Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/v0xOJH_sf4tg_sdG5y5yoMQKkSQ.roa
File: v0xOJH_sf4tg_sdG5y5yoMQKkSQ.roa (raw, json)
Hash identifier: BU+rWF36ztpGAVHWZEWs8B5Aoz3lnx986CxMeJznDIM=
Subject key identifier: BF:4C:4E:24:7F:EC:7F:8B:60:FE:C7:46:E7:2E:72:A0:C4:0A:91:24
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0194E21F76E4F2D1AD3D8E9F30BEA17FCDFC
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/v0xOJH_sf4tg_sdG5y5yoMQKkSQ.roa
Signing time: Fri 07 Feb 2025 20:35:00 +0000
ROA not before: Fri 07 Feb 2025 20:35:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12025
IP address blocks: 124.158.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e2:1f:76:e4:f2:d1:ad:3d:8e:9f:30:be:a1:7f:cd:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 7 20:35:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf4c4e247fec7f8b60fec746e72e72a0c40a9124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:21:a0:00:73:70:fa:8c:94:a6:53:f9:50:f7:
6d:cb:c2:64:f7:1a:a6:80:cb:b1:a9:91:09:4d:82:
f7:e2:2e:21:4b:51:84:24:56:ac:ad:04:1d:ae:00:
81:e6:ef:5a:0b:92:22:c7:be:8c:c1:88:81:e7:5b:
37:a5:01:cb:07:df:77:73:37:ee:3a:04:8b:42:7d:
49:be:d9:c3:43:b8:5c:f5:ec:4b:ae:10:68:67:20:
b4:92:70:ed:88:2a:91:d1:5b:4e:5f:92:21:04:44:
26:cc:db:47:be:35:60:ec:01:aa:27:fa:0a:d9:1e:
7a:12:94:83:e8:61:79:4f:75:a7:aa:2a:dc:97:c7:
3a:41:8a:a5:5f:be:59:c2:1a:9f:8c:e4:ef:11:e0:
33:21:5e:04:34:be:47:d6:ed:63:ce:0f:fe:21:d2:
df:5a:60:23:b0:95:0b:d7:d9:cd:ee:b6:e1:7a:09:
b4:ab:66:08:80:75:81:78:e7:69:fb:9e:30:cd:f1:
a3:ca:96:33:54:3e:45:65:e9:52:2d:ae:88:3c:ff:
d5:0c:20:79:0c:40:04:19:f2:3b:ec:39:b3:d7:74:
8b:11:d2:92:3a:c0:b9:4c:db:78:83:cb:80:2a:61:
b2:f1:f9:a8:e6:4f:63:12:e4:ce:26:83:5a:0e:1c:
16:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4C:4E:24:7F:EC:7F:8B:60:FE:C7:46:E7:2E:72:A0:C4:0A:91:24
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/v0xOJH_sf4tg_sdG5y5yoMQKkSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.158.102.0/23
Signature Algorithm: sha256WithRSAEncryption
62:81:1a:ca:f9:1a:78:c6:aa:66:4b:d5:e3:fe:be:1b:e8:93:
7b:47:88:77:df:2a:02:28:ba:1a:c6:fa:e2:b4:1b:10:d0:a2:
15:1c:01:7c:a5:b6:5e:3a:36:77:4f:14:b9:14:6c:2f:0a:09:
0b:1a:1a:4f:a1:1e:ff:e7:1f:d4:5c:e6:88:b4:eb:df:a6:a6:
a1:cf:2f:3f:e9:ce:6b:53:82:fb:5b:d8:6f:1d:bf:15:c0:bd:
70:33:a1:51:32:03:4b:47:3d:9d:bf:1b:24:aa:6f:33:c2:34:
17:90:10:87:ce:d4:b7:4e:47:c5:00:36:9d:f0:5b:22:5d:9d:
39:03:f3:e3:f7:01:a3:3d:2b:96:c9:91:86:0a:73:44:7d:97:
33:67:b8:09:73:c6:c3:cb:ad:fd:66:50:ed:a2:74:ce:c4:ae:
33:32:81:64:1f:83:4d:08:b5:c6:1b:88:d9:e9:5b:f1:0b:5e:
df:81:c4:84:fc:1c:15:de:ee:d7:27:21:11:54:99:0f:91:b9:
7e:63:a3:9b:ec:9d:83:74:84:bb:8b:d7:36:0f:fc:52:d5:ec:
99:79:20:c1:ce:f3:a3:96:5b:2d:eb:e2:ca:5e:ff:e7:da:c1:
85:ab:3c:67:f4:8f:08:5b:87:58:9b:57:09:d5:b3:48:11:84:
f2:94:cb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:53 2025 by rpki-client