Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/nYyTzI4wXbdYu948I9jdt28hAiU.roa
File: nYyTzI4wXbdYu948I9jdt28hAiU.roa (raw, json)
Hash identifier: JZ1SpvEjxZBTPHKIWDf1snwk5k6ZrolIHB7OLNEhoHk=
Subject key identifier: 9D:8C:93:CC:8E:30:5D:B7:58:BB:DE:3C:23:D8:DD:B7:6F:21:02:25
Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Certificate serial: 01942521ECBF12C5386FC3B3BC2E94EBDE63
Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/nYyTzI4wXbdYu948I9jdt28hAiU.roa
Signing time: Thu 02 Jan 2025 03:49:27 +0000
ROA not before: Thu 02 Jan 2025 03:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57567
IP address blocks: 103.39.41.0/24 maxlen: 24
185.86.44.0/23 maxlen: 23
185.86.44.0/24 maxlen: 24
185.86.45.0/24 maxlen: 24
185.86.46.0/23 maxlen: 23
185.86.46.0/24 maxlen: 24
185.86.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ec:bf:12:c5:38:6f:c3:b3:bc:2e:94:eb:de:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Validity
Not Before: Jan 2 03:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d8c93cc8e305db758bbde3c23d8ddb76f210225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4a:f5:d4:6b:fe:b1:f3:d8:53:f5:10:17:18:
cb:63:6b:1e:87:19:3d:26:7d:4f:98:89:34:88:fc:
06:41:d3:1c:6f:6d:bf:de:99:52:12:d3:2d:31:6b:
c3:80:21:13:2f:21:b2:b9:b3:25:1b:8a:7a:c0:a0:
12:41:73:7e:ee:e4:d9:2a:4e:34:45:eb:67:70:b7:
fa:3a:31:4d:a7:20:27:4c:d5:03:90:08:6e:a0:c7:
ae:ae:ae:ca:7c:fd:6c:40:5c:0f:c8:c6:4c:f2:3b:
71:36:ea:bf:ec:fb:3e:af:af:87:48:1c:ac:bf:1f:
01:13:be:67:ff:70:0e:c6:6a:dc:c9:8f:d5:86:af:
7c:af:15:c4:67:0f:b0:10:b0:b4:33:89:92:41:df:
c1:7b:3f:c8:c3:a1:7d:64:cf:6b:00:a5:43:6a:aa:
6d:c8:0e:49:2a:e0:8e:c7:f6:22:9e:5e:31:13:05:
32:38:61:3d:4e:5f:ce:3a:24:b2:0a:02:8f:a5:4b:
58:7b:eb:3b:95:af:4c:bf:a6:31:e8:59:0b:7c:d5:
54:83:82:a0:21:39:c2:16:32:30:3a:a2:f3:73:d5:
cc:be:b0:0e:6a:8f:b2:19:61:3a:00:19:ba:1c:cb:
8a:4a:84:cd:57:f7:2b:4b:ce:fb:24:11:58:a7:19:
3c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8C:93:CC:8E:30:5D:B7:58:BB:DE:3C:23:D8:DD:B7:6F:21:02:25
X509v3 Authority Key Identifier:
keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/nYyTzI4wXbdYu948I9jdt28hAiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.41.0/24
185.86.44.0/22
Signature Algorithm: sha256WithRSAEncryption
57:d3:b2:dd:7d:a4:5a:a5:7a:89:da:97:0f:44:1f:8c:13:00:
8e:77:d5:ea:ba:01:53:3b:29:f7:69:24:6d:39:b1:89:6f:a1:
fb:0e:08:4b:4e:0f:54:eb:44:a1:04:50:82:a0:98:c4:36:e5:
26:4e:fd:1e:64:1f:39:64:a3:9f:1c:ad:5d:1d:c5:ae:e0:01:
f6:fb:df:b7:92:2c:85:c0:42:83:f4:5e:c4:42:cb:9e:d4:b2:
69:c8:4e:31:37:c0:f8:a1:d4:ed:cd:87:fa:ad:97:13:77:f0:
c1:95:f3:ab:04:c6:6b:dc:be:54:d7:38:57:1a:f7:91:d0:38:
cc:ff:7b:08:bc:c0:0b:ca:f8:6b:97:2b:66:d2:74:4e:7b:d5:
74:15:18:84:f6:01:3d:e4:bc:45:fa:3f:7f:a1:3c:3a:fe:3d:
4a:70:4e:9b:2f:ea:cb:1f:29:9b:a0:44:fb:e3:be:5d:80:15:
99:65:ca:1d:a7:0c:e2:c0:15:91:53:85:8d:49:55:ab:4f:2d:
61:d2:72:38:52:a6:18:fd:b2:a7:26:e2:4d:c6:7b:b8:57:3c:
a2:1a:86:b9:92:24:27:53:a3:97:cf:17:98:c0:b6:16:f8:50:
e9:63:93:11:e3:48:a9:98:30:5d:e6:64:95:55:b8:fa:a0:e4:
bf:f3:a3:09
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlIey/EsU4b8OzvC6U695jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NzZkN2QwYmJjYzA4NTE2NTIzZDVkZjI0ZTY4ODJiNzJj
YTU2OTMwHhcNMjUwMTAyMDM0OTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDhjOTNjYzhlMzA1ZGI3NThiYmRlM2MyM2Q4ZGRiNzZmMjEwMjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkr11Gv+sfPYU/UQFxjLY2sehxk9
Jn1PmIk0iPwGQdMcb22/3plSEtMtMWvDgCETLyGyubMlG4p6wKASQXN+7uTZKk40
RetncLf6OjFNpyAnTNUDkAhuoMeurq7KfP1sQFwPyMZM8jtxNuq/7Ps+r6+HSBys
vx8BE75n/3AOxmrcyY/Vhq98rxXEZw+wELC0M4mSQd/Bez/Iw6F9ZM9rAKVDaqpt
yA5JKuCOx/Yinl4xEwUyOGE9Tl/OOiSyCgKPpUtYe+s7la9Mv6Yx6FkLfNVUg4Kg
ITnCFjIwOqLzc9XMvrAOao+yGWE6ABm6HMuKSoTNV/crS877JBFYpxk8CQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ2Mk8yOMF23WLvePCPY3bdvIQIlMB8GA1UdIwQY
MBaAFHl219C7zAhRZSPV3yTmiCtyylaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kZDY5NDMtNmZjZS00MzA5LTg3MTMt
ODU0MTgyY2IwNmE2LzEvbll5VHpJNHdYYmRZdTk0OEk5amR0MjhoQWlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kZDY5NDMtNmZjZS00MzA5LTg3MTMtODU0MTgyY2IwNmE2
LzEvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAZycpAwQC
uVYsMA0GCSqGSIb3DQEBCwUAA4IBAQBX07LdfaRapXqJ2pcPRB+MEwCOd9XqugFT
Oyn3aSRtObGJb6H7DghLTg9U60ShBFCCoJjENuUmTv0eZB85ZKOfHK1dHcWu4AH2
+9+3kiyFwEKD9F7EQsue1LJpyE4xN8D4odTtzYf6rZcTd/DBlfOrBMZr3L5U1zhX
GveR0DjM/3sIvMALyvhrlytm0nROe9V0FRiE9gE95LxF+j9/oTw6/j1KcE6bL+rL
HymboET7475dgBWZZcodpwziwBWRU4WNSVWrTy1h0nI4UqYY/bKnJuJNxnu4Vzyi
Goa5kiQnU6OXzxeYwLYW+FDpY5MR40ipmDBd5mSVVbj6oOS/86MJ
-----END CERTIFICATE-----
Generated at Sun Apr 13 15:12:55 2025 by rpki-client