Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/WVAzu2ez1oyhvQ7bjjdPNiT3lEs.roa
File: WVAzu2ez1oyhvQ7bjjdPNiT3lEs.roa (raw, json)
Hash identifier: pRq7bCR6jmXiV3fvtc0cmptDBwX8T7Tli83LwSJ08aI=
Subject key identifier: 59:50:33:BB:67:B3:D6:8C:A1:BD:0E:DB:8E:37:4F:36:24:F7:94:4B
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0194D5F4F106B3C0B60BCD633DFFDBF6155F
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/WVAzu2ez1oyhvQ7bjjdPNiT3lEs.roa
Signing time: Wed 05 Feb 2025 11:53:07 +0000
ROA not before: Wed 05 Feb 2025 11:53:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 104.238.21.0/24 maxlen: 24
104.238.30.0/24 maxlen: 24
104.239.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:f4:f1:06:b3:c0:b6:0b:cd:63:3d:ff:db:f6:15:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Feb 5 11:53:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=595033bb67b3d68ca1bd0edb8e374f3624f7944b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9b:bd:9b:79:50:05:d9:a3:b0:ad:a2:e8:a1:
62:ac:8e:83:22:9b:f8:03:8a:c2:93:e5:51:83:c0:
85:17:f7:c1:36:15:4f:29:34:ab:b1:08:ad:72:c4:
d1:d6:5a:bd:cc:81:05:1b:88:f1:ca:96:da:4c:fe:
ba:9b:28:13:7b:ab:c6:55:30:35:f2:4f:44:63:b3:
1e:5b:26:cb:ed:60:2f:15:b1:7c:83:b6:aa:2b:33:
b1:00:2c:58:41:71:e1:e9:57:19:34:e1:2f:de:32:
c3:d3:e3:5d:bb:8e:9a:24:7b:df:b2:7c:eb:94:55:
07:1f:c6:30:d2:07:66:76:e7:9e:92:a3:f9:14:e4:
1c:a1:e2:4a:00:92:20:73:6c:55:4c:9f:fa:ff:a0:
cf:4e:22:2e:93:70:06:02:2a:00:eb:2b:7b:9b:4e:
62:41:05:8f:06:94:91:0e:05:5b:e2:ea:b4:b7:c7:
a3:2b:76:b1:d9:98:5b:02:75:65:cb:e9:00:65:9c:
03:f3:1d:f5:30:62:38:8a:e9:5b:af:4f:70:41:15:
63:a0:00:a6:33:c0:bb:d6:74:bb:79:1c:4d:5a:dd:
8e:f9:61:48:e2:44:c5:af:ef:83:eb:28:9e:db:e4:
bc:c1:f4:f6:06:cf:c7:5c:25:9a:ec:46:a8:bd:5f:
72:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:50:33:BB:67:B3:D6:8C:A1:BD:0E:DB:8E:37:4F:36:24:F7:94:4B
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/WVAzu2ez1oyhvQ7bjjdPNiT3lEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.238.21.0/24
104.238.30.0/24
104.239.15.0/24
Signature Algorithm: sha256WithRSAEncryption
12:82:79:bf:4e:29:c6:ce:53:46:d7:ba:0d:be:8b:8b:dc:86:
c9:26:78:ec:7f:c2:8c:57:b6:53:13:3d:11:b1:b8:b8:69:12:
8c:3c:7b:96:08:13:9f:ba:2b:37:86:58:14:09:1a:55:ba:e4:
c3:c6:55:01:82:3a:67:3c:8f:21:cf:d5:f4:1c:48:f6:76:3a:
9b:67:c7:a5:68:5d:a7:01:f8:15:f3:a6:24:90:19:3b:71:7d:
81:21:01:0a:e7:94:ba:e2:b3:21:2e:b6:78:a1:37:fe:6f:8e:
1c:26:f8:f4:09:3a:17:00:57:79:9e:04:c6:28:23:ee:3d:08:
a4:27:f4:e0:9a:e8:ef:14:2b:c1:ef:a7:87:67:c1:24:d5:fe:
8a:1d:38:ed:0a:fc:3a:f5:0e:4e:25:3b:0d:dc:49:8f:ad:0b:
ec:56:48:bb:01:0b:23:5d:2b:f5:c4:ee:c6:83:5e:14:49:5a:
b8:86:4e:0a:31:39:b2:8a:5a:6b:06:2b:ab:2e:c8:aa:5e:55:
eb:7b:dc:79:ac:cb:34:2f:9b:14:5b:73:e2:9c:b9:d5:a0:4b:
e3:7f:f8:1d:6c:19:e6:4e:96:80:f3:9b:6f:66:16:a2:8b:ee:
ea:e7:e0:0b:da:b5:66:36:fc:a0:29:2f:00:bd:ce:c4:25:46:
19:45:63:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:33:49 2025 by rpki-client