Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IOSFPx8A8l-pe0og_vxIgYl_NBY.roa
File: IOSFPx8A8l-pe0og_vxIgYl_NBY.roa (raw, json)
Hash identifier: KLjHQhBVtLRCltNJ+XqJhMVg3V2m+fHC9ZN7NVjvtDY=
Subject key identifier: 20:E4:85:3F:1F:00:F2:5F:A9:7B:4A:20:FE:FC:48:81:89:7F:34:16
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 0194244545ACA7508B5FB2B23AD2187E9229
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IOSFPx8A8l-pe0og_vxIgYl_NBY.roa
Signing time: Wed 01 Jan 2025 23:48:27 +0000
ROA not before: Wed 01 Jan 2025 23:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10557
IP address blocks: 31.13.214.0/24 maxlen: 24
37.60.142.0/24 maxlen: 24
37.61.225.0/24 maxlen: 24
37.61.230.0/24 maxlen: 24
87.120.58.0/24 maxlen: 24
87.120.62.0/24 maxlen: 24
87.120.247.0/24 maxlen: 24
87.121.102.0/24 maxlen: 24
93.123.25.0/24 maxlen: 24
93.123.111.0/24 maxlen: 24
94.156.40.0/23 maxlen: 23
94.156.43.0/24 maxlen: 24
94.156.62.0/23 maxlen: 23
94.156.132.0/23 maxlen: 23
94.156.145.0/24 maxlen: 24
94.156.224.0/23 maxlen: 23
158.120.252.0/23 maxlen: 23
188.212.110.0/24 maxlen: 24
192.175.2.0/24 maxlen: 24
198.160.152.0/24 maxlen: 24
203.17.237.0/24 maxlen: 24
203.25.139.0/24 maxlen: 24
203.78.161.0/24 maxlen: 24
203.78.163.0/24 maxlen: 24
203.78.164.0/24 maxlen: 24
203.78.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:45:ac:a7:50:8b:5f:b2:b2:3a:d2:18:7e:92:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Jan 1 23:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20e4853f1f00f25fa97b4a20fefc4881897f3416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cb:08:de:18:4e:20:91:30:75:db:f5:7e:5b:
a7:c3:14:39:dd:54:9a:4e:b5:2f:b5:c0:52:57:f4:
cb:e5:86:7e:9c:11:fe:25:7c:2e:ca:e0:e9:ef:ed:
b4:f7:39:2f:6d:f0:bb:af:23:54:a2:6a:f1:af:9c:
03:7a:a9:6f:07:4c:6c:5f:72:a5:02:07:54:eb:5a:
92:79:e5:42:d0:54:8f:4e:db:63:53:b3:69:7c:00:
11:cd:0e:26:c0:6b:86:ca:dd:38:aa:3f:b6:31:5b:
21:3d:df:60:3b:e5:0d:59:21:46:e0:1a:6d:ae:7f:
5f:8c:3f:48:a7:e5:01:3e:4b:f7:1e:33:c3:52:fc:
79:a3:ac:d4:51:e7:7a:96:99:88:e4:11:b1:e0:fc:
38:9e:46:a3:fc:ed:39:1d:4c:e1:7d:07:1e:28:3e:
04:75:54:76:b7:53:8a:1d:01:1d:be:6e:8b:c3:f8:
de:3f:f4:33:42:80:db:a3:17:35:33:8d:42:30:05:
15:d2:da:70:43:dd:cd:c4:b2:e7:d8:58:fc:3c:fb:
13:de:0a:8e:b2:8a:4d:cb:ca:91:f4:ea:7d:24:92:
01:ec:6c:cb:3e:8c:6c:4f:9c:98:06:de:b7:bb:6d:
f8:59:a2:94:e4:25:bc:b0:81:2b:9b:fb:e8:20:25:
dd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E4:85:3F:1F:00:F2:5F:A9:7B:4A:20:FE:FC:48:81:89:7F:34:16
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IOSFPx8A8l-pe0og_vxIgYl_NBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.214.0/24
37.60.142.0/24
37.61.225.0/24
37.61.230.0/24
87.120.58.0/24
87.120.62.0/24
87.120.247.0/24
87.121.102.0/24
93.123.25.0/24
93.123.111.0/24
94.156.40.0/23
94.156.43.0/24
94.156.62.0/23
94.156.132.0/23
94.156.145.0/24
94.156.224.0/23
158.120.252.0/23
188.212.110.0/24
192.175.2.0/24
198.160.152.0/24
203.17.237.0/24
203.25.139.0/24
203.78.161.0/24
203.78.163.0-203.78.164.255
203.78.166.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:3a:2c:44:da:0b:cd:76:87:26:2e:77:d3:6a:1a:69:6e:02:
38:94:07:c8:b3:6e:80:62:69:6c:4e:53:16:59:f1:fa:3c:ba:
5e:d6:e9:1b:0d:b1:e4:4a:d3:d9:cc:03:f5:a8:a5:7e:75:1a:
16:66:40:94:cb:3d:29:42:8a:63:4a:31:c2:e9:a3:05:32:f4:
24:02:bb:e0:2b:f2:93:e4:4c:9f:39:34:b5:10:54:05:7c:5c:
5b:bb:0e:47:ff:01:30:8f:b0:4f:b4:65:7a:65:6a:4a:ce:c3:
82:6c:72:ca:4a:f6:ac:34:3e:4b:cc:5c:8b:46:14:d5:f3:9e:
a1:f9:26:a6:df:5a:e4:92:ea:65:75:7a:c6:31:fd:28:fd:75:
00:42:70:7d:29:04:5d:8a:fb:45:03:a0:f8:c7:b3:f0:6d:c8:
ad:76:c1:b1:53:55:eb:46:d8:b5:75:76:dc:00:e3:df:f3:bd:
f2:e5:42:6c:4c:c3:91:bf:50:05:e0:ee:f2:4a:15:e4:89:fe:
3f:9a:4b:61:0e:41:fb:c8:e3:8d:80:0d:73:71:4a:af:87:90:
0a:14:10:de:ac:ff:19:c9:54:e8:5c:b5:65:77:26:cb:91:b3:
42:a5:a4:9d:1c:63:ec:2b:24:7d:53:9d:17:a0:06:26:a5:f9:
50:11:7e:79
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:22 2025 by rpki-client