Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/6sKepJ27UpBLjSdqmn3KBLPniMI.roa
File: 6sKepJ27UpBLjSdqmn3KBLPniMI.roa (raw, json)
Hash identifier: WCLetK9JTDdG4/uZYX9DMnQXhs5gvrvw80YDnmEgPTI=
Subject key identifier: EA:C2:9E:A4:9D:BB:52:90:4B:8D:27:6A:9A:7D:CA:04:B3:E7:88:C2
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 01942143D524D793C90AE8AB0A432ACA5A05
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/6sKepJ27UpBLjSdqmn3KBLPniMI.roa
Signing time: Wed 01 Jan 2025 09:48:01 +0000
ROA not before: Wed 01 Jan 2025 09:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215779
IP address blocks: 5.160.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d5:24:d7:93:c9:0a:e8:ab:0a:43:2a:ca:5a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Jan 1 09:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eac29ea49dbb52904b8d276a9a7dca04b3e788c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:fa:bc:50:5f:f2:96:66:f1:43:64:93:7e:
bb:92:e6:5b:05:a7:22:bb:35:ca:4c:cb:82:08:19:
27:50:1e:2a:da:f4:53:03:c8:76:1f:d3:bc:40:18:
a0:c5:49:21:88:92:73:18:eb:2a:18:21:f1:02:40:
85:64:03:4e:c2:2d:d0:11:51:23:f2:4c:69:ca:3b:
4a:35:86:69:01:6c:67:af:d3:6b:b5:ff:53:cf:14:
7a:d8:71:9c:88:67:bb:0c:78:3a:73:1f:1d:6c:45:
f7:f8:11:4e:a3:a7:7b:d3:0c:4c:2e:11:a5:cb:42:
51:dd:b9:19:61:32:60:60:56:89:20:0d:7f:ca:5a:
e1:9a:5b:46:dc:24:9c:28:0c:57:85:81:7e:63:26:
68:e4:4c:90:14:89:99:7c:bb:a7:a6:0b:60:18:bd:
a2:53:fe:ee:d9:02:a7:31:25:5e:35:fe:2c:27:96:
7c:17:96:53:8a:1c:00:a5:b5:5c:cb:64:2b:e7:09:
50:31:4a:5d:4c:5b:85:33:65:1c:f1:e5:54:5d:6d:
d0:74:e7:76:b9:56:91:31:a9:84:c7:85:7c:9d:37:
9e:f9:63:aa:55:b5:b9:be:45:ec:12:4d:df:31:12:
73:b1:0b:13:e1:4f:df:48:32:76:d1:87:ef:1f:20:
41:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C2:9E:A4:9D:BB:52:90:4B:8D:27:6A:9A:7D:CA:04:B3:E7:88:C2
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/6sKepJ27UpBLjSdqmn3KBLPniMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.156.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:78:cb:f4:bd:33:ab:ef:d6:9b:e8:4e:e5:78:a6:fc:c6:5a:
c6:e3:9e:e9:de:83:46:c3:8c:f4:8d:bc:64:44:99:29:1a:2c:
2e:ce:f3:21:50:15:1c:7a:48:96:4e:23:76:de:09:0b:98:59:
f4:d0:e5:14:1b:c8:90:c4:5a:15:83:88:49:20:26:88:1b:0e:
c1:df:3e:9e:94:7a:cf:5e:88:56:ef:be:02:f5:e8:d8:eb:ef:
4b:34:92:11:29:aa:f4:e8:e0:65:0e:aa:9d:5d:18:bb:4e:37:
8e:7e:a6:7b:b6:13:57:e2:ae:d2:97:dd:e1:81:c7:48:61:58:
8a:9b:89:2f:bb:93:22:36:59:8d:fd:9a:fe:1e:f0:51:33:19:
b1:61:27:87:07:05:c6:b9:88:cf:1c:d2:bd:6b:07:fd:0e:0e:
22:91:a0:d1:8a:d1:2c:d7:96:ec:5c:0e:1f:15:db:ee:e5:6f:
1e:64:9a:74:44:f0:ae:66:07:63:5c:b3:d0:4c:09:78:84:0d:
70:e4:1a:09:37:ea:db:5a:63:52:f6:8b:a7:c7:c7:f2:2b:84:
a1:26:3d:e3:65:87:18:07:97:88:fa:15:75:58:9e:ae:2b:60:
df:87:af:dc:23:5b:7d:bc:5d:30:7e:79:04:13:a4:60:3e:97:
84:a2:48:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ9Uk15PJCuirCkMqyloFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy
OGI4N2UwHhcNMjUwMTAxMDk0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWMyOWVhNDlkYmI1MjkwNGI4ZDI3NmE5YTdkY2EwNGIzZTc4OGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrb6vFBf8pZm8UNkk367kuZbBaci
uzXKTMuCCBknUB4q2vRTA8h2H9O8QBigxUkhiJJzGOsqGCHxAkCFZANOwi3QEVEj
8kxpyjtKNYZpAWxnr9Nrtf9TzxR62HGciGe7DHg6cx8dbEX3+BFOo6d70wxMLhGl
y0JR3bkZYTJgYFaJIA1/ylrhmltG3CScKAxXhYF+YyZo5EyQFImZfLunpgtgGL2i
U/7u2QKnMSVeNf4sJ5Z8F5ZTihwApbVcy2Qr5wlQMUpdTFuFM2Uc8eVUXW3QdOd2
uVaRMamEx4V8nTee+WOqVbW5vkXsEk3fMRJzsQsT4U/fSDJ20YfvHyBBaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOrCnqSdu1KQS40napp9ygSz54jCMB8GA1UdIwQY
MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt
YjQ1NDBjNzRjOTRiLzEvNnNLZXBKMjdVcEJMalNkcW1uM0tCTFBuaU1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi
LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABaCcMA0G
CSqGSIb3DQEBCwUAA4IBAQBueMv0vTOr79ab6E7leKb8xlrG457p3oNGw4z0jbxk
RJkpGiwuzvMhUBUcekiWTiN23gkLmFn00OUUG8iQxFoVg4hJICaIGw7B3z6elHrP
XohW774C9ejY6+9LNJIRKar06OBlDqqdXRi7TjeOfqZ7thNX4q7Sl93hgcdIYViK
m4kvu5MiNlmN/Zr+HvBRMxmxYSeHBwXGuYjPHNK9awf9Dg4ikaDRitEs15bsXA4f
Fdvu5W8eZJp0RPCuZgdjXLPQTAl4hA1w5BoJN+rbWmNS9ounx8fyK4ShJj3jZYcY
B5eI+hV1WJ6uK2Dfh6/cI1t9vF0wfnkEE6RgPpeEokjm
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:06:07 2025 by rpki-client