Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/b15ntJ7HPmGOS4jgF4tCkINYtWM.roa
File: b15ntJ7HPmGOS4jgF4tCkINYtWM.roa (raw, json)
Hash identifier: COLo/VUjwKkooWaLaizaYaP2W19lhe7zL+POsW4XWdk=
Subject key identifier: 6F:5E:67:B4:9E:C7:3E:61:8E:4B:88:E0:17:8B:42:90:83:58:B5:63
Certificate issuer: /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Certificate serial: 01941FFA5B88D49C681BF849A4CB4085C674
Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/b15ntJ7HPmGOS4jgF4tCkINYtWM.roa
Signing time: Wed 01 Jan 2025 03:48:08 +0000
ROA not before: Wed 01 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26478
IP address blocks: 86.117.47.0/24 maxlen: 24
160.62.14.0/24 maxlen: 24
160.62.15.0/24 maxlen: 24
160.62.22.0/24 maxlen: 24
160.62.140.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5b:88:d4:9c:68:1b:f8:49:a4:cb:40:85:c6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f5e67b49ec73e618e4b88e0178b42908358b563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fb:1e:73:4d:ce:33:e3:17:2f:07:a8:a9:2d:
d7:8a:76:f2:a9:9d:67:54:75:6d:e0:04:a0:84:d7:
24:eb:6a:d4:4f:5d:56:a4:6c:ad:aa:05:1c:70:36:
3d:03:90:69:52:5b:be:5f:8a:dd:b7:13:dd:a0:f9:
db:ad:34:54:d9:86:4e:38:ad:53:0b:b8:37:8e:2a:
1e:ba:7d:d3:ca:3b:87:cf:73:80:97:f4:76:6d:03:
9e:26:4c:aa:86:85:52:cc:ba:80:40:30:7d:de:75:
76:8c:44:d2:fd:99:5b:be:05:ed:c9:33:a9:89:0c:
c7:63:4d:3a:93:33:c8:12:bf:e1:82:77:c9:67:e4:
08:f9:b9:22:e5:de:0d:fb:93:ca:52:63:f0:8a:13:
ea:21:8c:36:68:60:a7:8a:78:60:bb:ca:e0:ed:c7:
59:d8:73:3a:04:0e:af:f0:5a:a0:57:29:68:ed:8e:
23:6c:03:d4:dd:87:3f:91:a4:56:de:dc:a8:62:9b:
97:ef:ae:08:4e:bf:54:a1:00:11:28:f5:fc:56:04:
ce:9c:d4:86:3c:48:52:66:fe:31:ef:0c:19:3c:dc:
be:5d:2a:9d:06:13:a8:da:f2:83:ea:d2:5a:3b:44:
f7:2d:61:8e:ab:cf:0a:06:08:2c:ac:37:75:80:de:
f2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5E:67:B4:9E:C7:3E:61:8E:4B:88:E0:17:8B:42:90:83:58:B5:63
X509v3 Authority Key Identifier:
keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/b15ntJ7HPmGOS4jgF4tCkINYtWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.117.47.0/24
160.62.14.0/23
160.62.22.0/24
160.62.140.0/23
Signature Algorithm: sha256WithRSAEncryption
14:22:c5:23:4d:8e:4c:07:7c:c9:ab:b1:de:80:f2:e8:12:1c:
a8:94:e6:52:c3:39:5c:c1:7d:ac:81:54:bd:52:1f:60:56:d2:
d4:4d:fd:f0:a1:8c:bf:8b:19:6e:6c:4c:0c:6b:c6:7c:22:cb:
4b:d0:1b:b9:bf:bb:23:61:ca:f9:53:77:08:07:06:8d:0e:0f:
a8:5e:51:40:02:47:e4:0e:9d:fc:b8:41:b4:b1:2c:42:9a:4f:
62:72:8f:0b:67:12:95:6b:b1:3b:cc:68:2f:de:f0:7c:a4:cb:
19:1d:69:4f:18:1f:4d:24:5c:e8:12:97:d4:c7:7b:91:e3:29:
12:c0:2d:33:9f:cf:d7:8d:12:a6:58:c5:de:a5:44:f1:0f:bb:
c8:51:95:f6:79:f6:65:70:ab:f5:1a:e0:0e:74:b6:49:b2:d3:
94:2a:ce:e9:55:84:56:98:2e:9a:ac:38:ad:6d:13:bb:72:f6:
b3:a2:21:38:2d:20:7a:b4:72:90:5b:e0:37:70:f9:7f:44:e6:
16:19:32:4b:67:56:d3:df:a3:a6:79:20:7c:5a:57:ae:6f:b1:
57:15:d2:75:b2:f8:67:bf:96:41:e6:c6:35:f4:c0:0e:cc:81:
85:4f:16:f2:06:e8:e7:73:f8:fb:dc:48:16:c9:81:c6:34:0b:
ad:35:c0:ab
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQf+luI1JxoG/hJpMtAhcZ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMjRlNWVmZjFhYmMwZTZkOGJmMDI5ZTRmNzMyZTBhYjcx
YmMxNmEwHhcNMjUwMTAxMDM0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjVlNjdiNDllYzczZTYxOGU0Yjg4ZTAxNzhiNDI5MDgzNThiNTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPsec03OM+MXLweoqS3XinbyqZ1n
VHVt4ASghNck62rUT11WpGytqgUccDY9A5BpUlu+X4rdtxPdoPnbrTRU2YZOOK1T
C7g3jioeun3TyjuHz3OAl/R2bQOeJkyqhoVSzLqAQDB93nV2jETS/ZlbvgXtyTOp
iQzHY006kzPIEr/hgnfJZ+QI+bki5d4N+5PKUmPwihPqIYw2aGCninhgu8rg7cdZ
2HM6BA6v8FqgVylo7Y4jbAPU3Yc/kaRW3tyoYpuX764ITr9UoQARKPX8VgTOnNSG
PEhSZv4x7wwZPNy+XSqdBhOo2vKD6tJaO0T3LWGOq88KBggsrDd1gN7yAwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFG9eZ7Sexz5hjkuI4BeLQpCDWLVjMB8GA1UdIwQY
MBaAFBIk5e/xq8Dm2L8Cnk9zLgq3G8FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWlUbDdfR3J3T2JZdndLZVQzTXVDcmNid1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8xMWJlMjMtM2JlNi00ODgxLWEzZDEt
NTM4NmIxZDk2M2JjLzEvYjE1bnRKN0hQbUdPUzRqZ0Y0dENrSU5ZdFdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8xMWJlMjMtM2JlNi00ODgxLWEzZDEtNTM4NmIxZDk2M2Jj
LzEvRWlUbDdfR3J3T2JZdndLZVQzTXVDcmNid1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVnUvAwQB
oD4OAwQAoD4WAwQBoD6MMA0GCSqGSIb3DQEBCwUAA4IBAQAUIsUjTY5MB3zJq7He
gPLoEhyolOZSwzlcwX2sgVS9Uh9gVtLUTf3woYy/ixlubEwMa8Z8IstL0Bu5v7sj
Ycr5U3cIBwaNDg+oXlFAAkfkDp38uEG0sSxCmk9ico8LZxKVa7E7zGgv3vB8pMsZ
HWlPGB9NJFzoEpfUx3uR4ykSwC0zn8/XjRKmWMXepUTxD7vIUZX2efZlcKv1GuAO
dLZJstOUKs7pVYRWmC6arDitbRO7cvazoiE4LSB6tHKQW+A3cPl/ROYWGTJLZ1bT
36OmeSB8Wleub7FXFdJ1svhnv5ZB5sY19MAOzIGFTxbyBujnc/j73EgWyYHGNAut
NcCr
-----END CERTIFICATE-----
Generated at Sun Apr 13 11:23:28 2025 by rpki-client