Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/XwHGUq38dDBNzTc_ge-yBwhhY1o.roa
File: XwHGUq38dDBNzTc_ge-yBwhhY1o.roa (raw, json)
Hash identifier: PgJwO//GwdLKnSg3NtaGlab1yN/ram5lj/PHtYxijoA=
Subject key identifier: 5F:01:C6:52:AD:FC:74:30:4D:CD:37:3F:81:EF:B2:07:08:61:63:5A
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 019427B5F1E00DD33A4A28341D581BB94475
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/XwHGUq38dDBNzTc_ge-yBwhhY1o.roa
Signing time: Thu 02 Jan 2025 15:50:22 +0000
ROA not before: Thu 02 Jan 2025 15:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4766
IP address blocks: 110.172.189.0/24 maxlen: 24
114.69.244.0/24 maxlen: 24
114.69.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:f1:e0:0d:d3:3a:4a:28:34:1d:58:1b:b9:44:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Jan 2 15:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f01c652adfc74304dcd373f81efb2070861635a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:02:4f:47:ce:dc:c4:c0:04:f1:3b:69:06:8f:
00:c5:d2:69:1c:a1:ca:61:0e:42:b4:27:d1:b1:d1:
8d:1a:88:10:e9:00:a2:a9:86:45:4f:27:4c:cd:7b:
dd:9c:2e:93:85:0f:2d:53:0d:bf:db:8e:82:37:82:
1b:50:34:ec:60:c8:4f:61:4c:de:cf:d9:65:a4:f3:
6d:33:b6:68:ca:27:14:e7:89:81:45:95:05:00:5e:
53:7e:ab:df:40:b0:5b:2f:ee:f2:e7:a1:b7:85:55:
50:1d:80:f4:fa:33:de:90:aa:41:a6:f2:ed:30:e7:
de:7d:52:c6:7b:e4:df:6f:0a:0c:1d:b9:3f:2f:c2:
4f:0e:f9:f2:29:50:1a:53:07:3d:3f:7c:6c:be:ad:
a5:fe:49:41:97:9e:28:2f:d6:86:92:c3:73:da:cd:
7f:6c:d6:cc:37:b5:02:23:54:d7:8d:d0:a6:a5:23:
e0:f9:50:a1:50:12:b4:16:02:37:8d:ac:83:60:b2:
74:8a:ab:57:cf:ad:7d:6a:8c:7b:65:97:cb:bf:28:
62:df:14:b6:63:4d:a7:41:2b:d5:6c:7a:d1:6c:12:
ad:73:68:b3:59:38:6f:f4:da:95:37:cf:db:4e:6c:
0c:52:9e:ac:8a:41:f4:90:4f:83:dc:41:77:ce:24:
46:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:01:C6:52:AD:FC:74:30:4D:CD:37:3F:81:EF:B2:07:08:61:63:5A
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/XwHGUq38dDBNzTc_ge-yBwhhY1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.172.189.0/24
114.69.244.0/24
114.69.247.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:d8:40:52:46:30:e7:4c:19:aa:22:27:70:ce:74:e7:21:35:
d5:48:b1:27:0a:7b:b5:3b:06:19:bf:c8:84:c2:5b:94:7c:b1:
bf:d6:48:33:c4:25:f9:0a:7f:3f:a6:ca:41:51:96:d0:85:1c:
fb:9d:86:24:70:4e:2d:26:2c:5e:fa:3f:44:1b:59:f0:04:6c:
b7:33:06:7d:54:c5:5d:be:7b:e8:c6:eb:a3:d6:a8:04:e3:f7:
04:52:f3:4d:c4:91:af:4e:0d:01:3b:bc:f4:fa:f6:a3:43:c5:
91:91:58:9d:75:c3:b7:a6:be:58:2e:f7:07:2d:2a:ff:0c:72:
44:26:6b:a2:fc:20:cb:73:08:ce:97:f6:71:8b:5f:c9:36:05:
73:7c:d7:a2:4b:9f:39:a3:67:84:ba:66:27:c3:f0:eb:45:6f:
f7:6d:69:97:47:63:f3:8f:51:de:7b:32:00:90:2f:85:e1:95:
55:a5:aa:00:d2:25:8d:1b:02:3c:03:a4:e5:06:d9:46:54:54:
75:c3:6c:c5:58:39:ec:c6:94:8e:61:7d:11:66:1c:35:34:31:
1e:61:07:7d:32:a8:58:76:51:e0:85:af:46:27:9d:32:29:2f:
7f:5c:02:ad:b2:38:e2:b7:d4:88:1b:ad:ed:35:97:bc:38:fe:
4c:00:3c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:47:45 2025 by rpki-client