Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/7XTPQI5_LwhSmbPvNp1Tn6Ud2pk.roa
File: 7XTPQI5_LwhSmbPvNp1Tn6Ud2pk.roa (raw, json)
Hash identifier: SFMUBbdICCjMdnT7DNHSEy0Mk5ykN9qWuGlT6EQECgU=
Subject key identifier: ED:74:CF:40:8E:7F:2F:08:52:99:B3:EF:36:9D:53:9F:A5:1D:DA:99
Certificate issuer: /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Certificate serial: 01941FFA5B41E46E28916AF9EDA7AA366166
Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/7XTPQI5_LwhSmbPvNp1Tn6Ud2pk.roa
Signing time: Wed 01 Jan 2025 03:48:08 +0000
ROA not before: Wed 01 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25031
IP address blocks: 160.61.168.0/23 maxlen: 23
160.61.170.0/23 maxlen: 23
160.61.208.0/24 maxlen: 24
160.61.211.0/24 maxlen: 24
160.62.0.0/23 maxlen: 23
160.62.0.0/24 maxlen: 24
160.62.1.0/24 maxlen: 24
160.62.2.0/24 maxlen: 24
160.62.3.0/24 maxlen: 24
160.62.4.0/24 maxlen: 24
160.62.5.0/24 maxlen: 24
160.62.6.0/24 maxlen: 24
160.62.7.0/24 maxlen: 24
160.62.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5b:41:e4:6e:28:91:6a:f9:ed:a7:aa:36:61:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed74cf408e7f2f085299b3ef369d539fa51dda99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:54:29:b1:cf:89:02:3f:16:b9:34:51:07:
45:cc:b5:79:82:d4:b4:7b:22:c8:e2:1d:d2:8d:47:
41:0c:ff:7f:b9:a0:a9:12:b8:32:45:60:8d:d2:b3:
3e:16:e3:52:a9:99:d2:88:29:b7:e0:00:9e:f7:38:
aa:e7:1d:e1:e1:09:ff:4c:07:c0:ac:a2:c7:1f:9b:
d8:ce:1e:17:57:b2:88:64:58:3e:6b:99:7f:c5:8a:
17:13:41:c6:99:53:bf:4a:f8:cf:f4:69:2c:a0:39:
b3:c1:db:13:72:6c:19:10:e7:db:43:e5:99:3e:8f:
e2:f6:30:f2:3b:b5:75:a8:5a:e1:60:fd:cf:a7:d9:
12:49:35:df:dc:a6:f7:74:ef:32:45:2f:62:04:20:
f4:3f:b8:19:fb:3d:f1:50:ef:f1:0a:4a:c8:57:86:
6c:aa:a0:71:a6:c8:3d:93:a9:14:c7:5c:4c:71:7d:
69:ec:b9:f9:e7:76:20:d1:cf:cf:7b:3a:38:62:61:
cc:f3:b1:6c:a8:9b:cf:f6:71:11:79:19:1b:47:a0:
43:ed:9f:58:87:79:7e:b7:cf:c3:35:ad:93:96:a7:
c1:9a:20:96:b0:ce:2c:e7:24:77:d0:f0:1a:79:f9:
ef:5c:1e:88:7c:7c:3a:f6:4c:f4:d6:4d:76:56:87:
d6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:74:CF:40:8E:7F:2F:08:52:99:B3:EF:36:9D:53:9F:A5:1D:DA:99
X509v3 Authority Key Identifier:
keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/7XTPQI5_LwhSmbPvNp1Tn6Ud2pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.61.168.0/22
160.61.208.0/24
160.61.211.0/24
160.62.0.0/21
160.62.22.0/24
Signature Algorithm: sha256WithRSAEncryption
65:14:f3:a2:e5:60:8c:d5:d3:1f:dd:74:e9:45:22:01:67:8b:
56:0d:e9:00:84:6a:30:a8:98:e0:d5:74:ed:34:3b:61:db:c8:
c9:01:e5:9a:d2:9e:35:6c:e3:d4:63:9d:3e:90:80:6d:81:6b:
a0:4b:f5:68:52:cf:65:3b:8c:7d:59:fe:a2:85:24:18:a4:0b:
42:93:f5:de:42:72:f7:76:db:14:b7:e6:73:7d:ba:0b:6c:5e:
0d:40:09:2e:81:e3:33:91:d6:ca:61:cb:57:c1:7a:95:a5:c4:
7c:19:1c:14:f5:18:5c:ac:31:20:f3:85:d3:36:4d:bc:cd:4b:
b8:e5:7d:5f:9e:12:ff:30:aa:1e:15:2e:33:01:77:22:71:70:
9e:ee:29:25:05:ac:81:00:33:f9:35:4c:08:be:f1:d5:07:5a:
6c:ac:e8:a3:cb:18:c0:76:a8:cc:e1:0b:31:dc:76:3e:0e:be:
d7:a7:58:13:a1:38:47:33:23:e5:80:ce:ce:40:44:6f:f4:58:
f4:cb:92:27:2d:f7:17:34:e1:9c:68:4d:70:52:ef:75:15:af:
1e:e1:f0:3b:46:a8:fa:f1:98:6f:00:89:ec:ea:b0:e3:66:3e:
17:24:2b:04:75:f4:8e:50:17:58:0e:c4:06:ee:a1:dc:ea:51:
c0:27:ca:85
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQf+ltB5G4okWr57aeqNmFmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMjRlNWVmZjFhYmMwZTZkOGJmMDI5ZTRmNzMyZTBhYjcx
YmMxNmEwHhcNMjUwMTAxMDM0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDc0Y2Y0MDhlN2YyZjA4NTI5OWIzZWYzNjlkNTM5ZmE1MWRkYTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMlUKbHPiQI/Frk0UQdFzLV5gtS0
eyLI4h3SjUdBDP9/uaCpErgyRWCN0rM+FuNSqZnSiCm34ACe9ziq5x3h4Qn/TAfA
rKLHH5vYzh4XV7KIZFg+a5l/xYoXE0HGmVO/SvjP9GksoDmzwdsTcmwZEOfbQ+WZ
Po/i9jDyO7V1qFrhYP3Pp9kSSTXf3Kb3dO8yRS9iBCD0P7gZ+z3xUO/xCkrIV4Zs
qqBxpsg9k6kUx1xMcX1p7Ln553Yg0c/Pezo4YmHM87FsqJvP9nEReRkbR6BD7Z9Y
h3l+t8/DNa2TlqfBmiCWsM4s5yR30PAaefnvXB6IfHw69kz01k12VofWwwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFO10z0COfy8IUpmz7zadU5+lHdqZMB8GA1UdIwQY
MBaAFBIk5e/xq8Dm2L8Cnk9zLgq3G8FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWlUbDdfR3J3T2JZdndLZVQzTXVDcmNid1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8xMWJlMjMtM2JlNi00ODgxLWEzZDEt
NTM4NmIxZDk2M2JjLzEvN1hUUFFJNV9Md2hTbWJQdk5wMVRuNlVkMnBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8xMWJlMjMtM2JlNi00ODgxLWEzZDEtNTM4NmIxZDk2M2Jj
LzEvRWlUbDdfR3J3T2JZdndLZVQzTXVDcmNid1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCoD2oAwQA
oD3QAwQAoD3TAwQDoD4AAwQAoD4WMA0GCSqGSIb3DQEBCwUAA4IBAQBlFPOi5WCM
1dMf3XTpRSIBZ4tWDekAhGowqJjg1XTtNDth28jJAeWa0p41bOPUY50+kIBtgWug
S/VoUs9lO4x9Wf6ihSQYpAtCk/XeQnL3dtsUt+ZzfboLbF4NQAkugeMzkdbKYctX
wXqVpcR8GRwU9RhcrDEg84XTNk28zUu45X1fnhL/MKoeFS4zAXcicXCe7iklBayB
ADP5NUwIvvHVB1psrOijyxjAdqjM4Qsx3HY+Dr7Xp1gToThHMyPlgM7OQERv9Fj0
y5InLfcXNOGcaE1wUu91Fa8e4fA7Rqj68ZhvAIns6rDjZj4XJCsEdfSOUBdYDsQG
7qHc6lHAJ8qF
-----END CERTIFICATE-----
Generated at Sun Apr 13 11:33:45 2025 by rpki-client