Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4225b9-e9c3-4b8e-8bff-3a533cedc301/1/dGGMhhLDaoWkDWmK8o4AcoqcFuc.roa
File: dGGMhhLDaoWkDWmK8o4AcoqcFuc.roa (raw, json)
Hash identifier: +aGKRXgqkoPg+9wbbAijk/9YLBVcGbYOuDtpc/CsaCg=
Subject key identifier: 74:61:8C:86:12:C3:6A:85:A4:0D:69:8A:F2:8E:00:72:8A:9C:16:E7
Certificate issuer: /CN=2e1ce7bcec7fd7c29f098bbae0d312b5ee3a345e
Certificate serial: 01942143DB95AD983ABD3BBF2678A6DF5AC8
Authority key identifier: 2E:1C:E7:BC:EC:7F:D7:C2:9F:09:8B:BA:E0:D3:12:B5:EE:3A:34:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhznvOx_18KfCYu64NMSte46NF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4225b9-e9c3-4b8e-8bff-3a533cedc301/1/dGGMhhLDaoWkDWmK8o4AcoqcFuc.roa
Signing time: Wed 01 Jan 2025 09:48:02 +0000
ROA not before: Wed 01 Jan 2025 09:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35820
IP address blocks: 103.145.40.0/23 maxlen: 24
103.145.80.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4225b9-e9c3-4b8e-8bff-3a533cedc301/1/LhznvOx_18KfCYu64NMSte46NF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/4225b9-e9c3-4b8e-8bff-3a533cedc301/1/LhznvOx_18KfCYu64NMSte46NF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhznvOx_18KfCYu64NMSte46NF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:db:95:ad:98:3a:bd:3b:bf:26:78:a6:df:5a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1ce7bcec7fd7c29f098bbae0d312b5ee3a345e
Validity
Not Before: Jan 1 09:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74618c8612c36a85a40d698af28e00728a9c16e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d3:a9:89:59:b9:79:72:04:9e:73:b0:ab:fe:
d9:72:46:11:62:12:ee:96:1e:a4:02:53:4c:fe:29:
9c:d8:47:30:60:e3:f3:d3:4e:e5:55:d0:e5:d8:6a:
67:bd:4a:de:89:fb:95:85:5a:d1:7a:fd:54:3e:19:
d1:90:9c:41:44:f8:84:1f:f7:ce:56:79:a7:26:31:
0a:52:79:9c:eb:a6:da:1a:95:de:50:d1:c1:b8:0a:
a7:8b:8a:65:e2:0c:bb:3f:2c:44:8e:bc:9c:9a:e9:
6f:6d:a5:4e:60:08:ee:18:b9:7b:9a:d2:cf:13:9c:
4a:3f:b9:9c:bd:95:2d:59:7b:9a:b1:ad:a6:e4:be:
a8:e2:0b:f3:1c:43:1e:2b:3e:67:54:f7:c4:a0:76:
eb:b8:bc:98:0e:47:f7:b9:06:30:e9:c0:46:f3:cc:
ec:fe:1c:61:ff:6e:25:75:ff:3f:00:89:c1:5d:ef:
39:47:c0:c8:b6:36:18:d8:c3:9a:92:d4:91:3c:97:
2d:83:58:d5:4b:3b:f3:2b:83:87:6a:69:32:da:bb:
52:53:16:d6:d9:96:1b:71:64:8d:d8:96:68:e3:d8:
d7:1b:64:ca:d1:8e:f8:3f:b2:29:ae:31:65:f6:0d:
e7:34:43:cc:1d:6a:48:3f:70:32:b0:8d:cc:33:d4:
21:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:61:8C:86:12:C3:6A:85:A4:0D:69:8A:F2:8E:00:72:8A:9C:16:E7
X509v3 Authority Key Identifier:
keyid:2E:1C:E7:BC:EC:7F:D7:C2:9F:09:8B:BA:E0:D3:12:B5:EE:3A:34:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhznvOx_18KfCYu64NMSte46NF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4225b9-e9c3-4b8e-8bff-3a533cedc301/1/dGGMhhLDaoWkDWmK8o4AcoqcFuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4225b9-e9c3-4b8e-8bff-3a533cedc301/1/LhznvOx_18KfCYu64NMSte46NF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.145.40.0/23
103.145.80.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:9a:83:42:ef:b9:94:a4:15:c1:25:fc:1b:d7:57:e5:2d:f7:
ad:a4:56:fa:0c:f7:bc:75:b2:9b:de:e4:23:a9:82:12:c8:31:
83:d0:12:c6:a0:22:78:a1:76:4d:74:a8:0e:21:2a:9a:c6:a4:
18:cc:7b:b5:f8:6f:1b:41:49:52:00:3e:f8:31:5f:9c:2a:f4:
1b:a7:de:86:20:71:27:24:43:f7:a6:0e:bd:9b:97:20:85:15:
fe:21:72:d9:65:5e:c6:bb:8f:f6:94:17:18:d8:a3:09:b9:08:
b0:86:4c:cb:20:ec:ea:d2:a1:f2:5b:e6:5d:e8:79:b6:68:f9:
da:76:cf:1a:97:1b:4e:48:83:7a:f0:1b:37:b7:60:82:92:c8:
88:35:19:ed:78:58:78:4f:5b:07:a8:cf:bb:09:4a:f6:c4:b7:
0f:db:f9:c1:d3:7d:9f:07:e3:e0:b3:d5:79:91:07:36:3f:8d:
9c:dc:a9:8b:d6:93:bf:08:53:78:d8:a0:40:67:f2:6d:6e:88:
ad:67:88:77:69:3e:6c:f4:cc:8f:6b:05:3d:a6:35:5d:70:41:
dd:83:16:02:d0:a7:1e:1a:21:de:e2:a0:1e:5a:fe:e6:e8:fa:
5f:79:38:07:1d:63:28:fa:a2:06:34:cc:28:cf:05:a7:38:cb:
a8:06:60:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:59:42 2025 by rpki-client