Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/R8JsCaWwJlloIphsJ_SUQdItPT0.roa
File: R8JsCaWwJlloIphsJ_SUQdItPT0.roa (raw, json)
Hash identifier: jdlAQ7N+wj+LUd6XKIUEeWcmdCEJH5KhrOrz0eN8lDM=
Subject key identifier: 47:C2:6C:09:A5:B0:26:59:68:22:98:6C:27:F4:94:41:D2:2D:3D:3D
Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial: 019424B375FA3428CF00484EFE6C4D8917A6
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/R8JsCaWwJlloIphsJ_SUQdItPT0.roa
Signing time: Thu 02 Jan 2025 01:48:48 +0000
ROA not before: Thu 02 Jan 2025 01:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210659
IP address blocks: 202.181.204.0/24 maxlen: 24
2a13:d8c4:30::/44 maxlen: 48
2a13:d8c4:70::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:75:fa:34:28:cf:00:48:4e:fe:6c:4d:89:17:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Validity
Not Before: Jan 2 01:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47c26c09a5b026596822986c27f49441d22d3d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:0f:41:b7:b6:93:92:9a:d3:f5:e1:71:d6:
75:71:e1:45:00:63:2a:65:ee:77:ca:1d:e5:9f:f5:
37:6f:fb:fd:fb:50:d7:6d:6f:2b:65:e7:9d:14:5a:
25:d5:a8:e3:e5:28:15:53:04:5d:2c:a4:05:44:6f:
94:4f:c8:d8:8c:a8:ea:0a:0a:26:71:f7:ab:fb:30:
b3:e2:f4:7f:4a:fa:cb:8c:f0:4e:3c:5a:5a:89:27:
bd:f0:72:c4:68:51:0a:ce:b1:4c:c6:1c:be:a4:08:
61:76:f8:c2:49:c1:dd:ee:d8:cb:88:a7:19:4e:c6:
25:ff:39:9f:cc:42:51:f4:4f:a1:c5:23:8d:b5:1e:
11:02:5f:db:9c:b4:35:a7:b6:79:b0:78:d5:c7:85:
65:a9:b5:89:9d:09:b4:c9:23:9d:86:ad:5e:5e:93:
e2:64:39:90:9f:5f:a5:28:84:64:5f:d4:f8:bc:5d:
43:d4:1d:e2:da:ad:1a:2a:ae:18:52:01:85:18:73:
f5:8a:cb:dd:de:28:5f:11:2f:cc:7a:18:5d:6f:24:
f6:01:2c:b3:c2:2a:e7:b9:ec:04:51:80:b9:2d:45:
ed:c4:6d:d6:84:c2:8c:4a:92:5c:a0:c9:0c:07:aa:
4e:fc:63:4f:f4:d3:67:b3:8f:bc:ff:f9:5e:49:f9:
97:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C2:6C:09:A5:B0:26:59:68:22:98:6C:27:F4:94:41:D2:2D:3D:3D
X509v3 Authority Key Identifier:
keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/R8JsCaWwJlloIphsJ_SUQdItPT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.181.204.0/24
IPv6:
2a13:d8c4:30::/44
2a13:d8c4:70::/44
Signature Algorithm: sha256WithRSAEncryption
8c:66:74:7f:19:c6:9c:33:c1:e9:b5:39:93:e3:19:f4:bf:22:
e2:da:ce:3d:70:2c:07:33:26:db:3d:9a:59:fb:b1:26:74:97:
3a:80:77:61:44:40:fa:e0:1e:cc:51:70:b2:57:55:05:27:1b:
ea:a1:ac:f6:85:a3:b3:8b:0f:7a:f2:4a:60:bc:0a:17:91:88:
54:51:db:c6:7a:93:7f:f5:fa:60:f9:84:47:c2:4e:9b:c8:1b:
24:15:87:b5:35:82:1c:0c:21:ef:1d:99:15:bb:c7:c6:a4:53:
6f:d6:24:45:6e:98:ca:7e:d6:e9:83:a0:1e:3c:b5:2c:44:84:
32:70:3f:d8:84:26:97:f5:6b:c4:f7:df:10:71:49:78:76:10:
26:3c:3e:a3:1a:a4:b5:d0:54:4e:a7:a1:ac:d8:98:7a:ec:94:
e9:24:d7:4d:e4:51:0a:85:a9:18:4b:7c:43:b6:5e:e9:1e:77:
0e:27:57:1b:ed:af:cb:6c:90:d5:c6:69:e7:25:9a:29:3b:bd:
c4:b2:b3:c3:59:ed:1f:06:40:1d:a5:e2:39:1f:e3:e6:26:57:
24:eb:33:45:0b:c2:07:46:a5:29:fe:c5:83:61:19:b5:c5:93:
7a:49:ad:fa:0f:a5:3e:9a:a4:6b:99:e2:40:9f:03:f0:00:48:
05:78:5c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:58 2025 by rpki-client