4:0e:68:a1:4a:5f:04:fd:03:fc:2f:c9:a9:
6a:b3:35:53:bf:b1:d3:c1:aa:e2:94:0e:9e:de:20:
8d:92:66:49:08:ad:a9:7b:37:0d:15:9d:3a:37:25:
42:1c:da:75:fc:d7:df:54:bb:21:1f:8a:07:59:db:
00:14:98:6c:fe:b8:b8:49:4e:a6:e0:c2:38:06:d6:
e9:be:fb:00:f4:7b:33:22:69:44:73:4c:16:09:fc:
ab:45:4a:3c:5a:4a:5f:72:4b:5a:41:a8:98:64:2c:
c7:ea:c3:f8:18:7c:48:d2:d7:32:a9:d7:66:a3:a3:
fd:45:19:f0:05:7a:87:ea:e7:6b:8d:46:6b:26:5e:
1f:b0:73:1b:30:c4:36:9c:33:0d:7f:61:3d:8a:45:
00:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C4:D3:EB:7D:A6:49:DC:63:8E:D9:11:EA:FA:86:6E:86:AF:FD:A1
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/wsTT632mSdxjjtkR6vqGboav_aE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.212.82.0/24
Signature Algorithm: sha256WithRSAEncryption
10:a6:40:db:1e:e9:24:a8:58:a9:5c:a1:06:fe:3a:82:1c:a6:
d2:9f:b7:3a:f5:c9:20:7d:36:c3:5c:9c:4e:52:5d:05:50:27:
e4:c0:f1:86:72:60:f8:fe:15:87:74:b0:de:aa:6e:08:48:42:
43:c5:1e:0f:90:88:82:9e:3d:88:70:29:c2:bf:29:17:eb:d9:
fc:3f:8c:e6:92:6c:48:e6:13:36:88:40:27:25:81:43:9e:8d:
6d:28:31:ad:d9:bd:82:f1:92:63:81:ef:bb:02:11:f2:d5:c2:
d0:38:cd:47:70:1d:56:21:6c:e1:eb:1e:f1:80:97:c5:e2:e5:
cb:d5:aa:05:c7:a7:13:03:e6:6b:09:50:f0:fc:cc:f2:6d:06:
7c:64:c3:69:92:46:b9:79:1c:51:76:21:78:9a:25:bc:6a:a1:
04:02:fe:a2:95:15:a5:51:95:ba:b6:c9:d1:1e:f4:90:51:88:
dc:b1:43:58:96:42:62:8e:dc:5c:18:97:85:72:7e:e6:db:21:
eb:20:6c:98:6d:1e:20:ec:56:e2:17:1c:6c:7d:6c:fa:31:8c:
07:e2:d6:b2:2b:e5:b7:7a:00:15:94:fd:3e:3c:ec:64:b5:29:
1d:73:68:fd:b4:98:7a:76:92:16:d4:35:54:24:8b:9e:7d:1c:
4b:73:63:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:53:06 2025 by rpki-client