Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/InrDEGCfKU8jJed9KnH2vx-d78Y.roa
File: InrDEGCfKU8jJed9KnH2vx-d78Y.roa (raw, json)
Hash identifier: NgTZkZMP5rtVotSPrvAaVc/98gXGQA3bDBX67D3E0+U=
Subject key identifier: 22:7A:C3:10:60:9F:29:4F:23:25:E7:7D:2A:71:F6:BF:1F:9D:EF:C6
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019425FCE15472369BB1D2FB8C56F3FF1E54
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/InrDEGCfKU8jJed9KnH2vx-d78Y.roa
Signing time: Thu 02 Jan 2025 07:48:37 +0000
ROA not before: Thu 02 Jan 2025 07:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 103.130.179.0/24 maxlen: 24
193.148.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:e1:54:72:36:9b:b1:d2:fb:8c:56:f3:ff:1e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 2 07:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=227ac310609f294f2325e77d2a71f6bf1f9defc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e5:91:6b:4a:7d:cf:f7:02:69:63:8a:86:92:
4c:ab:7a:82:9f:6a:0c:ae:d7:3d:55:07:93:c4:73:
d2:7f:49:eb:54:ff:72:fe:78:93:eb:b7:1c:05:db:
79:69:23:26:34:d0:ed:60:cb:5a:06:06:02:86:74:
78:4d:53:f9:a0:aa:82:9a:91:08:92:e3:21:b3:68:
cd:78:7d:15:07:69:5f:7d:8e:bb:1a:35:85:8d:73:
a6:66:3e:3d:a1:a6:60:e5:86:7c:33:af:a2:3c:e9:
05:b8:74:02:d9:03:39:b3:b3:3e:76:cc:a4:ef:2d:
e4:2c:d6:31:32:4c:2c:82:e2:a8:b4:0b:14:62:04:
03:71:34:e7:f4:12:ab:18:08:48:5a:2d:4b:85:4b:
14:ff:dd:e3:a5:2e:39:38:fe:16:62:64:3b:d7:d9:
37:f5:72:30:a9:d7:cb:b0:d3:a9:2e:35:2d:a0:d7:
da:99:88:65:93:2a:88:a9:d8:24:c2:16:7d:27:6c:
36:52:4f:1b:2c:ee:f7:02:56:90:69:5b:19:c1:7d:
8a:6f:72:6b:1c:2b:ff:7d:ce:77:b5:1a:24:08:82:
b4:59:fa:8f:17:e0:6d:22:57:c7:00:03:9e:66:22:
96:a9:e8:5b:75:dc:52:78:0c:5a:42:28:48:ea:40:
44:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7A:C3:10:60:9F:29:4F:23:25:E7:7D:2A:71:F6:BF:1F:9D:EF:C6
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/InrDEGCfKU8jJed9KnH2vx-d78Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.130.179.0/24
193.148.95.0/24
Signature Algorithm: sha256WithRSAEncryption
99:5d:8b:a0:e3:43:67:e9:da:67:5f:b4:71:31:85:8b:c6:d9:
cf:9c:38:ca:4a:f8:bf:7f:a6:50:04:b6:63:84:f0:a0:fd:55:
47:7e:e3:94:1f:a2:20:78:53:2d:01:49:cd:3a:5d:60:ad:ce:
05:98:f7:5d:00:0d:b6:90:1e:26:98:82:a0:45:7d:16:34:6e:
06:52:d1:20:f3:2b:83:da:02:7b:b7:a5:59:f0:ad:99:2e:08:
a9:3d:fd:01:7f:53:12:72:6f:cd:7d:60:35:9b:5f:91:9c:62:
86:07:0d:9e:63:02:a4:cb:86:72:00:72:47:68:3a:d0:8f:bd:
06:6a:62:e7:b0:1d:e2:14:ad:fa:9d:f6:22:73:77:08:ec:2d:
3f:25:0a:9e:de:20:ab:6a:d8:7f:d4:1c:c0:7d:a3:00:27:97:
4a:7a:d6:e9:04:d3:dc:b3:82:12:dc:97:7b:22:ab:67:db:c2:
a0:a6:bf:1c:6b:be:21:dc:bc:0f:2d:9c:ee:30:2d:80:9b:68:
9d:9f:61:f4:45:1f:00:42:b1:5b:2b:3a:6a:9c:e9:69:88:df:
53:7e:1b:04:88:73:37:ac:e6:b4:7a:c2:64:d9:00:a7:e7:73:
59:9e:32:74:97:0e:75:5c:60:10:8e:0a:25:ce:9a:c6:0a:8b:
ce:3d:e3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:39:25 2025 by rpki-client