Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/sP_P89Gjqv0cRXNUr9_pv6JCftE.roa
File: sP_P89Gjqv0cRXNUr9_pv6JCftE.roa (raw, json)
Hash identifier: V9LKomJ1OLCr/vLBTnJjw6UPEUZRVYDPDN8HoyzesJg=
Subject key identifier: B0:FF:CF:F3:D1:A3:AA:FD:1C:45:73:54:AF:DF:E9:BF:A2:42:7E:D1
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01942747CF74A0711493E1AA4A8733132639
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/sP_P89Gjqv0cRXNUr9_pv6JCftE.roa
Signing time: Thu 02 Jan 2025 13:50:05 +0000
ROA not before: Thu 02 Jan 2025 13:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 212.103.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Apr 2025 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:cf:74:a0:71:14:93:e1:aa:4a:87:33:13:26:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 2 13:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0ffcff3d1a3aafd1c457354afdfe9bfa2427ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:35:71:2a:c8:23:18:c1:55:33:90:b7:e0:c7:
38:c1:83:7c:a1:95:36:3e:b7:6d:cf:86:eb:d1:b3:
4f:29:28:6c:fc:f9:df:35:5f:7d:30:3a:09:65:79:
95:b9:0b:42:ba:c2:94:da:6f:0f:e6:33:4a:77:87:
c6:c1:0a:d2:d0:0c:36:da:f1:e6:33:12:f7:e8:04:
7d:38:a4:6a:65:66:18:37:65:7a:d2:f2:c1:14:74:
a3:49:c5:2c:05:e7:8e:08:d3:84:ef:d1:ac:98:6c:
41:57:05:92:39:78:07:9b:c4:1b:a7:a6:44:fb:18:
ac:4e:f9:37:4b:c7:0d:4f:0a:7c:96:0d:79:68:98:
a7:56:b6:1a:76:f5:ea:67:9a:79:c0:f9:c5:b5:be:
cb:2d:21:6c:50:44:d4:d0:83:17:bf:67:67:8d:55:
b2:5f:f8:46:2f:2e:a7:50:6a:2e:9d:01:e1:3b:87:
61:5f:a9:ba:60:a7:26:6c:8b:00:37:34:ad:39:f5:
96:3b:52:69:83:1a:96:99:43:f0:29:01:62:f0:57:
6f:03:93:a1:04:18:dd:ef:f8:d7:2c:d0:80:20:f1:
e2:88:cf:09:1b:5d:ee:7c:df:17:f5:8d:05:a1:a3:
d1:08:f7:90:14:c3:52:c5:c9:ed:9d:76:9b:38:36:
21:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FF:CF:F3:D1:A3:AA:FD:1C:45:73:54:AF:DF:E9:BF:A2:42:7E:D1
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/sP_P89Gjqv0cRXNUr9_pv6JCftE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.41.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:33:1f:87:04:6b:15:0c:53:6b:73:f3:3b:1a:0c:b3:35:16:
e5:cf:25:30:66:c3:e1:7e:61:57:95:c0:27:fe:3b:50:46:2e:
52:07:93:b5:15:99:f0:56:eb:bf:3a:1a:84:1f:94:23:d5:10:
ed:0f:b2:46:9d:26:2e:f5:3d:2e:be:e6:14:1c:5f:a1:5e:22:
98:94:57:c8:ef:56:e6:69:86:a0:e3:68:c6:8f:07:fa:45:99:
cd:77:29:b8:a6:18:b8:f4:2e:12:0e:10:a1:f9:69:d2:a7:d7:
81:21:ef:58:b0:19:e1:e5:d2:a3:f9:27:bd:47:f5:94:53:49:
02:16:f2:fe:cb:2b:ac:c6:9a:17:b0:2c:4d:64:66:04:e4:f0:
3f:ff:2b:8d:74:5f:1a:a8:c3:85:05:56:e9:6f:61:40:b6:78:
db:46:cb:e3:36:cd:74:30:0c:b6:fc:1b:ca:a0:f8:f2:f3:d5:
8e:bc:7b:01:f2:61:34:ef:91:73:8f:2b:d0:71:d9:ec:5a:36:
8f:8b:bf:dd:97:f5:9c:a3:26:be:f1:f7:a9:bc:28:a0:2e:f8:
41:9f:5b:c6:23:ae:a8:09:5d:ec:35:07:42:9c:bd:2a:64:a5:
2d:b1:80:69:6b:97:0b:f8:72:6c:87:85:32:9d:a7:d5:1a:d7:
d8:aa:fc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:16:56 2025 by rpki-client