Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/idjgEn_DtJtFVd0OXhlFhaVth3k.roa
File: idjgEn_DtJtFVd0OXhlFhaVth3k.roa (raw, json)
Hash identifier: MlrIcDle9nnrd/hLhZ0ef7MIimF7M3Z7pdv8d+6j9fE=
Subject key identifier: 89:D8:E0:12:7F:C3:B4:9B:45:55:DD:0E:5E:19:45:85:A5:6D:87:79
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 01942143C5FD5B5D08214B6E0A7CD1F9CBFE
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/idjgEn_DtJtFVd0OXhlFhaVth3k.roa
Signing time: Wed 01 Jan 2025 09:47:57 +0000
ROA not before: Wed 01 Jan 2025 09:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49847
IP address blocks: 5.160.160.0/24 maxlen: 24
5.160.161.0/24 maxlen: 24
5.160.164.0/24 maxlen: 24
5.160.165.0/24 maxlen: 24
46.209.54.0/24 maxlen: 24
46.209.55.0/24 maxlen: 24
46.209.178.0/24 maxlen: 24
46.209.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c5:fd:5b:5d:08:21:4b:6e:0a:7c:d1:f9:cb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Jan 1 09:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89d8e0127fc3b49b4555dd0e5e194585a56d8779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:3d:57:6c:09:b5:bd:6a:80:ca:30:23:92:
cf:b0:16:89:54:7d:0d:29:ce:e0:82:72:3d:77:2a:
be:59:9c:a2:99:bf:be:57:50:dc:3d:40:8b:f7:b6:
93:33:b9:43:e7:bd:c2:7a:e8:44:75:80:cb:d7:6b:
a7:f8:08:2a:df:66:f8:3d:59:e7:b2:21:99:65:74:
1f:a3:a3:88:52:a7:54:74:02:f5:12:f4:83:aa:e9:
1d:94:e1:14:3b:3e:91:35:57:d1:5a:9c:c8:2f:f6:
fa:dc:56:85:77:b6:ac:25:98:c4:5c:92:90:72:d0:
65:4e:95:a4:fb:88:8c:87:97:e5:a9:9c:7f:cc:a8:
42:87:6e:a1:53:c5:cc:9e:27:c9:d7:5c:67:49:ae:
ab:b6:8e:2a:f2:09:8c:ed:0e:d1:3a:98:24:29:73:
19:3e:fb:e9:90:3c:c7:49:96:75:23:6c:6b:48:40:
cd:fb:79:b5:df:7e:4f:ff:4c:00:4d:fa:d8:ff:3b:
dd:d1:a5:ad:06:66:ca:eb:b2:8e:0b:d5:84:a2:d3:
12:9c:f0:d1:c2:e7:7a:5e:0c:b7:23:6b:c2:a5:af:
81:1e:02:52:66:19:81:3e:c6:c2:ae:ad:f9:7a:58:
7f:39:02:51:78:8a:f7:6b:d5:66:ec:8c:3d:c4:a6:
c7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D8:E0:12:7F:C3:B4:9B:45:55:DD:0E:5E:19:45:85:A5:6D:87:79
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/idjgEn_DtJtFVd0OXhlFhaVth3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.160.0/23
5.160.164.0/23
46.209.54.0/23
46.209.178.0/23
Signature Algorithm: sha256WithRSAEncryption
43:0e:b7:f4:74:ed:9c:e3:4b:90:68:56:a1:07:ec:fe:c6:b5:
76:06:f9:5e:41:e0:e1:15:32:27:51:47:d0:71:1c:0d:bf:0b:
92:3a:c0:1e:e2:b0:3c:90:8c:2d:71:02:17:60:38:64:e9:e5:
f3:cf:e0:2e:96:3a:90:11:46:c2:4a:65:02:d1:d8:78:f5:e9:
da:a5:e9:b8:9d:3a:56:2e:c7:01:7c:55:ba:85:5f:51:4d:12:
32:bc:b7:bd:44:56:e5:e9:0e:8c:8c:30:26:bb:a7:39:d8:ae:
1e:47:20:50:b3:26:c9:a2:2a:c8:63:f4:e0:2f:8b:95:04:a7:
94:3f:44:65:09:82:38:d9:72:cb:1d:cb:eb:e3:dd:35:39:66:
12:a0:bf:9a:e7:41:ee:1f:cc:f5:f3:ee:97:f5:ca:e4:a5:69:
2d:c1:00:f3:b5:ea:85:f4:2b:fc:f1:d4:cb:63:8a:21:12:31:
42:92:70:0a:4d:e1:bc:44:81:d3:d6:a8:25:83:ba:14:85:7b:
62:23:9e:40:80:38:be:ab:85:b0:88:ec:b3:04:a2:36:d3:de:
1c:44:9b:a5:6b:31:70:92:8f:43:13:f4:35:bf:11:bd:7c:c3:
e5:ba:5a:84:23:3c:48:0f:32:59:ac:41:95:b2:67:57:5d:37:
bc:fd:6b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:04:19 2025 by rpki-client