Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/ThOatuG7DEKApY2ssZ-kj1K_JSM.roa
File: ThOatuG7DEKApY2ssZ-kj1K_JSM.roa (raw, json)
Hash identifier: Gai3qW8Lb72lyPydHw5tn1ETPx20cKnkfT9hC4FZkCM=
Subject key identifier: 4E:13:9A:B6:E1:BB:0C:42:80:A5:8D:AC:B1:9F:A4:8F:52:BF:25:23
Certificate issuer: /CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Certificate serial: 019425FD8C4C7B65D9DFA182AF1BC3B8DA2B
Authority key identifier: 7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/ThOatuG7DEKApY2ssZ-kj1K_JSM.roa
Signing time: Thu 02 Jan 2025 07:49:20 +0000
ROA not before: Thu 02 Jan 2025 07:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 5.198.0.0/17 maxlen: 24
77.86.0.0/17 maxlen: 24
83.100.128.0/17 maxlen: 24
87.102.0.0/17 maxlen: 24
94.72.192.0/18 maxlen: 24
159.253.64.0/20 maxlen: 24
178.78.64.0/18 maxlen: 24
185.188.232.0/22 maxlen: 24
194.207.0.0/19 maxlen: 24
194.207.64.0/19 maxlen: 24
194.207.96.0/19 maxlen: 24
194.207.128.0/19 maxlen: 24
194.207.160.0/19 maxlen: 24
194.207.192.0/19 maxlen: 24
194.207.224.0/19 maxlen: 24
212.50.160.0/19 maxlen: 24
213.249.128.0/18 maxlen: 24
213.249.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:8c:4c:7b:65:d9:df:a1:82:af:1b:c3:b8:da:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Validity
Not Before: Jan 2 07:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e139ab6e1bb0c4280a58dacb19fa48f52bf2523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:85:87:d9:b2:55:bf:df:2a:4c:50:c7:98:15:
9d:34:ac:e4:5e:46:ca:5a:b7:e2:e7:82:1c:9e:90:
5a:c1:73:f2:85:89:ad:ac:7d:00:63:51:88:9e:18:
b4:9f:62:79:c3:a4:e6:86:03:1d:2b:fe:1e:9f:b6:
9b:e0:0e:4a:06:14:4d:2c:80:36:00:1b:83:e5:8b:
5f:df:cf:7d:07:a1:c0:c5:6b:8f:d5:fd:9b:e9:3e:
ff:9a:63:a7:79:43:a8:07:37:92:0c:2c:ce:57:06:
07:5a:3a:a9:7a:af:61:3a:9c:43:24:f8:9d:a0:7b:
76:5b:be:87:12:2c:16:a1:c1:39:27:26:df:bf:03:
a7:5d:91:eb:22:54:58:6a:a7:06:10:b1:35:47:cf:
49:04:fd:9e:56:ef:d2:86:fd:22:a8:b9:de:a8:5f:
31:d8:33:e2:a1:3a:68:07:68:ad:95:10:6f:b1:98:
8d:2c:e0:14:69:8f:14:f6:8c:2b:19:d5:07:0a:f7:
b0:2b:8a:7d:b8:61:5c:14:f7:68:a9:89:b6:f5:c5:
85:1a:57:2c:5c:21:ef:20:e9:b7:32:c2:dd:c9:b0:
fe:f0:2e:a6:a5:70:29:33:68:a1:64:48:74:ff:22:
89:cd:f0:6b:11:44:14:c4:19:88:f4:11:7d:05:82:
53:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:13:9A:B6:E1:BB:0C:42:80:A5:8D:AC:B1:9F:A4:8F:52:BF:25:23
X509v3 Authority Key Identifier:
keyid:7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/ThOatuG7DEKApY2ssZ-kj1K_JSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.198.0.0/17
77.86.0.0/17
83.100.128.0/17
87.102.0.0/17
94.72.192.0/18
159.253.64.0/20
178.78.64.0/18
185.188.232.0/22
194.207.0.0/19
194.207.64.0-194.207.255.255
212.50.160.0/19
213.249.128.0/17
Signature Algorithm: sha256WithRSAEncryption
52:43:b4:cb:8e:2d:c2:af:2c:a4:5b:06:75:70:3d:3b:ba:f7:
7e:e1:ab:c9:60:74:48:25:0b:c8:3c:04:42:8f:fd:2c:cb:5f:
e8:79:73:f6:13:c5:18:da:2d:bc:35:fe:37:6a:10:8c:9c:09:
11:b5:3e:12:b1:13:6e:e0:13:41:59:1f:a9:1f:d5:7e:e4:7a:
d3:b0:02:e7:8f:81:58:3d:06:64:04:47:20:d8:88:88:62:20:
cf:20:f1:91:0b:04:38:95:c1:03:07:51:4b:e6:28:9c:64:07:
04:ea:b9:bc:cd:92:a7:f6:d6:91:cd:80:e2:ba:fa:1d:71:06:
a0:62:fe:6f:68:20:06:d0:ac:22:ce:ff:2d:08:2b:c8:b6:97:
e5:1f:0a:07:33:da:78:64:7b:99:7b:c8:3a:b7:6b:42:89:e9:
32:91:76:36:0c:8a:77:51:94:14:d5:8f:93:4f:d3:53:f3:b7:
ec:cc:ba:d2:7e:83:e2:0f:ca:8c:6a:9b:0a:55:51:97:36:b7:
21:30:06:f8:f8:06:27:8f:43:75:da:2e:74:36:9a:86:88:ad:
70:be:3e:1b:0e:41:69:6c:5d:37:3f:38:07:32:c1:37:a6:2e:
78:45:f4:4d:02:22:c5:89:37:9a:2a:35:6b:96:59:e9:75:97:
13:bf:f4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:12:57 2025 by rpki-client