Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-3yOqlDXIFotNxn8TlkoEOcbrMc.roa
File: 1-3yOqlDXIFotNxn8TlkoEOcbrMc.roa (raw, json)
Hash identifier: F5deXLgeXwiiZU447UJhSKChG6JVvmrCF1SR+vrEzRU=
Subject key identifier: FB:7C:8E:AA:50:D7:20:5A:2D:37:19:FC:4E:59:28:10:E7:1B:AC:C7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01942748169AE3625131101E6CA291929C7C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-3yOqlDXIFotNxn8TlkoEOcbrMc.roa
Signing time: Thu 02 Jan 2025 13:50:23 +0000
ROA not before: Thu 02 Jan 2025 13:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7979
IP address blocks: 103.209.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:16:9a:e3:62:51:31:10:1e:6c:a2:91:92:9c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb7c8eaa50d7205a2d3719fc4e592810e71bacc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:6b:99:72:da:c7:8f:28:22:0b:b8:23:6e:
2d:8b:a4:92:ea:57:ba:4a:7b:4d:ec:6f:37:f1:fc:
d8:e6:41:46:30:0e:b8:db:01:ec:7e:03:8e:1e:b6:
54:84:01:29:dc:4c:a6:2c:2f:e8:1b:bf:53:35:0b:
7f:20:32:6a:9f:a5:b9:c4:c5:83:d5:e6:ee:b1:cb:
ff:57:4d:d0:c6:e4:d7:ba:81:dc:ff:64:0b:fd:2f:
75:10:3f:20:a8:96:42:5e:47:a4:29:11:13:2e:36:
c0:cf:cb:44:b7:4c:e7:d9:07:5e:f2:c2:cf:63:78:
9c:36:84:16:7c:ec:cf:b8:66:fd:a8:48:85:3f:d7:
cb:89:0a:d2:44:4d:a6:a6:03:2d:f0:30:68:c3:29:
71:36:50:28:0a:e1:d8:9f:26:94:98:ac:69:8c:71:
22:f4:66:b6:be:10:1c:aa:91:18:fa:84:c8:35:62:
23:26:58:06:7a:22:f4:1e:ed:c7:88:75:bf:22:68:
8d:c5:2d:8f:87:7b:11:ad:79:6d:b6:70:14:85:5b:
f4:e7:e3:78:15:21:5d:6d:0b:ff:10:23:92:73:4c:
76:0d:55:0f:1b:a6:81:6d:b4:42:a3:0b:19:ae:65:
89:d2:e4:85:fe:a1:29:a5:1f:f1:2e:24:e6:1e:5f:
fb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7C:8E:AA:50:D7:20:5A:2D:37:19:FC:4E:59:28:10:E7:1B:AC:C7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-3yOqlDXIFotNxn8TlkoEOcbrMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.209.231.0/24
Signature Algorithm: sha256WithRSAEncryption
08:39:76:77:35:13:7f:bb:ae:7d:e5:03:89:84:4a:f5:4a:20:
b9:c1:c2:80:b0:58:bb:5b:0a:b9:74:2f:ab:8b:4f:03:17:54:
19:00:c7:c9:a3:06:a2:61:8b:db:34:69:67:32:fc:2b:6d:b0:
ec:dd:97:61:24:0e:1d:df:25:1c:86:2d:9f:9a:d8:bf:ef:42:
b8:1b:c3:52:a0:c4:d6:29:5d:c2:c8:f4:0d:e3:3a:fb:bf:d6:
61:51:82:b9:90:66:22:28:6f:8a:41:b2:f7:d4:65:14:b6:7d:
07:0f:5c:5b:ff:98:60:66:02:c1:92:0e:e2:b6:c9:2f:81:e0:
77:61:16:58:40:7e:b6:3d:1f:3c:dc:14:c9:86:f2:22:f6:7c:
d7:20:e8:fa:72:a3:26:3b:7c:cc:1f:45:c1:34:6e:87:ba:c7:
73:60:fe:94:e1:8c:21:d2:ea:f6:d8:6c:28:70:0e:d0:ef:e8:
08:a8:d1:54:f9:31:d0:74:eb:f6:7d:df:43:15:c8:59:75:cf:
74:72:a9:61:96:23:19:d7:c3:1f:7c:52:cf:6c:c7:d9:70:f6:
09:2a:62:97:7b:d3:b5:75:72:2b:d8:52:33:98:35:30:fe:01:
47:ac:69:a7:8c:8f:7e:47:15:2e:92:3d:e2:a4:d8:91:ed:6f:
ba:1f:c1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:54:03 2025 by rpki-client