Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/OvDT3hoMHBsjPJyk8KakbVCtc9Q.roa
File: OvDT3hoMHBsjPJyk8KakbVCtc9Q.roa (raw, json)
Hash identifier: VPiSczt4Msg1WvbqoxKczsVhjU7QHTKIOEw0gt/k9GQ=
Subject key identifier: 3A:F0:D3:DE:1A:0C:1C:1B:23:3C:9C:A4:F0:A6:A4:6D:50:AD:73:D4
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 0196346E825FF557F5270F4F54E649428871
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/OvDT3hoMHBsjPJyk8KakbVCtc9Q.roa
Signing time: Mon 14 Apr 2025 13:12:59 +0000
ROA not before: Mon 14 Apr 2025 13:12:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399486
IP address blocks: 103.102.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:34:6e:82:5f:f5:57:f5:27:0f:4f:54:e6:49:42:88:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Apr 14 13:12:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3af0d3de1a0c1c1b233c9ca4f0a6a46d50ad73d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f1:0f:4f:6b:d1:77:4c:98:62:ed:3d:a7:c4:
4e:1b:93:38:ed:b5:9e:f1:8b:b1:ab:35:0b:13:20:
2f:46:0b:c2:ab:39:20:16:6f:7f:75:27:fd:1c:22:
19:77:91:ac:35:ac:76:7c:f0:d4:d5:3c:38:be:ce:
14:5a:1d:5a:b7:b8:17:3f:c6:92:e2:27:aa:67:72:
e0:05:8d:f1:6d:a6:f3:3d:0b:08:11:36:cd:0d:50:
71:ca:c4:69:37:97:51:e5:57:ce:5f:49:3a:8d:39:
25:74:c8:cf:2d:ca:31:c5:f0:f9:da:8f:df:bc:76:
37:32:11:e2:09:a3:66:2c:3d:64:f5:0e:c1:13:32:
63:73:50:c7:78:6b:b3:95:86:df:fe:fb:97:0e:46:
2e:2f:2d:9f:1f:58:d3:db:f1:85:39:98:0d:47:e6:
f3:1a:72:fe:a2:43:d1:fe:ac:67:e2:4c:3f:22:85:
74:6f:cc:4f:92:5b:a0:18:82:ae:29:9f:ed:71:03:
67:dc:c3:6c:37:e3:c1:55:27:e4:fe:72:e3:d8:0e:
08:48:0e:10:ab:b5:f4:44:79:33:d0:e7:61:7d:e9:
f6:d6:a5:2f:72:32:d7:f5:57:8c:06:4f:df:6c:8c:
65:8a:c3:d0:41:24:c0:74:41:2d:37:90:80:37:0a:
f9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F0:D3:DE:1A:0C:1C:1B:23:3C:9C:A4:F0:A6:A4:6D:50:AD:73:D4
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/OvDT3hoMHBsjPJyk8KakbVCtc9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.230.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d0:9d:b5:a4:c4:4a:62:39:4d:18:b2:e9:f6:d6:99:32:e9:
b3:40:ca:a4:fe:f1:1f:3d:03:f4:3c:57:e3:b0:90:0a:fd:38:
f1:de:b0:a9:0f:c4:87:92:56:18:af:c0:3b:0b:ba:37:c1:40:
2e:01:f4:6b:15:11:13:95:ed:a6:6f:9d:8d:c4:f1:d1:10:5a:
78:fd:2f:10:fd:35:da:78:a7:dc:99:ca:2d:ab:4a:85:e5:12:
16:7c:c6:77:36:f0:4d:b9:ad:fa:b3:18:bb:53:60:24:4b:e1:
8d:4f:e0:25:b9:b4:ac:3c:d1:41:87:8c:df:b1:a0:be:80:05:
0a:f8:a7:c4:ed:92:82:05:e5:33:dd:e0:8d:45:c2:63:a3:a7:
00:11:c6:93:66:57:63:46:c4:0f:b5:17:5e:8b:65:c1:24:48:
2d:27:bd:c6:88:5e:19:b4:ab:e4:c5:43:c7:e2:5b:cc:42:24:
f3:85:50:88:12:bd:03:ea:b7:ad:28:4c:1a:98:23:f1:36:26:
fd:56:0f:76:ea:a1:0b:fe:3c:d2:3a:96:f8:f5:a8:c6:42:7c:
9a:b5:3c:3a:3c:5c:d2:e9:04:a0:2e:4a:07:88:61:f4:a7:4b:
b6:9c:ec:cc:4a:35:a4:62:f8:c9:78:e6:19:c3:50:6c:57:11:
af:1f:fc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:40:24 2025 by rpki-client