Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/cR5GkD7Su3mKZj2zwATQUqCxmsM.roa
File: cR5GkD7Su3mKZj2zwATQUqCxmsM.roa (raw, json)
Hash identifier: KYy1QEI+KZ3ZHoxAm81CyyGO9IPR9JvbwURfwVUkVnY=
Subject key identifier: 71:1E:46:90:3E:D2:BB:79:8A:66:3D:B3:C0:04:D0:52:A0:B1:9A:C3
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01965D08A8563FB6011EF6ED0450B1ACD761
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/cR5GkD7Su3mKZj2zwATQUqCxmsM.roa
Signing time: Tue 22 Apr 2025 10:26:10 +0000
ROA not before: Tue 22 Apr 2025 10:26:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3356
IP address blocks: 104.238.4.0/24 maxlen: 24
104.238.5.0/24 maxlen: 24
104.238.8.0/24 maxlen: 24
104.238.9.0/24 maxlen: 24
104.239.30.0/23 maxlen: 23
104.239.94.0/24 maxlen: 24
104.249.17.0/24 maxlen: 24
104.249.46.0/24 maxlen: 24
104.249.47.0/24 maxlen: 24
104.249.50.0/24 maxlen: 24
138.128.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:08:a8:56:3f:b6:01:1e:f6:ed:04:50:b1:ac:d7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 22 10:26:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=711e46903ed2bb798a663db3c004d052a0b19ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1b:c9:81:6c:16:2b:37:f3:23:88:ec:35:48:
68:e0:82:38:93:b1:59:d5:e1:8c:90:49:ce:78:fd:
7f:45:3a:9c:0b:5f:42:c7:41:64:16:0a:68:32:78:
c4:e9:90:5b:04:4a:17:73:0f:c1:ed:f5:9e:42:6b:
b4:e6:88:54:b8:cd:cf:27:6f:41:1e:1a:51:23:d5:
3f:5c:1b:79:2c:24:a2:44:06:5f:3a:91:bd:49:3d:
ac:cb:77:34:b5:c8:0d:6c:0b:81:88:d0:1a:30:04:
7c:0c:87:f0:9b:88:89:76:80:f3:20:fd:b5:14:c9:
9d:9c:be:19:e1:18:6e:d3:90:ba:2f:ef:c6:3f:1b:
2d:a8:e1:1d:49:85:ce:be:57:95:49:98:76:7c:70:
53:d2:cb:31:88:dd:a1:0b:40:26:5b:78:25:d0:1c:
7d:b6:fb:5a:56:9d:84:48:f2:be:c1:01:c8:3d:29:
12:c1:38:ca:73:d4:3d:4e:9f:f0:64:28:75:f3:e8:
d3:e7:48:0e:7e:3e:26:ee:77:47:27:31:46:0e:13:
81:05:18:1d:13:bc:68:ae:c0:f9:f4:37:bb:f8:06:
30:70:6b:a1:79:f8:77:2f:45:4a:21:a5:11:11:7f:
a4:b0:3b:31:1e:a5:ce:b6:ff:bf:b0:12:76:10:03:
1a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1E:46:90:3E:D2:BB:79:8A:66:3D:B3:C0:04:D0:52:A0:B1:9A:C3
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/cR5GkD7Su3mKZj2zwATQUqCxmsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.238.4.0/23
104.238.8.0/23
104.239.30.0/23
104.239.94.0/24
104.249.17.0/24
104.249.46.0/23
104.249.50.0/24
138.128.157.0/24
Signature Algorithm: sha256WithRSAEncryption
67:ed:e1:1f:24:23:12:ed:76:e2:ac:5c:bb:8e:a0:a1:d3:da:
89:30:fd:10:fc:14:5d:4c:6f:f7:f4:cd:fe:20:43:2b:49:f3:
0c:97:a1:b5:ba:22:83:6e:f0:8e:e0:c2:89:ea:f3:23:5a:b0:
38:a1:11:4b:c1:f0:74:92:b8:66:90:77:0b:51:b3:d6:ae:ec:
c0:6d:6a:31:22:49:5b:e6:bf:cb:21:2d:3f:49:37:56:a0:48:
95:b8:e1:ae:2c:ce:8a:e8:4c:8c:29:d0:88:b7:20:0d:19:b0:
13:a1:7b:59:bc:30:81:f2:44:6e:3a:d7:11:c2:d3:03:b5:93:
74:e2:e4:92:bb:90:5b:0e:6d:e2:d3:a8:c0:a2:e7:48:6a:50:
f8:ac:20:bf:c2:a6:87:0d:70:37:6a:49:fb:5f:8e:a7:a8:c2:
cb:1e:92:6d:cc:a5:43:4e:7a:d2:94:6b:1d:08:04:e7:2e:04:
8e:cc:be:7d:d2:88:4c:48:07:77:2f:9a:75:11:a3:73:9f:ef:
18:d4:58:a7:a5:ee:97:ce:b9:1f:bc:cc:e1:8e:cb:56:33:e3:
5c:d8:db:b3:c6:ac:9b:57:45:a9:f2:14:7f:5e:38:dd:fd:64:
7b:f3:4e:7e:77:d7:e7:ce:41:0c:40:4e:f2:93:7f:64:28:14:
63:40:e3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:14:14 2025 by rpki-client