Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/UpILUvbN3-VCUF8uzkq7sns8Fyk.roa
File: UpILUvbN3-VCUF8uzkq7sns8Fyk.roa (raw, json)
Hash identifier: ykSd/OQ56bqBUGFasbCBtXm6JPnWOoc7h6a3uhDZ2CE=
Subject key identifier: 52:92:0B:52:F6:CD:DF:E5:42:50:5F:2E:CE:4A:BB:B2:7B:3C:17:29
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD2583A2A1BD10254939099B7EB530
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/UpILUvbN3-VCUF8uzkq7sns8Fyk.roa
Signing time: Thu 02 Jan 2025 07:48:54 +0000
ROA not before: Thu 02 Jan 2025 07:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202044
IP address blocks: 64.137.56.0/23 maxlen: 23
64.137.92.0/23 maxlen: 23
64.137.96.0/22 maxlen: 22
104.143.224.0/22 maxlen: 22
104.143.244.0/23 maxlen: 23
104.143.246.0/24 maxlen: 24
104.167.10.0/24 maxlen: 24
104.222.184.0/22 maxlen: 22
104.233.16.0/22 maxlen: 22
104.238.8.0/23 maxlen: 23
104.239.40.0/22 maxlen: 22
138.128.148.0/24 maxlen: 24
216.173.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:25:83:a2:a1:bd:10:25:49:39:09:9b:7e:b5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52920b52f6cddfe542505f2ece4abbb27b3c1729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:58:d7:3b:e3:dc:2d:aa:6c:dc:99:5a:6e:6c:
cc:62:c9:4a:7a:9b:b0:5c:ff:af:6f:c2:75:02:c8:
21:ee:b9:56:1e:49:bb:24:39:74:ab:fa:09:c7:41:
23:1a:db:2f:dd:27:03:7c:ed:d1:3d:1c:06:e3:45:
e7:d3:9e:7b:36:1c:d5:cf:f6:b4:ae:06:1f:7d:a0:
c3:84:dc:c1:b8:9e:24:05:9d:c1:40:50:8d:8e:99:
b0:dd:fc:b5:bd:6c:60:72:76:78:fa:e3:6b:cf:a7:
08:10:b4:78:3a:cd:5b:59:71:23:9e:35:ea:d3:1b:
40:40:3a:8a:b7:3b:dd:93:e0:b6:ae:5d:1f:88:14:
4c:1a:7c:be:a2:5e:a4:f9:9a:19:5e:87:65:06:4d:
d6:46:95:07:a7:e3:36:d1:11:68:63:b9:fe:ae:c7:
1d:93:64:96:e9:a7:d7:9c:27:47:26:75:c0:2a:38:
45:b5:a2:f1:a1:e4:f3:25:59:b4:00:1e:42:16:74:
7e:9b:37:ae:04:13:5d:88:35:7c:9e:42:c8:92:a7:
5c:fe:ac:3f:01:73:f9:78:c7:d5:a3:40:61:46:29:
57:b2:b0:a6:70:78:c1:50:fe:31:2f:60:b0:fc:ce:
e6:9c:96:4c:c2:f0:45:b9:6f:30:c9:51:a1:60:13:
56:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:92:0B:52:F6:CD:DF:E5:42:50:5F:2E:CE:4A:BB:B2:7B:3C:17:29
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/UpILUvbN3-VCUF8uzkq7sns8Fyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.56.0/23
64.137.92.0/23
64.137.96.0/22
104.143.224.0/22
104.143.244.0-104.143.246.255
104.167.10.0/24
104.222.184.0/22
104.233.16.0/22
104.238.8.0/23
104.239.40.0/22
138.128.148.0/24
216.173.72.0/22
Signature Algorithm: sha256WithRSAEncryption
06:11:1f:ad:70:85:23:f6:05:a2:1b:58:f9:93:7e:08:88:92:
a9:a0:49:1b:99:b6:c3:f7:92:a2:59:e6:5e:5f:80:d2:2e:dd:
b5:26:27:2c:d8:59:3a:40:54:33:d9:68:7a:4c:09:e4:03:a6:
82:b8:c9:6c:47:a4:a1:d1:97:4d:6d:2f:3e:bd:cc:a6:81:44:
bd:d5:bf:b4:8d:22:22:2c:d3:ca:bf:b8:db:4b:d2:81:43:f4:
a0:17:29:d5:85:3f:22:f9:7b:16:50:10:f4:6e:e1:17:d6:6c:
70:60:65:d1:bc:01:d2:e2:17:d6:14:1b:18:2d:92:b0:94:cf:
84:10:8a:dc:61:43:f5:92:a3:e1:60:78:cf:55:d3:b1:2b:bb:
cd:f5:51:2f:16:cb:f6:a9:2e:dd:3d:d9:63:12:76:81:9e:f9:
34:54:e8:30:af:5c:5e:93:e9:1a:87:9b:b8:78:5d:43:6b:37:
76:19:f1:5e:f6:40:20:80:50:25:5d:ae:dc:1b:a8:fa:de:4f:
77:3e:02:3d:11:d4:ae:55:c5:2b:e9:a8:c5:7b:10:d0:71:0f:
e3:7f:59:df:18:46:a3:6d:ab:54:ee:fd:95:ae:36:6a:2c:5a:
ad:5a:f8:f6:bd:23:af:01:d8:95:15:87:dd:53:bf:d4:ee:ca:
a4:e7:89:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:46:23 2025 by rpki-client