Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/pApSa3hJDxXvGtqyR-H9ZfxMutI.roa
File: pApSa3hJDxXvGtqyR-H9ZfxMutI.roa (raw, json)
Hash identifier: Jf72o1MQr4tvDxozziRZgnVBYSAFM2eO6XJDLOFS5Ac=
Subject key identifier: A4:0A:52:6B:78:49:0F:15:EF:1A:DA:B2:47:E1:FD:65:FC:4C:BA:D2
Certificate issuer: /CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19
Certificate serial: 0194274827686041F5EC3DB1E80FC95EFF1A
Authority key identifier: 46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/pApSa3hJDxXvGtqyR-H9ZfxMutI.roa
Signing time: Thu 02 Jan 2025 13:50:27 +0000
ROA not before: Thu 02 Jan 2025 13:50:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49157
IP address blocks: 103.95.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:27:68:60:41:f5:ec:3d:b1:e8:0f:c9:5e:ff:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19
Validity
Not Before: Jan 2 13:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a40a526b78490f15ef1adab247e1fd65fc4cbad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:62:fa:71:da:3c:cd:ad:09:88:61:07:8f:d4:
0a:01:bf:25:83:a9:86:5a:18:27:45:eb:47:be:03:
3f:35:dd:de:bf:bd:e3:00:ac:10:e9:6d:ff:70:e0:
aa:91:48:6c:08:50:65:b0:2c:1f:8f:d3:2d:d0:81:
12:d2:36:76:61:ea:38:53:62:eb:b4:d9:8f:c9:f8:
c1:73:c3:d4:aa:20:d1:a7:c9:73:2a:03:8b:6f:ac:
d0:f9:7d:07:e3:5a:02:e0:5c:a9:61:9d:f9:e1:60:
c9:cd:f5:f5:4a:9a:9c:6c:25:61:5e:5c:67:94:60:
9f:32:72:41:bf:73:a8:ec:f8:ff:0c:8f:43:4c:60:
24:87:c3:44:3f:48:16:d9:c1:5d:eb:7d:8f:d4:64:
5b:a6:84:83:4d:82:cf:59:29:87:13:1c:7d:96:c3:
40:36:a4:9b:36:5f:e4:12:09:d6:57:18:9b:16:36:
9f:b0:02:02:fe:a4:5d:fe:11:68:9e:91:e3:d2:45:
8d:65:d4:b9:f9:1b:a2:58:04:9d:7c:03:9b:1d:25:
ba:6c:e9:95:82:01:7d:57:0e:b6:52:11:5d:40:92:
00:2a:93:25:c8:82:e8:00:5d:0c:8b:92:f3:83:cd:
97:a0:e2:6c:f2:fa:46:08:1e:f9:ce:57:73:4c:2e:
4d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0A:52:6B:78:49:0F:15:EF:1A:DA:B2:47:E1:FD:65:FC:4C:BA:D2
X509v3 Authority Key Identifier:
keyid:46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/pApSa3hJDxXvGtqyR-H9ZfxMutI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.95.119.0/24
Signature Algorithm: sha256WithRSAEncryption
56:bc:47:53:92:ef:6d:01:d4:12:42:1b:e0:65:4b:07:d0:ce:
d0:e2:89:75:3c:9e:c5:81:17:56:d5:cf:3f:64:41:e1:17:3d:
48:24:23:9e:84:43:f7:03:d6:4c:7a:71:00:d7:7f:7a:d0:8b:
37:6d:f2:e8:06:8a:92:e6:29:e1:56:94:15:cd:61:89:48:67:
2d:31:ec:0a:e1:e2:4d:6a:96:73:54:38:ce:d0:55:7a:cc:de:
65:15:47:ea:9f:13:57:bb:98:81:53:7e:84:fa:0a:6e:04:c3:
6d:4d:48:ce:88:91:a4:99:7f:71:c7:8a:f9:68:d8:b4:38:4e:
01:e2:99:ef:87:b4:76:c2:9f:78:1d:e3:e0:61:75:eb:c0:f4:
c9:6c:1d:06:21:62:fc:d6:e1:5e:7f:a2:cb:a7:28:2e:5a:e8:
bb:cd:48:ab:dc:eb:2e:6e:ca:2b:85:c4:98:50:dc:22:c1:be:
e7:57:63:d4:d6:f7:15:0f:e8:d6:0a:09:6d:cb:d4:90:80:66:
de:8c:82:41:4d:f4:7c:6a:a7:98:56:77:49:6e:51:e5:9d:ed:
c0:94:57:e3:5b:9f:9b:69:1b:16:52:f6:59:7e:a4:ec:c3:73:
68:df:1d:bf:e4:b1:d9:34:96:ec:f9:0f:6c:48:03:5c:dc:fd:
3c:ec:40:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:29:28 2025 by rpki-client