Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/s0kyiXR6V1bkt2ciUZ2EpXqYq0U.roa
File: s0kyiXR6V1bkt2ciUZ2EpXqYq0U.roa (raw, json)
Hash identifier: BMvoEX7a6X6vFfIWsQqEPuUPXNmqfef7qS8aBYQEmho=
Subject key identifier: B3:49:32:89:74:7A:57:56:E4:B7:67:22:51:9D:84:A5:7A:98:AB:45
Certificate issuer: /CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Certificate serial: 019425FC168CBAAFF7A57D191B5B5D6F220B
Authority key identifier: D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/s0kyiXR6V1bkt2ciUZ2EpXqYq0U.roa
Signing time: Thu 02 Jan 2025 07:47:45 +0000
ROA not before: Thu 02 Jan 2025 07:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196883
IP address blocks: 109.196.112.0/20 maxlen: 24
109.196.112.0/21 maxlen: 24
109.196.112.0/24 maxlen: 24
109.196.113.0/24 maxlen: 24
109.196.114.0/24 maxlen: 24
109.196.115.0/24 maxlen: 24
109.196.116.0/24 maxlen: 24
109.196.117.0/24 maxlen: 24
109.196.118.0/24 maxlen: 24
109.196.119.0/24 maxlen: 24
109.196.120.0/21 maxlen: 24
109.196.120.0/23 maxlen: 23
109.196.120.0/24 maxlen: 24
109.196.121.0/24 maxlen: 24
109.196.122.0/23 maxlen: 23
109.196.122.0/24 maxlen: 24
109.196.123.0/24 maxlen: 24
109.196.124.0/22 maxlen: 23
109.196.124.0/24 maxlen: 24
109.196.125.0/24 maxlen: 24
109.196.126.0/24 maxlen: 24
109.196.127.0/24 maxlen: 24
2001:67c:11c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:16:8c:ba:af:f7:a5:7d:19:1b:5b:5d:6f:22:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Validity
Not Before: Jan 2 07:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3493289747a5756e4b76722519d84a57a98ab45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7f:96:99:5e:15:ea:7f:2c:c8:a7:e9:81:a7:
b0:72:f0:5f:49:ff:aa:f7:90:fe:8f:15:2a:49:bc:
49:7a:42:a0:98:8a:7d:77:f0:24:96:d3:47:02:85:
87:80:01:c3:ea:f4:9c:a5:7f:48:cc:38:98:ac:f8:
fc:c6:13:8b:bb:7c:4e:e7:65:d8:93:c0:1a:01:04:
90:81:08:43:0d:54:91:c4:5d:45:05:19:ab:3c:b3:
1c:5a:f9:4a:7a:4f:ba:15:dd:2a:12:d8:de:69:25:
e7:45:e9:51:ab:eb:b0:b6:d9:ee:9e:f7:85:2c:7a:
c2:01:1a:52:ed:10:11:8a:90:2f:90:2a:a2:fc:09:
0a:c4:64:7f:65:9c:78:f4:c2:4b:e3:6a:ea:b1:f1:
df:0b:8f:88:41:79:a6:c3:a9:86:dc:c3:2a:1d:90:
6e:da:9b:ec:00:6f:33:be:3a:f1:dd:92:52:b5:fd:
d0:e6:e5:97:4d:3d:d9:57:22:bf:c6:3d:bc:e9:59:
44:dd:95:04:94:db:e5:1d:69:3a:02:47:8d:d4:25:
20:1e:96:14:10:49:20:69:66:e1:a2:e6:b7:be:73:
1a:40:e5:5a:85:20:b3:1f:2d:1f:f6:ff:20:d8:26:
2c:eb:d0:61:55:f1:30:16:fb:56:d3:f6:16:95:5f:
bb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:49:32:89:74:7A:57:56:E4:B7:67:22:51:9D:84:A5:7A:98:AB:45
X509v3 Authority Key Identifier:
keyid:D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/s0kyiXR6V1bkt2ciUZ2EpXqYq0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.196.112.0/20
IPv6:
2001:67c:11c::/48
Signature Algorithm: sha256WithRSAEncryption
5e:60:98:fa:7e:f9:7a:fa:ff:2f:28:7f:4d:8b:93:a0:a4:2b:
42:16:fc:f4:c8:73:2d:2a:f9:f3:9d:26:5c:09:64:69:5e:8e:
17:36:e7:80:25:35:1a:62:7b:c0:2c:34:0f:e9:30:8f:bd:5a:
f4:99:63:bf:a3:34:5d:74:65:c0:42:62:b4:88:68:7b:06:17:
5a:bf:80:15:d5:9b:61:2f:13:d0:c7:7b:ca:1c:dc:60:3a:24:
ac:56:85:75:6e:7f:8f:ae:25:62:3f:2c:7e:31:12:ab:fa:57:
69:a1:ac:e3:a3:93:10:30:12:e3:ed:10:81:f6:dd:65:c3:33:
49:4c:2d:a4:46:aa:91:9a:79:ea:c9:b3:ed:64:33:0a:6a:ef:
eb:db:64:40:0d:e1:28:70:44:ed:98:32:a0:7a:ce:da:dc:5d:
69:ef:06:60:05:63:6f:26:61:15:8b:9f:38:d9:0f:74:29:d9:
fb:47:4a:55:34:df:58:a6:3b:d7:d0:99:d8:92:23:51:fb:ea:
2e:93:88:a4:75:d3:db:99:d4:21:96:a7:bb:58:03:da:f4:74:
38:5b:2a:b7:6d:66:78:17:8a:6c:d6:24:bf:55:d9:d9:b7:0b:
fe:ab:a2:66:1c:1e:41:33:9e:0f:97:7f:0b:14:3a:c9:56:6c:
f5:14:4e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:08 2025 by rpki-client