Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/sSDGKXlUGoTfcvXzshkoNv39onU.roa
File: sSDGKXlUGoTfcvXzshkoNv39onU.roa (raw, json)
Hash identifier: VtRiDCk+flQ579TM6P+QpzofQQX4+SdBXmtckN39/Fc=
Subject key identifier: B1:20:C6:29:79:54:1A:84:DF:72:F5:F3:B2:19:28:36:FD:FD:A2:75
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A35AB9284C78705E50590855AE22A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/sSDGKXlUGoTfcvXzshkoNv39onU.roa
Signing time: Wed 01 Jan 2025 19:49:10 +0000
ROA not before: Wed 01 Jan 2025 19:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.38.0/23 maxlen: 23
163.5.38.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.63.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:35:ab:92:84:c7:87:05:e5:05:90:85:5a:e2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b120c62979541a84df72f5f3b2192836fdfda275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b5:5e:9b:0c:a3:ae:9e:b0:7c:85:eb:f0:e6:
e5:b7:00:51:74:30:ff:3a:a9:4d:6a:e1:62:03:7b:
9d:4c:65:e0:f1:7c:15:bf:ce:2b:44:19:bb:17:b0:
1c:8a:a7:19:9b:cf:8d:7e:08:58:6f:0b:85:af:08:
31:74:42:be:c3:c1:ab:dc:9b:fc:d4:0f:c6:45:48:
8e:41:c2:38:d7:5c:53:70:98:2d:82:64:1a:46:5e:
28:e2:e1:4f:fe:e9:0e:0a:5d:1f:03:47:40:8c:47:
80:52:af:03:f4:e6:fc:97:5f:d9:6e:6b:5d:08:c1:
74:13:9d:d5:12:17:ca:0c:d2:11:5d:0b:fe:d2:db:
ab:48:cc:5c:5e:70:cc:42:dd:77:03:98:1b:36:3b:
1f:00:d5:ca:5e:11:41:90:c5:31:b9:ce:74:40:da:
c0:e8:05:15:3e:fc:54:98:57:22:ef:72:7c:c1:c2:
84:b5:e8:96:1e:b5:6c:7b:36:8f:b3:6f:e1:a8:1c:
d9:eb:fe:7f:f4:ed:7f:7a:8b:8a:9e:93:9f:0f:ed:
65:c9:bf:80:de:e4:d8:6c:ec:7e:7e:16:00:4d:ae:
26:dc:cd:6e:bf:60:38:dc:79:86:a9:9e:cc:44:53:
59:62:25:18:ad:f8:5b:80:25:2d:6f:cc:60:0c:7d:
f3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:20:C6:29:79:54:1A:84:DF:72:F5:F3:B2:19:28:36:FD:FD:A2:75
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/sSDGKXlUGoTfcvXzshkoNv39onU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.38.0/23
163.5.60.0/24
163.5.63.0/24
163.5.88.0/24
163.5.90.0/24
163.5.93.0/24
163.5.100.0-163.5.102.255
163.5.108.0/23
163.5.114.0/24
163.5.116.0/23
163.5.130.0/23
163.5.133.0/24
163.5.147.0/24
163.5.174.0/24
163.5.189.0/24
163.5.192.0/24
163.5.225.0-163.5.229.255
163.5.238.0/24
163.5.240.0/24
163.5.243.0/24
163.5.246.0/24
Signature Algorithm: sha256WithRSAEncryption
22:5a:0e:e5:d2:09:4c:ae:71:3c:7e:8e:57:f1:75:ab:0c:c2:
3e:6e:1c:06:aa:bd:06:76:da:11:4c:c8:b6:5b:43:72:91:a7:
6b:27:c5:fa:98:9c:fc:ce:c6:d2:18:1c:4a:c4:da:b1:58:8e:
da:92:4a:12:04:36:80:cd:98:aa:dc:37:c0:34:b3:00:72:00:
9c:f3:6f:f0:6f:bc:00:1d:94:16:f3:c0:b4:2b:e5:45:04:11:
86:a2:38:71:35:29:8e:cc:6d:89:93:a7:d2:0d:08:03:db:bc:
fd:fb:c7:30:6f:85:6a:5c:ea:58:74:3b:0f:77:3f:1e:29:90:
32:16:6f:cb:0c:b8:7a:ce:0c:76:fd:95:64:dc:ff:a2:28:84:
fb:41:ab:5c:ab:56:a6:e7:e3:36:2c:86:11:27:4e:0f:83:e8:
d6:91:09:34:2e:9a:16:34:9c:57:69:46:a8:43:9f:c5:54:ce:
f6:69:04:3f:7f:f7:68:65:32:75:76:60:e9:fe:b2:93:77:b0:
8c:31:27:20:62:db:40:f5:9b:27:7a:5a:c3:ec:66:dd:fc:b8:
2c:98:95:c1:c1:5a:d2:23:43:15:e0:53:04:f2:0f:c1:fb:6e:
e0:8c:d0:cb:e4:4c:d0:c8:82:61:d5:92:aa:67:26:bf:29:fa:
92:f3:4a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:53:00 2025 by rpki-client