Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/wM1Yw5nFuvuJTOAzQjCj5rN5Pm0.roa
File: wM1Yw5nFuvuJTOAzQjCj5rN5Pm0.roa (raw, json)
Hash identifier: ent4AXHk/p6bQe6GuoAZTq2KLI9u7gMCUsO1EmVjq8w=
Subject key identifier: C0:CD:58:C3:99:C5:BA:FB:89:4C:E0:33:42:30:A3:E6:B3:79:3E:6D
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 01941F8C96E2D467A772F61E593E8F768F7D
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/wM1Yw5nFuvuJTOAzQjCj5rN5Pm0.roa
Signing time: Wed 01 Jan 2025 01:48:14 +0000
ROA not before: Wed 01 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60609
IP address blocks: 5.181.98.0/24 maxlen: 24
5.183.148.0/23 maxlen: 23
5.183.149.0/24 maxlen: 24
37.16.77.0/24 maxlen: 24
45.10.130.0/24 maxlen: 24
46.254.104.0/24 maxlen: 24
134.255.250.0/24 maxlen: 24
185.204.186.0/24 maxlen: 24
194.63.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:96:e2:d4:67:a7:72:f6:1e:59:3e:8f:76:8f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Jan 1 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0cd58c399c5bafb894ce0334230a3e6b3793e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0d:7c:97:fa:63:48:85:b0:51:c0:2c:3e:65:
27:b8:cb:d9:39:0a:0e:02:8f:62:b7:70:da:95:3d:
9e:f7:1f:c5:f7:f3:86:5a:fc:ba:73:42:c6:33:b5:
60:79:66:98:2d:da:bc:c6:ba:07:86:10:98:58:ff:
10:22:4b:c8:0d:71:d6:68:3a:56:98:8f:cb:7b:67:
03:53:ca:3c:e9:eb:d9:7c:73:46:25:7b:11:2f:79:
a8:07:a6:bc:95:8d:e2:56:c3:b0:c9:26:98:ed:8a:
4f:f2:43:e4:74:6c:c3:9a:18:8e:53:9d:76:10:73:
d5:03:cc:1a:1a:f1:7b:da:79:bd:44:9d:59:de:ec:
8b:c7:c1:46:1f:15:9f:70:0d:8a:81:66:3f:b8:41:
bc:1f:cd:df:44:f4:42:8d:e5:56:f2:a7:d0:0b:fa:
28:53:7c:3b:d2:5b:ff:f1:e1:67:e3:7e:50:54:83:
46:f2:69:f3:b5:a6:32:ad:f2:64:30:28:b7:df:94:
8a:ec:2f:62:76:18:96:0d:a8:60:24:aa:a2:b7:00:
e8:eb:cb:5d:3c:c1:43:05:45:a4:c9:54:ad:39:a7:
5a:82:c2:6f:8a:e6:08:a7:04:f1:8d:7c:6a:4f:7e:
a8:92:f1:fc:72:8f:64:73:2b:4a:93:38:84:3d:61:
0e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CD:58:C3:99:C5:BA:FB:89:4C:E0:33:42:30:A3:E6:B3:79:3E:6D
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/wM1Yw5nFuvuJTOAzQjCj5rN5Pm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.98.0/24
5.183.148.0/23
37.16.77.0/24
45.10.130.0/24
46.254.104.0/24
134.255.250.0/24
185.204.186.0/24
194.63.147.0/24
Signature Algorithm: sha256WithRSAEncryption
91:10:3a:7d:5b:e5:61:e7:ed:28:e6:4e:a8:e5:27:eb:8d:de:
9b:41:27:e7:48:9a:cf:3a:1c:05:ee:c4:50:49:15:46:ed:b4:
81:9a:db:f7:bf:a9:87:7f:6f:4e:4e:53:50:ef:d0:e5:ba:a0:
07:d0:16:e9:60:b7:ec:b7:1e:96:76:eb:7f:86:81:2f:c4:17:
98:ed:7a:82:3c:da:c9:f6:a7:26:71:27:4d:f6:2e:01:ee:b6:
bd:b9:38:af:a1:c9:d7:e8:90:40:ea:70:da:4b:ac:02:ab:19:
db:c2:d0:97:64:35:2e:04:37:71:cc:69:7f:38:b6:00:5e:54:
64:bf:a4:e7:2b:aa:85:79:17:be:3b:f7:1d:54:2e:9d:86:41:
7c:e5:cb:48:9b:ab:da:36:ed:34:21:3c:51:ef:84:01:5f:e4:
d5:aa:e5:26:44:46:4d:4a:d7:43:9e:a2:4c:cd:b9:5c:b8:82:
5c:e4:47:f5:64:09:a1:77:88:5b:7a:59:df:84:d5:ff:5f:60:
64:16:cc:01:37:25:b8:52:d2:f7:8c:0a:c8:d1:b8:81:9b:34:
4f:f3:36:00:62:0a:ec:37:1d:89:e3:4d:9b:af:9e:0f:10:f9:
36:5d:b4:b3:48:68:08:2b:97:3a:a1:e1:b2:5b:a5:8a:b8:74:
45:9c:0a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:51:31 2025 by rpki-client