Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/Ixb9Rp3BUGuCjodjx9_sm0c2sXM.roa
File: Ixb9Rp3BUGuCjodjx9_sm0c2sXM.roa (raw, json)
Hash identifier: qXvey4tAX4WrIl01LSbpPMRORAk5gKbyzsotdzlnvoo=
Subject key identifier: 23:16:FD:46:9D:C1:50:6B:82:8E:87:63:C7:DF:EC:9B:47:36:B1:73
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 01942521B103A40862B3B0360AD9DA2B6095
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/Ixb9Rp3BUGuCjodjx9_sm0c2sXM.roa
Signing time: Thu 02 Jan 2025 03:49:12 +0000
ROA not before: Thu 02 Jan 2025 03:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214721
IP address blocks: 81.163.128.0/23 maxlen: 23
81.163.130.0/23 maxlen: 23
81.163.132.0/23 maxlen: 23
81.163.134.0/23 maxlen: 23
81.163.136.0/23 maxlen: 23
81.163.138.0/23 maxlen: 23
81.163.140.0/23 maxlen: 23
81.163.142.0/23 maxlen: 23
81.163.144.0/23 maxlen: 23
81.163.146.0/23 maxlen: 23
81.163.148.0/23 maxlen: 23
81.163.150.0/23 maxlen: 23
81.163.152.0/23 maxlen: 23
81.163.154.0/23 maxlen: 23
81.163.156.0/23 maxlen: 23
81.163.158.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b1:03:a4:08:62:b3:b0:36:0a:d9:da:2b:60:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Jan 2 03:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2316fd469dc1506b828e8763c7dfec9b4736b173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3c:79:81:e8:40:ff:d4:82:df:dd:d6:40:10:
4e:87:80:1b:74:4c:aa:75:2a:f9:cd:e5:29:56:f5:
b2:d1:e9:30:3c:e5:62:f9:5f:dc:b1:43:12:5e:f7:
ef:a0:b8:50:d6:e5:39:41:f2:be:79:3b:53:e2:b3:
37:05:f3:22:7d:0c:12:6e:37:f1:3c:7a:fa:84:f7:
2e:e4:2e:36:12:59:c8:9f:df:d3:79:fe:53:3e:d0:
e9:75:b5:fa:12:0a:e5:78:8a:d9:87:a0:25:c6:e2:
03:a7:b3:f2:74:57:05:cb:8f:ae:a7:ad:95:d9:a3:
31:a1:c3:5f:e2:9c:8b:e9:a7:33:ed:83:c4:00:a0:
aa:44:4b:88:30:86:51:44:29:52:82:27:62:58:ce:
3a:7e:2f:56:11:48:f3:82:cd:77:ee:05:46:a7:83:
25:28:0b:d2:0a:3a:e3:e7:71:94:f4:69:fc:59:64:
97:d8:e0:84:1b:c4:cf:fc:c5:94:38:4a:68:34:e7:
48:c5:b3:d8:67:29:e6:d1:f7:04:53:eb:2b:a8:e9:
2e:5b:73:75:8e:2c:94:22:fe:c8:4d:7f:34:76:06:
80:a3:4e:80:7c:6e:fa:a8:fe:3a:ee:a9:cf:82:93:
1e:b0:f2:38:ca:81:e1:04:f8:e4:e3:54:6e:88:4b:
42:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:16:FD:46:9D:C1:50:6B:82:8E:87:63:C7:DF:EC:9B:47:36:B1:73
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/Ixb9Rp3BUGuCjodjx9_sm0c2sXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.163.128.0/19
Signature Algorithm: sha256WithRSAEncryption
57:96:8c:eb:6f:01:8e:c3:05:ae:4d:f9:33:bb:3a:c7:b5:9f:
9c:1d:a3:e9:b2:a8:c4:f6:29:80:1c:69:a5:d0:e3:e8:e2:40:
3e:f6:ce:f4:0a:6d:98:02:0b:fd:c3:84:a7:58:f8:b0:1b:cb:
47:36:6c:2e:d6:72:20:e7:33:01:a2:92:b8:ba:f5:89:45:49:
12:88:ea:47:70:0c:a5:82:d1:ce:73:d2:ef:fb:9b:c4:20:6f:
22:f1:49:e4:fe:da:83:9e:c7:41:bf:c8:63:2c:d2:03:7e:e5:
70:ed:d3:3c:2a:41:c6:9e:a0:09:27:44:a0:12:b4:cd:4c:76:
d7:37:c7:b7:74:36:14:c6:b1:ae:0a:ad:d0:cc:d2:fd:ad:b1:
5d:46:05:45:16:be:2d:82:36:73:fa:60:54:83:7c:66:62:74:
1c:24:0c:d0:10:13:0c:48:cb:e4:77:36:91:ab:26:f3:e1:fc:
e1:f8:7c:4f:4a:e5:35:31:91:16:2d:30:3e:74:cb:8b:12:8d:
ca:81:eb:3d:a6:b0:49:19:0d:fe:19:8c:43:c6:e7:11:c8:9d:
92:29:8f:51:eb:61:b6:67:9a:c7:07:7a:36:33:07:c5:ed:cc:
c2:db:ee:2c:4c:ce:5e:17:f3:41:e4:e7:ce:37:cc:82:27:5d:
e7:b0:2c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:21 2025 by rpki-client