Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/6_ol7Z5xqC1IIH-IRx34A-DKJcI.roa
File: 6_ol7Z5xqC1IIH-IRx34A-DKJcI.roa (raw, json)
Hash identifier: XecDVlXcHRTe3uKLJfofxrPQJllwwj7/IR6Dd2oXagI=
Subject key identifier: EB:FA:25:ED:9E:71:A8:2D:48:20:7F:88:47:1D:F8:03:E0:CA:25:C2
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019515488E982EDCA71908BE78C2CBD888DF
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/6_ol7Z5xqC1IIH-IRx34A-DKJcI.roa
Signing time: Mon 17 Feb 2025 19:00:31 +0000
ROA not before: Mon 17 Feb 2025 19:00:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198178
IP address blocks: 212.102.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 17:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:15:48:8e:98:2e:dc:a7:19:08:be:78:c2:cb:d8:88:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Feb 17 19:00:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebfa25ed9e71a82d48207f88471df803e0ca25c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:15:1b:d4:5d:b4:00:ec:4e:46:d9:43:fb:95:
e0:b1:2f:57:a9:a8:09:64:43:21:ba:7f:7c:0f:7c:
d4:52:a3:4f:e8:31:55:40:53:72:f3:d1:9f:c8:3a:
1d:c3:f6:9a:81:63:14:9b:74:fc:14:2a:89:37:f8:
a3:d2:9a:6d:1e:5c:09:d5:ac:0a:38:c4:ad:5b:d5:
8b:ca:1b:56:64:c2:75:fb:ec:bd:e7:12:7d:c6:bd:
35:09:71:d4:f3:ac:a8:37:bc:d0:3b:76:9a:af:2d:
3c:dc:d9:f4:ff:83:52:2f:9c:c1:8e:0f:83:de:9b:
bd:4c:84:34:5c:30:95:d3:b8:b3:ee:09:17:7f:c6:
73:9d:72:77:22:c9:98:8a:56:ae:89:d2:8f:ca:a7:
18:b7:43:57:99:f8:a1:17:0b:cf:bf:b8:4d:82:3b:
4e:96:eb:fd:e2:cf:7c:d8:77:e4:05:93:71:30:42:
07:94:14:27:79:5d:72:03:19:32:48:c2:3a:0b:5a:
0e:be:61:7b:5d:ff:91:81:e3:a5:ce:b4:eb:65:6a:
11:d5:29:1e:d9:fe:c4:50:6d:37:8f:54:c3:2b:06:
c8:06:e7:2e:15:d4:c0:aa:89:ba:ae:6b:33:ad:1a:
b6:4b:10:21:56:b8:b1:d2:b5:1b:93:14:12:dc:0f:
dd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FA:25:ED:9E:71:A8:2D:48:20:7F:88:47:1D:F8:03:E0:CA:25:C2
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/6_ol7Z5xqC1IIH-IRx34A-DKJcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
50:fc:fd:c7:17:8e:02:75:98:50:4a:e6:00:1c:3a:03:31:6a:
c1:2a:7e:c4:be:df:fb:81:a1:de:cb:7b:c2:63:44:97:56:91:
f7:57:d8:38:3b:d9:99:45:ad:c7:23:8a:c7:8d:a3:62:7c:d7:
a7:c3:66:ea:87:f4:d4:dd:fc:b9:4a:44:cd:14:6a:4f:16:16:
a8:b1:10:97:81:49:23:92:f3:33:4f:db:0a:76:7c:82:11:fc:
c8:27:34:bd:3f:4a:d3:1e:75:d3:ea:f2:67:1b:af:42:ef:94:
23:25:cf:67:62:80:9c:6f:3d:16:5b:b9:76:a6:de:bd:7a:fe:
bf:e4:4c:41:ff:e6:c4:f2:37:65:d3:a2:b5:f9:57:43:38:bb:
15:27:55:2e:0f:ba:f4:d2:00:ef:e1:c0:3e:af:64:e7:9c:81:
9e:57:96:d2:32:28:ae:9c:b4:5e:c6:f9:a5:3b:49:e8:7d:bf:
c4:2b:31:a0:06:0d:79:ce:d0:c6:61:10:1c:a5:67:cc:7c:eb:
7d:fe:d8:f9:b1:c0:78:f7:62:dd:53:d5:c0:ac:1e:d9:d4:f1:
4e:00:3c:79:d1:51:2f:b3:75:48:b1:7c:28:1f:6c:b1:30:41:
14:7e:25:5c:bc:02:cd:42:3c:70:34:51:14:2e:33:9b:6f:f9:
e3:0c:f1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:40:35 2025 by rpki-client