Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/04wvXQkxp_kIl5uRKr8ghukmhJI.roa
File: 04wvXQkxp_kIl5uRKr8ghukmhJI.roa (raw, json)
Hash identifier: GTtfMqk+jPWwguQx9YNOstJCSt+yXJTuSCt2I8sH22g=
Subject key identifier: D3:8C:2F:5D:09:31:A7:F9:08:97:9B:91:2A:BF:20:86:E9:26:84:92
Certificate issuer: /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial: 019425223370DF5DB9AE8D55C5B3CABED65B
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/04wvXQkxp_kIl5uRKr8ghukmhJI.roa
Signing time: Thu 02 Jan 2025 03:49:45 +0000
ROA not before: Thu 02 Jan 2025 03:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208423
IP address blocks: 5.102.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 21:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:33:70:df:5d:b9:ae:8d:55:c5:b3:ca:be:d6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
Validity
Not Before: Jan 2 03:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d38c2f5d0931a7f908979b912abf2086e9268492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6b:6d:96:c7:30:24:4b:ff:10:2a:7b:2e:16:
29:04:f1:00:42:9c:f6:fa:3a:1e:46:af:38:fb:48:
08:35:d6:e9:6f:15:45:25:52:a9:70:7d:bc:2f:f5:
70:f0:aa:e0:ad:51:db:bf:04:7e:4e:9c:f5:df:8a:
e4:41:51:ea:65:f1:e3:e8:2b:00:c3:63:90:76:ce:
f8:83:dd:c6:fa:44:ae:ee:e8:5b:9f:dc:d3:7a:d8:
dc:c7:f6:44:c4:cb:7a:42:fc:1e:a0:10:2a:4d:cc:
fe:b2:c8:8a:26:0c:40:7f:d9:22:c2:ed:23:b4:dc:
f5:4d:a5:ba:3c:47:17:09:59:2e:a8:b8:16:f3:f9:
05:aa:e7:35:0e:09:66:ee:04:5b:9c:b0:a8:2b:da:
00:93:af:8e:ad:3a:12:f0:62:da:7e:bd:5d:ec:ad:
03:63:ad:22:08:a4:06:90:78:c7:a1:7c:b3:a3:4e:
4f:1d:bc:21:a3:98:64:8b:51:f9:9e:ed:0d:a6:51:
7b:fd:74:b1:4f:68:00:c3:25:9f:2c:6e:af:c1:de:
f7:d4:7e:05:0a:5e:32:82:a7:77:c0:96:0b:87:26:
ff:98:62:35:28:9c:d7:ea:67:f0:d7:96:7c:59:66:
b7:9d:cb:51:34:74:48:19:a4:1c:9f:39:0a:42:1f:
e8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8C:2F:5D:09:31:A7:F9:08:97:9B:91:2A:BF:20:86:E9:26:84:92
X509v3 Authority Key Identifier:
keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/04wvXQkxp_kIl5uRKr8ghukmhJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.46.0/24
Signature Algorithm: sha256WithRSAEncryption
17:33:c0:37:38:a4:75:98:02:07:5b:eb:54:cb:1c:13:fa:92:
b4:ad:ea:47:5b:75:7a:5f:7a:21:7e:97:9f:81:5f:90:37:c8:
65:f6:e6:5a:e5:c0:f1:c3:cd:5f:6c:a4:84:44:d9:f7:2a:07:
38:db:82:5c:d6:0d:8d:d0:8f:af:92:f6:ef:0c:df:38:44:36:
c6:fa:71:b3:60:51:ee:09:89:72:ea:98:45:07:30:2b:05:58:
c6:9c:d0:6b:85:9a:df:77:ef:a1:36:02:bc:10:e4:6b:7e:70:
8d:2e:a2:7f:05:b7:8e:05:0c:47:06:35:b9:36:fc:aa:14:01:
fb:ad:9e:eb:05:b2:8e:8d:64:9d:56:7d:3b:1c:18:87:42:78:
a9:1f:4d:2a:99:82:01:75:9b:ff:ac:6b:f3:c5:18:b8:4f:12:
8c:e9:3a:0c:c7:40:10:dd:3c:b1:7a:ca:f7:48:66:fd:d9:0a:
ea:23:a8:09:6b:ec:ca:af:ef:6b:8f:15:d6:c2:e0:ee:62:22:
00:8a:da:0a:23:9c:a2:82:9e:9f:b2:ca:bb:87:fe:9d:17:b4:
43:f9:90:d1:08:90:82:dc:9d:62:bf:31:52:dc:f4:d8:49:d1:
13:a6:75:5f:40:ea:f7:74:29:07:e5:88:ae:c3:dd:52:39:4b:
b6:9d:5d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:07:07 2025 by rpki-client