Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/Kd5CFoG07kPDgqUGQpHj24zQka8.roa
File: Kd5CFoG07kPDgqUGQpHj24zQka8.roa (raw, json)
Hash identifier: +2s4BraFjLJP4x9hMH6DgHfMWVkWCLxuz2cF8ghToGs=
Subject key identifier: 29:DE:42:16:81:B4:EE:43:C3:82:A5:06:42:91:E3:DB:8C:D0:91:AF
Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Certificate serial: 01942220168E21EB5E722DCF9B4B0EB3E915
Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/Kd5CFoG07kPDgqUGQpHj24zQka8.roa
Signing time: Wed 01 Jan 2025 13:48:35 +0000
ROA not before: Wed 01 Jan 2025 13:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34400
IP address blocks: 5.108.0.0/14 maxlen: 14
5.244.0.0/14 maxlen: 14
31.166.0.0/15 maxlen: 15
37.121.0.0/16 maxlen: 16
37.124.0.0/14 maxlen: 14
37.240.0.0/14 maxlen: 14
46.52.0.0/17 maxlen: 17
46.152.0.0/15 maxlen: 15
62.120.0.0/16 maxlen: 16
84.23.96.0/19 maxlen: 19
84.23.96.0/20 maxlen: 24
84.23.105.0/24 maxlen: 24
84.23.106.0/24 maxlen: 24
84.23.107.0/24 maxlen: 24
84.23.108.0/24 maxlen: 24
84.23.109.0/24 maxlen: 24
84.23.113.0/24 maxlen: 24
84.23.115.0/24 maxlen: 24
92.48.0.0/18 maxlen: 18
109.82.0.0/15 maxlen: 15
176.16.0.0/14 maxlen: 14
176.224.0.0/15 maxlen: 15
178.80.0.0/15 maxlen: 15
188.132.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:16:8e:21:eb:5e:72:2d:cf:9b:4b:0e:b3:e9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29de421681b4ee43c382a5064291e3db8cd091af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:42:1b:3e:fc:02:0f:05:13:43:eb:8e:4d:29:
d6:ad:59:56:10:1f:c3:db:a5:d3:f0:ac:81:96:79:
43:90:f4:34:56:2d:5e:c4:3e:a1:1f:88:67:b1:c7:
9b:d8:48:8a:f6:6c:e7:02:c9:aa:20:74:c8:8b:ac:
26:ff:2d:82:d3:b6:82:c7:e1:18:5b:6d:d8:c0:97:
8b:13:db:2f:e1:d1:08:af:19:db:c4:01:92:ea:99:
cd:54:69:fb:6b:6b:de:81:73:8e:a6:5b:ee:40:b9:
ed:2d:3d:34:fd:d3:92:5e:cf:52:c5:60:28:e6:3e:
04:cf:7a:1b:93:e0:0c:3b:aa:78:c8:37:e3:2e:d9:
bd:f7:27:52:63:4b:07:64:d4:00:33:55:a3:11:6a:
08:91:19:e1:06:96:5e:f8:2a:65:bb:cc:42:da:ee:
47:e9:30:a2:ac:de:f9:e0:4a:26:2a:f2:dd:c9:ea:
4d:13:f2:00:e6:b4:e2:ed:b2:2f:90:13:90:45:b0:
f4:bf:6d:c8:1b:ca:ed:f1:ce:c6:3e:ec:c4:72:22:
9e:66:fa:92:58:78:98:9b:48:97:17:0f:77:1c:f3:
3a:b3:1f:4a:c6:2d:c5:b9:61:fb:01:f6:84:d3:22:
54:f9:7d:91:3e:24:fd:0f:3d:cd:8e:9d:44:ee:75:
af:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DE:42:16:81:B4:EE:43:C3:82:A5:06:42:91:E3:DB:8C:D0:91:AF
X509v3 Authority Key Identifier:
keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/Kd5CFoG07kPDgqUGQpHj24zQka8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.108.0.0/14
5.244.0.0/14
31.166.0.0/15
37.121.0.0/16
37.124.0.0/14
37.240.0.0/14
46.52.0.0/17
46.152.0.0/15
62.120.0.0/16
84.23.96.0/19
92.48.0.0/18
109.82.0.0/15
176.16.0.0/14
176.224.0.0/15
178.80.0.0/15
188.132.0.0/17
Signature Algorithm: sha256WithRSAEncryption
2e:06:0c:86:11:c9:98:d8:88:71:e9:cb:14:d1:e0:66:75:8e:
ef:8c:8a:71:88:1e:bf:1b:20:59:1c:dd:cc:c0:6b:80:09:1f:
35:a6:39:3e:53:b1:e8:0b:9a:18:cd:94:3c:37:91:3e:bd:4e:
dc:2e:19:2a:a5:23:bb:df:27:27:2d:20:e0:98:c9:3d:e4:99:
fd:7c:42:90:8f:fb:27:ae:df:c0:96:e7:4f:0f:6b:e9:ea:72:
cd:26:20:6a:92:b9:ee:52:f7:7f:95:8b:af:ca:4b:ab:7a:c6:
24:73:d3:5b:54:31:05:71:43:95:c0:89:f3:6f:f9:24:f8:7a:
2e:23:9a:67:c4:1b:c4:95:64:91:d9:54:12:12:b6:f8:9d:ee:
74:d9:03:83:ce:16:8d:d2:ac:be:c2:e4:29:e9:53:a7:b2:60:
66:99:da:56:cd:a1:7e:af:bc:2f:18:6c:fa:82:2b:2c:38:e7:
ac:89:2e:ee:26:cc:da:92:81:bd:b9:2a:13:5a:6a:eb:db:4c:
7f:3a:6f:18:21:07:b5:c3:05:7c:54:a7:8b:c5:c4:ff:2f:06:
95:51:00:99:1f:fc:41:03:fa:b1:3b:db:5e:69:9f:03:76:29:
74:53:ca:e2:6e:a9:ea:a2:f3:81:95:30:bb:82:af:69:8e:9f:
c2:f8:1b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:59:14 2025 by rpki-client