Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/5BBAqb-ZPpAIYao4Vwv4C7kYHp8.roa
File: 5BBAqb-ZPpAIYao4Vwv4C7kYHp8.roa (raw, json)
Hash identifier: zeVZxVXoVg6CA4xU6hMT88LFhpR/jzGOghHaqJNZWX0=
Subject key identifier: E4:10:40:A9:BF:99:3E:90:08:61:AA:38:57:0B:F8:0B:B9:18:1E:9F
Certificate issuer: /CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
Certificate serial: 01941FFAAB7F7E5DF119D51B019CCC5E71BD
Authority key identifier: 3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/5BBAqb-ZPpAIYao4Vwv4C7kYHp8.roa
Signing time: Wed 01 Jan 2025 03:48:29 +0000
ROA not before: Wed 01 Jan 2025 03:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13237
IP address blocks: 185.160.96.0/24 maxlen: 24
185.160.97.0/24 maxlen: 24
185.160.98.0/24 maxlen: 24
185.160.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ab:7f:7e:5d:f1:19:d5:1b:01:9c:cc:5e:71:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e41040a9bf993e900861aa38570bf80bb9181e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3c:f1:cf:42:47:2b:5b:b4:23:cf:05:f2:40:
46:51:d0:17:dd:63:ae:12:9c:b2:c0:9f:88:3e:c0:
40:bd:a4:d6:ee:d2:21:20:35:b3:03:31:a2:f3:f5:
54:d5:d0:14:b0:14:11:e4:e6:d1:7c:9c:92:79:a9:
4d:bc:73:e8:13:cf:82:00:f0:f4:2e:79:d7:ec:c6:
61:28:60:e2:81:d2:4f:32:47:88:b3:5e:87:93:ff:
af:62:9c:e6:bc:ae:ec:dd:2f:7e:d9:ff:18:b3:75:
68:2f:9a:51:9d:39:7f:84:42:2a:79:22:90:ba:f3:
8e:80:32:d4:a6:93:80:a9:9f:44:97:e5:4c:22:b6:
ae:08:d6:4a:e1:ba:8d:c0:76:50:b0:72:4f:ee:d1:
d8:7b:0b:82:52:75:3e:d0:34:1a:7e:17:bd:ab:be:
6b:a2:55:3a:5b:cd:55:85:ce:aa:82:d4:84:a3:cd:
82:43:bf:3c:75:b7:f8:4d:e1:ea:fa:48:7f:4b:4c:
96:81:48:f4:79:b9:ca:b5:44:72:f1:ae:b5:0e:e3:
d7:83:60:b3:39:1d:63:3e:b4:03:ae:bf:01:f8:ac:
61:70:37:c3:7c:46:5c:cd:1d:ac:75:04:c2:e6:23:
03:af:c0:b3:da:3e:2f:12:88:4e:a0:a6:fc:0e:12:
76:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:10:40:A9:BF:99:3E:90:08:61:AA:38:57:0B:F8:0B:B9:18:1E:9F
X509v3 Authority Key Identifier:
keyid:3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/5BBAqb-ZPpAIYao4Vwv4C7kYHp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.96.0/22
Signature Algorithm: sha256WithRSAEncryption
64:af:64:d4:44:c2:8b:c2:00:eb:43:71:75:53:95:23:68:82:
1a:d1:8b:06:33:93:4d:7b:99:ff:3d:95:e0:b5:9d:cd:69:2c:
6d:ec:a6:bc:ce:8c:99:66:3b:0f:20:51:d1:28:69:70:a8:fb:
35:01:6d:39:15:13:ec:d9:99:e3:39:27:e7:95:43:3d:bd:9d:
96:1e:c1:68:39:de:cd:1e:c8:e5:2f:26:6a:ba:32:8d:83:32:
06:15:81:0c:0d:60:29:82:6a:d1:23:c4:40:31:3c:ee:55:e3:
60:cd:5b:c7:f5:0c:45:43:a4:d6:9c:5e:69:6a:7c:e1:28:96:
c8:65:20:35:4c:71:d2:32:51:cd:29:09:22:a3:4e:e1:06:67:
c4:fa:a5:6c:34:9b:53:70:df:6f:b5:c2:4b:b4:65:93:a6:a5:
ac:62:9a:a3:db:1a:d3:28:bc:52:b8:15:8e:22:01:43:ee:50:
7d:b2:94:44:5b:c7:07:dd:4b:41:4d:69:a7:6b:ea:ff:bd:2e:
83:8d:4d:f3:b0:be:50:53:e6:41:dd:fe:f0:f3:2c:33:17:d0:
9a:2e:d2:29:72:50:3d:55:66:39:3b:3e:c3:24:df:ce:18:4e:
a8:f5:92:45:85:f1:03:c3:18:f7:a0:92:50:62:2d:5e:28:08:
cf:b6:f9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:10:04 2025 by rpki-client