Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/j63jZRnMUiDSsXvYQHecWgsCRyQ.roa
File: j63jZRnMUiDSsXvYQHecWgsCRyQ.roa (raw, json)
Hash identifier: K8+M3lFPQKubjIsmYzQtDktqmYXELL1jNbS29/gsyAA=
Subject key identifier: 8F:AD:E3:65:19:CC:52:20:D2:B1:7B:D8:40:77:9C:5A:0B:02:47:24
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 0194266B5F118EFA8A4F4E893E27415A6499
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/j63jZRnMUiDSsXvYQHecWgsCRyQ.roa
Signing time: Thu 02 Jan 2025 09:49:18 +0000
ROA not before: Thu 02 Jan 2025 09:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59463
IP address blocks: 109.160.16.0/21 maxlen: 21
109.160.16.0/24 maxlen: 24
109.160.17.0/24 maxlen: 24
109.160.18.0/24 maxlen: 24
109.160.19.0/24 maxlen: 24
109.160.20.0/24 maxlen: 24
109.160.21.0/24 maxlen: 24
109.160.22.0/24 maxlen: 24
109.160.23.0/24 maxlen: 24
109.160.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:5f:11:8e:fa:8a:4f:4e:89:3e:27:41:5a:64:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 2 09:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fade36519cc5220d2b17bd840779c5a0b024724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:85:4b:f1:9f:dc:96:31:ef:2d:80:62:55:2e:
9e:7b:3d:ee:e0:8d:7e:08:23:f6:f4:f5:a2:93:34:
84:13:75:da:0b:5d:15:b9:93:e4:fb:4d:16:60:39:
74:70:f2:d6:34:c5:63:c2:3e:47:7b:23:bc:df:e8:
59:02:8c:85:33:ab:5f:c3:04:45:aa:67:83:72:b9:
4c:a0:02:05:56:2a:74:7e:94:da:d7:d4:82:d6:ca:
37:99:66:46:68:97:77:30:de:8c:fb:9e:33:34:f7:
10:3e:d9:9e:15:50:e4:3f:cf:4c:24:7e:1a:22:c3:
09:99:1f:7c:5f:8f:6b:0b:e1:41:ee:6b:95:7f:b6:
12:fe:42:0e:8d:56:d1:04:cb:75:31:cb:b1:c7:df:
da:e4:78:ad:32:1a:e2:38:25:03:7d:40:16:28:12:
3a:d3:fd:5b:f3:cb:10:c0:08:2d:f1:b2:38:ba:25:
1b:8f:98:d0:ea:fb:a0:d8:a9:86:4b:2d:21:03:ea:
fa:23:41:6c:0d:cb:3d:f6:a6:86:78:b3:d3:6b:c0:
83:86:be:9b:45:89:37:1d:1d:fa:6a:78:00:05:3c:
9b:3c:18:64:42:0a:11:ce:47:d0:c1:17:f9:27:90:
66:9e:92:1a:46:ab:5a:5f:7a:35:1c:bb:91:21:8d:
be:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AD:E3:65:19:CC:52:20:D2:B1:7B:D8:40:77:9C:5A:0B:02:47:24
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/j63jZRnMUiDSsXvYQHecWgsCRyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.16.0/21
109.160.62.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:93:57:29:f7:cb:b0:ee:c9:2e:37:38:2d:e0:60:8e:9b:cd:
78:91:2a:b8:45:fa:0a:2d:0b:9c:6d:59:b7:db:dc:42:96:aa:
01:16:7b:1c:e2:2f:ab:4d:41:9c:d8:da:eb:e1:6a:1f:ab:75:
52:e8:22:c4:d8:39:7c:9c:c6:ed:19:d1:ea:f5:53:7d:b9:6e:
7d:9d:ca:42:a8:d9:d0:02:2a:ed:db:e4:aa:3e:fc:19:b3:83:
41:2d:5c:39:51:b4:72:b1:99:45:40:45:7c:88:69:dd:3f:86:
d1:a2:61:07:af:c3:22:9d:d1:d0:0b:40:be:aa:7e:31:a8:66:
8b:5a:02:a2:e4:0e:52:21:01:0b:0e:0a:3d:32:fb:d0:94:66:
e4:6b:52:00:41:b1:0a:4f:4f:50:bc:71:e1:af:ee:d6:b0:d4:
82:d3:09:d8:c4:81:10:51:3f:88:02:fe:b1:08:99:e8:05:2f:
c2:bd:e3:8d:bd:cf:82:02:31:e4:96:a6:c1:d2:9b:af:f6:45:
5f:3b:25:a9:11:e7:d8:95:c7:46:06:5f:4e:e8:8a:fb:8c:f2:
3c:5f:57:a2:4a:db:be:33:7a:96:58:27:4d:70:ee:eb:a2:df:
3a:95:c1:ae:65:2e:8e:4e:ed:9b:a2:86:ec:db:40:34:7e:1b:
3c:fd:f8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:44 2025 by rpki-client