Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lDa7Oh6hDHGsuezVRCkQiQX7-KQ.roa
File: lDa7Oh6hDHGsuezVRCkQiQX7-KQ.roa (raw, json)
Hash identifier: WV/sPhUcQb9LHhG3W1YNFQsR65q6bw7e1dRk/dNgWQE=
Subject key identifier: 94:36:BB:3A:1E:A1:0C:71:AC:B9:EC:D5:44:29:10:89:05:FB:F8:A4
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0195FC3F6D5D589CC5A1159741C83DA3FB4F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lDa7Oh6hDHGsuezVRCkQiQX7-KQ.roa
Signing time: Thu 03 Apr 2025 15:22:49 +0000
ROA not before: Thu 03 Apr 2025 15:22:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fc:3f:6d:5d:58:9c:c5:a1:15:97:41:c8:3d:a3:fb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 3 15:22:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9436bb3a1ea10c71acb9ecd54429108905fbf8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:17:61:fa:66:02:70:36:e1:de:74:2e:e7:08:
b9:6b:e3:41:e2:6b:ae:38:ef:04:53:68:52:e4:ec:
07:0d:5e:5f:66:d1:d8:f9:1c:95:6b:dd:fc:aa:00:
66:9e:7b:00:9a:a7:0a:8a:80:53:6a:43:d2:42:4b:
ad:96:20:35:71:f5:31:02:9c:8a:78:20:73:f9:3a:
6d:b5:5a:38:f8:53:23:ea:dd:df:a1:41:e1:88:59:
26:a7:29:eb:6c:d9:0f:c4:bc:15:9c:48:0c:4e:2f:
c6:7c:43:4e:43:06:66:0c:92:a4:9d:0f:bc:4a:40:
83:bc:37:66:1d:9b:68:7a:33:b9:a1:b4:de:2d:97:
f4:29:94:cb:01:73:b2:04:f5:8c:1b:80:ff:7e:6b:
eb:b3:3d:03:5d:a9:f4:a9:be:af:de:97:99:8a:f3:
55:38:b1:ea:97:1d:4f:54:bf:5b:2f:0a:8b:37:bc:
03:41:86:3a:2d:9d:2f:29:c8:8b:69:dc:20:ef:9d:
f0:0a:d7:7f:f3:be:10:f2:1d:ad:42:ee:27:0f:05:
83:50:1f:99:eb:fb:38:fe:75:c8:46:0a:10:7f:be:
3f:55:db:38:f6:4d:77:51:20:85:4a:45:ea:80:3d:
11:a4:a8:6b:02:51:51:d7:2c:7d:af:e7:76:19:0d:
cf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:36:BB:3A:1E:A1:0C:71:AC:B9:EC:D5:44:29:10:89:05:FB:F8:A4
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lDa7Oh6hDHGsuezVRCkQiQX7-KQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.34.0/24
163.5.59.0/24
163.5.66.0/24
163.5.73.0/24
163.5.97.0/24
163.5.112.0/23
163.5.118.0/23
163.5.121.0/24
163.5.128.0/23
163.5.131.0/24
163.5.138.0/23
163.5.142.0-163.5.144.255
163.5.146.0/24
163.5.151.0/24
163.5.156.0/24
163.5.158.0/24
163.5.160.0/24
163.5.162.0/24
163.5.164.0/24
163.5.167.0/24
163.5.173.0/24
163.5.175.0/24
163.5.178.0/23
163.5.182.0/24
163.5.186.0/24
163.5.189.0/24
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.216.0/24
163.5.218.0/24
163.5.221.0/24
163.5.224.0/24
163.5.228.0/24
163.5.233.0/24
163.5.241.0/24
163.5.246.0/24
Signature Algorithm: sha256WithRSAEncryption
54:59:c0:28:2f:91:7c:58:57:95:9e:d9:3c:7e:c5:05:70:74:
98:d5:bc:b4:84:46:c4:cd:fd:e5:7f:24:09:2c:06:ac:96:af:
88:60:47:d9:a4:e3:93:53:37:09:d8:dc:92:75:41:d1:d5:f9:
db:82:f6:14:83:16:7a:29:ac:51:70:ca:68:f8:47:3f:09:c2:
47:e5:ce:13:75:6c:d3:28:ce:d2:b7:a7:5a:7b:9f:c1:a5:f4:
d7:70:d8:02:56:7b:fb:24:ca:e3:e5:66:84:ba:64:ee:b9:1f:
a1:16:ef:2d:fb:8c:30:46:e2:08:ff:ed:45:28:71:bb:54:4e:
33:a8:80:0e:13:73:5c:cd:29:ae:33:9e:f0:41:23:6d:cf:31:
76:e1:63:c4:1b:7b:79:7e:62:51:3c:9c:f6:64:b7:f9:6d:27:
59:53:0f:69:f6:17:99:f0:52:5c:22:19:fd:9a:93:c1:2a:76:
ab:3c:14:27:95:70:01:70:d6:28:ac:e5:2a:f9:03:8f:97:0d:
b9:b9:44:f9:69:d0:48:f9:d8:ba:59:2b:31:0e:83:99:23:ea:
b7:3e:89:bd:46:a4:37:ac:f1:6f:ca:34:ab:28:ff:52:69:38:
23:83:8c:84:20:5e:95:da:c1:1f:1b:a1:93:9d:c7:ab:5f:e3:
77:57:55:05
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:42:45 2025 by rpki-client