Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/bwObaSjCJpxHqyn_J2Zc1UyaDpk.roa
File: bwObaSjCJpxHqyn_J2Zc1UyaDpk.roa (raw, json)
Hash identifier: 5LCroiKS+KLVcq5iSNcFsFpFOJRUYv9Ix+9NXv0YNEQ=
Subject key identifier: 6F:03:9B:69:28:C2:26:9C:47:AB:29:FF:27:66:5C:D5:4C:9A:0E:99
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 01942143C87C7DE05C59B6EA6F91294C6CB1
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/bwObaSjCJpxHqyn_J2Zc1UyaDpk.roa
Signing time: Wed 01 Jan 2025 09:47:57 +0000
ROA not before: Wed 01 Jan 2025 09:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59797
IP address blocks: 5.160.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c8:7c:7d:e0:5c:59:b6:ea:6f:91:29:4c:6c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Jan 1 09:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f039b6928c2269c47ab29ff27665cd54c9a0e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9f:82:5c:94:1a:54:41:63:01:fc:f4:66:13:
ec:e3:70:46:a4:93:61:9f:c0:1f:17:61:ff:44:4b:
ed:8b:dc:88:9b:43:7f:c1:2c:38:f6:ba:78:7a:bd:
9f:21:74:81:4b:77:04:eb:93:39:64:0c:b1:40:f1:
4f:98:3d:32:44:87:6d:81:66:6a:54:b3:e2:37:fc:
f7:b0:dc:ca:cb:57:ea:17:92:36:93:55:c2:10:7a:
6d:b5:dd:3c:5a:ae:b3:c6:70:5b:20:16:0e:d3:a1:
c7:d2:2d:61:7b:38:5e:0f:1d:2c:71:aa:cc:a2:f3:
20:8f:2c:c1:0f:4f:85:33:4f:30:ba:e5:46:b0:3b:
14:2f:f9:dc:58:a7:3b:a3:da:91:33:63:79:e5:0b:
2f:04:5f:00:81:fa:64:0e:d7:68:aa:e2:d1:68:1c:
f3:e4:e8:69:f2:e9:e7:f0:1b:e4:4e:17:0a:f3:a7:
46:1e:35:9d:74:dd:70:79:69:78:02:0a:42:5b:12:
09:53:c6:01:ec:cc:b3:82:bb:2f:fc:eb:37:32:f5:
f5:0a:18:88:71:0d:9e:c3:d3:f0:eb:fd:e4:4e:0c:
4d:05:cc:c1:11:fc:0c:ad:64:5b:90:ba:68:bf:0e:
18:18:be:e3:84:d1:a1:f3:c3:66:9a:9c:1c:c0:79:
27:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:03:9B:69:28:C2:26:9C:47:AB:29:FF:27:66:5C:D5:4C:9A:0E:99
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/bwObaSjCJpxHqyn_J2Zc1UyaDpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.194.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:47:f9:03:a0:1c:b3:b8:9d:be:b4:65:61:44:8f:5d:f8:68:
d2:93:f8:8c:0f:53:b9:ae:8e:a3:3f:62:a6:b2:a6:c7:1b:e6:
0c:17:80:ff:66:ec:6c:08:4a:da:e9:2b:44:32:f7:b3:7b:d3:
c2:80:ac:76:a3:c3:8d:fc:8a:79:91:ae:61:07:d6:90:51:2c:
3c:66:f5:d5:29:e3:a8:fb:25:52:81:05:40:50:cd:80:e6:2a:
57:d7:2b:b7:ea:7a:a1:56:c6:f7:71:12:0b:4e:12:6b:f5:f5:
63:aa:7c:63:69:46:34:c5:38:65:ae:5c:58:fc:0f:72:4d:2f:
dd:94:1b:60:63:44:93:24:e9:e5:8f:5b:19:f3:bb:dd:95:a9:
b3:e2:96:5e:3c:06:32:b9:b9:2d:72:4b:a6:2d:87:e3:f5:3e:
26:01:81:f9:44:cd:40:80:fe:03:02:b3:92:95:d0:f4:37:c9:
a4:21:b7:d4:28:dd:6a:9d:45:de:86:5c:52:d9:17:dc:ba:4d:
a7:59:03:9c:cf:76:0f:23:94:93:9a:cf:a4:7c:db:1b:39:1b:
82:31:ea:58:a7:79:c6:ab:8c:41:6f:f3:4f:11:d1:ea:fc:af:
bb:21:ae:90:9d:09:a8:b8:74:5a:93:bc:9f:bc:d1:83:d4:a1:
25:a7:ed:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:07:10 2025 by rpki-client