Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/3S0rFsiwwjoluGLVOLYa6SaPGd8.roa
File: 3S0rFsiwwjoluGLVOLYa6SaPGd8.roa (raw, json)
Hash identifier: 5o7wFBgF/K4kEGx40S0asC9sLXE7oQTuxZH8H28qZjg=
Subject key identifier: DD:2D:2B:16:C8:B0:C2:3A:25:B8:62:D5:38:B6:1A:E9:26:8F:19:DF
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD1AFF2942640A5F727F275086D3D6
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/3S0rFsiwwjoluGLVOLYa6SaPGd8.roa
Signing time: Thu 02 Jan 2025 07:48:51 +0000
ROA not before: Thu 02 Jan 2025 07:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20853
IP address blocks: 104.222.161.0/24 maxlen: 24
104.222.167.0/24 maxlen: 24
104.222.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:1a:ff:29:42:64:0a:5f:72:7f:27:50:86:d3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd2d2b16c8b0c23a25b862d538b61ae9268f19df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:85:78:d0:0a:c0:79:04:67:1e:e5:d3:31:01:
92:3e:ae:4d:dd:dc:e1:fd:d7:49:7f:66:83:c0:e8:
cc:19:33:2a:f9:1e:d8:e5:93:8f:36:fb:23:51:99:
1e:d2:57:08:ea:a2:64:21:e8:a6:e5:f5:2d:15:72:
df:e9:43:f7:93:b9:99:03:f4:97:cf:09:c8:51:8c:
13:d1:27:b5:4e:ce:94:59:93:56:a5:7e:a4:fa:4c:
4c:a2:c1:9e:02:0c:eb:2c:9e:f5:88:fe:48:59:d3:
be:64:32:a3:8f:df:89:b0:1f:80:8d:92:a7:7f:14:
68:7b:1c:41:15:88:b5:04:a1:ea:cc:8f:87:55:07:
d1:1b:b2:77:9b:5d:98:0c:3b:a5:3a:a2:bc:ed:73:
46:2b:d4:51:a7:35:7c:06:1a:c4:ef:12:02:7c:1b:
22:bf:23:c5:4a:75:38:84:d4:1d:1b:34:1d:63:de:
97:0e:4f:a9:08:04:34:3e:51:e4:27:00:1c:47:50:
b5:2a:a8:27:50:29:40:4b:5a:00:0e:f1:b4:b6:9f:
93:82:91:6f:70:92:e6:1a:a9:df:c5:f7:74:5a:bb:
4b:b5:8f:f9:6e:4b:59:21:e5:b8:4d:d2:6f:ad:58:
bb:4b:19:3e:32:26:71:c5:a9:62:c7:2f:e3:d9:d9:
a1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2D:2B:16:C8:B0:C2:3A:25:B8:62:D5:38:B6:1A:E9:26:8F:19:DF
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/3S0rFsiwwjoluGLVOLYa6SaPGd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.222.161.0/24
104.222.167.0-104.222.168.255
Signature Algorithm: sha256WithRSAEncryption
7f:45:b1:d8:17:2e:21:38:76:03:0e:56:b5:71:45:15:84:e2:
8c:f2:4c:77:d0:38:c1:9e:91:57:af:d5:cd:93:d0:11:45:ae:
64:1a:e4:b9:df:6e:79:e5:1d:24:7f:16:6a:d6:df:4b:71:19:
58:d2:0a:dd:f9:82:c6:97:15:7c:fb:1c:a0:57:00:5f:d3:39:
8b:c1:8f:71:75:67:01:f6:24:6d:eb:2f:e6:31:f4:90:c7:92:
bb:c4:7c:a9:bd:2f:16:f1:dc:9c:64:0d:b8:43:58:c0:cd:3b:
c5:45:4f:07:b7:77:84:8c:36:91:a6:ca:fd:87:7d:8f:d1:0f:
f9:3e:ae:8c:56:53:f4:6f:a8:41:e4:34:e1:e1:2e:c2:35:c1:
8e:c9:a8:97:58:db:e2:60:c1:74:df:e5:79:9e:a1:70:04:4d:
35:01:bf:80:35:ba:02:10:a7:e9:b4:09:28:a9:6b:83:91:aa:
ba:14:d3:9c:f7:39:58:b4:79:cb:29:8a:70:f9:f0:db:40:15:
8f:b2:4b:61:7d:c4:c0:62:17:0f:0d:f7:d4:81:52:c7:00:00:
93:fb:51:1b:df:50:46:39:9a:40:7d:f7:f2:68:8b:7b:ea:c4:
aa:91:f3:ec:dd:f3:e2:aa:b9:09:08:8c:f4:dd:ee:7e:df:fb:
84:0f:a5:65
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:35:26 2025 by rpki-client