Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/WDsIQQr-dKKdcLQATO0M1sHB3d4.roa
File: WDsIQQr-dKKdcLQATO0M1sHB3d4.roa (raw, json)
Hash identifier: tKCW2ayeogM+1VoxY59dEai3nFe5S+NPKg9jTi9qBRw=
Subject key identifier: 58:3B:08:41:0A:FE:74:A2:9D:70:B4:00:4C:ED:0C:D6:C1:C1:DD:DE
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 0195FBDE6180BDF064A6B8783F0630AA382C
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/WDsIQQr-dKKdcLQATO0M1sHB3d4.roa
Signing time: Thu 03 Apr 2025 13:36:50 +0000
ROA not before: Thu 03 Apr 2025 13:36:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41039
IP address blocks: 5.153.176.0/23 maxlen: 23
5.153.178.0/24 maxlen: 24
5.153.179.0/24 maxlen: 24
5.153.181.0/24 maxlen: 24
5.153.184.0/24 maxlen: 24
5.153.185.0/24 maxlen: 24
5.153.186.0/24 maxlen: 24
5.153.187.0/24 maxlen: 24
5.153.188.0/24 maxlen: 24
92.242.96.0/19 maxlen: 24
128.0.93.0/24 maxlen: 24
195.184.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fb:de:61:80:bd:f0:64:a6:b8:78:3f:06:30:aa:38:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Apr 3 13:36:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=583b08410afe74a29d70b4004ced0cd6c1c1ddde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d1:bd:bc:f0:2f:8a:94:32:a6:18:dd:81:0b:
6d:e3:c7:8c:6c:81:6b:5a:dd:cf:00:ed:96:0a:e5:
f1:4b:f2:17:c1:42:cb:79:7b:26:53:be:3a:84:ad:
9a:20:f2:1f:64:4c:ce:c7:b3:e6:6f:da:d5:ef:40:
25:06:46:0a:01:e2:a9:bd:27:18:68:aa:b0:6e:89:
86:95:9b:e8:9c:ed:01:1e:36:3d:bc:fc:67:76:1e:
d3:bd:2f:30:ad:d5:a3:a2:47:43:83:8d:f1:91:6c:
56:f9:9c:a1:b4:f3:af:5e:96:d5:db:e7:de:6b:8f:
5c:c9:b3:01:37:8f:a6:c8:26:92:3f:5e:21:af:06:
6c:db:71:6a:3b:62:27:b7:49:46:ed:92:5c:7c:c4:
ca:24:2a:a9:2f:29:4d:b7:28:e5:fa:09:b5:4b:05:
6c:02:9e:13:f1:b5:d0:19:2c:c3:48:60:c8:a3:03:
f5:04:82:ff:26:5b:ba:97:c0:a2:55:81:79:45:4c:
76:e8:96:72:92:10:b8:d6:35:40:29:48:5a:f7:15:
1f:47:e0:8a:3e:de:a0:59:26:83:3d:e4:6f:fa:c2:
9e:c6:6b:f3:53:ff:6e:af:69:8c:fb:c7:4f:d7:28:
94:34:f5:38:2d:60:0e:ab:c9:c1:21:e9:2c:43:ee:
d3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3B:08:41:0A:FE:74:A2:9D:70:B4:00:4C:ED:0C:D6:C1:C1:DD:DE
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/WDsIQQr-dKKdcLQATO0M1sHB3d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.176.0/22
5.153.181.0/24
5.153.184.0-5.153.188.255
92.242.96.0/19
128.0.93.0/24
195.184.192.0/19
Signature Algorithm: sha256WithRSAEncryption
6a:f2:f6:5e:b6:51:4b:9a:b8:05:d4:a3:7f:a7:af:4d:79:f1:
1f:60:5b:c1:fa:aa:d7:8f:1d:61:a3:54:6b:7f:84:19:ab:f3:
c6:f2:92:02:0e:cb:8d:26:34:6d:f6:ee:f8:c2:f8:76:25:65:
46:d2:1d:97:16:64:f4:bc:ad:11:9d:b7:b0:07:d1:35:53:50:
ef:93:a7:26:d4:05:92:03:7d:e9:6a:d1:2d:eb:8f:af:9e:2f:
82:d4:8c:e8:3e:67:f5:4e:b7:b9:0f:41:8f:9a:3d:ef:94:51:
d3:c0:bc:d8:8f:93:d8:6a:97:ad:a2:09:0b:1b:a5:0e:e5:1a:
32:c0:a8:15:a1:25:5f:93:f3:40:77:89:e1:b4:22:5e:6a:84:
b1:01:f2:47:ed:89:e0:87:fc:b2:e5:f0:57:78:ff:a3:dd:56:
5e:07:e1:58:e7:bc:a1:9c:ce:ca:3f:58:61:d6:40:31:63:d2:
47:15:19:7c:ba:cb:23:ec:25:9d:91:e0:63:b6:8e:e3:46:f9:
6e:16:75:e2:dc:13:cd:46:53:fd:76:dc:24:8f:77:44:8a:f5:
38:c4:05:74:3c:8d:c2:3b:d0:ac:65:25:a4:12:58:55:29:3e:
d6:fd:a9:36:28:78:10:8d:e8:bb:02:2a:59:a7:eb:84:1d:ff:
bf:ee:36:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:27:12 2025 by rpki-client