Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/c_oc0m8Q0D83TCO_fpBfaVJwNRs.roa
File: c_oc0m8Q0D83TCO_fpBfaVJwNRs.roa (raw, json)
Hash identifier: mqb+D/ntHZJvZ/z36Bl1ItrdLaA25yJOk+uY5NUbN8E=
Subject key identifier: 73:FA:1C:D2:6F:10:D0:3F:37:4C:23:BF:7E:90:5F:69:52:70:35:1B
Certificate issuer: /CN=5bf81435ed13789895f375dc34d04ce91aca4744
Certificate serial: 019425FD7C454BD97EB33C5992BE4DBF765B
Authority key identifier: 5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/c_oc0m8Q0D83TCO_fpBfaVJwNRs.roa
Signing time: Thu 02 Jan 2025 07:49:16 +0000
ROA not before: Thu 02 Jan 2025 07:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201271
IP address blocks: 158.233.224.0/24 maxlen: 24
158.233.227.0/24 maxlen: 24
158.233.228.0/23 maxlen: 23
158.233.228.0/24 maxlen: 24
158.233.229.0/24 maxlen: 24
158.233.242.0/23 maxlen: 23
158.233.242.0/24 maxlen: 24
158.233.243.0/24 maxlen: 24
158.233.244.0/23 maxlen: 23
158.233.244.0/24 maxlen: 24
158.233.245.0/24 maxlen: 24
158.233.246.0/23 maxlen: 23
158.233.246.0/24 maxlen: 24
158.233.247.0/24 maxlen: 24
158.233.248.0/23 maxlen: 23
158.233.248.0/24 maxlen: 24
158.233.249.0/24 maxlen: 24
158.233.250.0/23 maxlen: 23
158.233.250.0/24 maxlen: 24
158.233.251.0/24 maxlen: 24
2001:67c:2af0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:7c:45:4b:d9:7e:b3:3c:59:92:be:4d:bf:76:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf81435ed13789895f375dc34d04ce91aca4744
Validity
Not Before: Jan 2 07:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73fa1cd26f10d03f374c23bf7e905f695270351b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1e:fb:97:22:ad:8a:3f:38:ea:20:6b:82:90:
8e:10:5d:d6:11:f9:21:12:09:49:71:bb:a8:8a:ac:
35:41:17:ed:88:a2:aa:3d:3a:a0:22:76:02:6d:dd:
cc:42:2c:1d:e6:0e:95:3b:de:80:6e:92:ec:8c:b9:
2d:99:7e:af:29:bf:57:41:b8:ae:7b:bc:ad:51:b6:
ea:7f:ef:bb:02:d1:66:c3:7a:49:fe:75:80:cf:c6:
76:15:6d:77:c9:be:77:eb:8d:bd:be:11:6d:c8:8f:
1b:78:23:1e:e7:2a:57:ea:63:ee:9d:bf:d6:4f:8d:
e6:b6:cb:74:65:39:19:bb:f8:d8:6c:3a:30:17:eb:
7a:1a:89:e2:5d:86:4a:19:59:72:e9:06:81:cc:a8:
96:d6:0b:99:4e:fc:38:ea:17:d4:6b:0a:c9:6f:84:
81:4a:fd:49:13:06:62:92:dd:81:6d:4f:a8:47:c7:
31:b4:de:b7:97:04:e8:96:65:2e:83:ba:de:a8:30:
10:a4:69:8e:46:43:09:61:40:93:21:08:2d:74:64:
a0:52:11:97:83:be:fd:d3:0a:41:cb:38:7c:53:a4:
3e:8a:8a:84:f7:b4:aa:ed:78:2f:4f:aa:2c:01:40:
2d:38:e9:f0:92:0e:35:54:10:8d:36:4f:2b:b1:c6:
bc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FA:1C:D2:6F:10:D0:3F:37:4C:23:BF:7E:90:5F:69:52:70:35:1B
X509v3 Authority Key Identifier:
keyid:5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/c_oc0m8Q0D83TCO_fpBfaVJwNRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.233.224.0/24
158.233.227.0-158.233.229.255
158.233.242.0-158.233.251.255
IPv6:
2001:67c:2af0::/48
Signature Algorithm: sha256WithRSAEncryption
28:91:35:e6:55:1f:fa:a5:7c:70:2d:96:21:e9:d3:ae:f3:73:
d4:b2:f3:97:7a:6d:5b:36:78:5e:9f:0d:a9:50:8d:09:2a:f7:
3c:b8:6b:f9:42:68:a9:64:82:19:ef:70:6b:69:14:13:58:d2:
f4:a5:96:0c:83:dd:1c:81:c0:38:3c:d1:2b:ff:bd:0a:8c:2f:
c7:6d:b0:04:66:d2:e4:d3:35:1b:aa:bd:d9:5d:9e:cc:bb:ab:
e9:f1:02:c7:77:f1:5a:68:11:89:72:4f:ab:a0:08:29:5d:4f:
e5:c2:c8:55:15:94:bc:27:ee:5e:54:3c:06:39:cb:95:ce:2a:
37:8d:9f:df:fd:61:d3:7f:42:b2:03:c9:c4:b1:45:0d:f9:cc:
0f:a3:ab:b8:41:82:bb:e7:59:f7:8e:d4:87:b0:0e:2a:cc:76:
58:84:4c:7d:00:ca:fc:31:5a:25:66:09:9f:91:ec:c4:b9:15:
42:b9:1f:b0:ad:11:f7:33:a8:f5:00:2a:74:4a:b5:ee:f0:a0:
fe:f0:b9:f5:26:6d:90:0a:c2:18:75:af:bc:59:4e:00:7e:df:
10:1a:42:43:87:76:1e:88:84:22:38:3a:06:59:57:71:d2:7c:
64:97:c0:9c:2b:47:b2:c7:43:f9:59:4d:82:83:ed:84:af:57:
2d:2e:ab:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:13 2025 by rpki-client