Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/jpAqXna3C0BjwOBpSfF6soVZcO0.roa
File: jpAqXna3C0BjwOBpSfF6soVZcO0.roa (raw, json)
Hash identifier: d+qMaS9a2yeSfULyHTLZ9m6sHcw2gyPQTuA5wZETi1Q=
Subject key identifier: 8E:90:2A:5E:76:B7:0B:40:63:C0:E0:69:49:F1:7A:B2:85:59:70:ED
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 01942143D4C80500BDEBD139A156B47085FF
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/jpAqXna3C0BjwOBpSfF6soVZcO0.roa
Signing time: Wed 01 Jan 2025 09:48:01 +0000
ROA not before: Wed 01 Jan 2025 09:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214184
IP address blocks: 5.160.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d4:c8:05:00:bd:eb:d1:39:a1:56:b4:70:85:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Jan 1 09:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e902a5e76b70b4063c0e06949f17ab2855970ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:83:fe:8a:a4:1b:65:1e:79:03:e2:71:fb:63:
b7:87:36:48:5c:a2:67:a6:2f:5a:06:f9:72:9d:2d:
00:b6:b1:c5:4e:a5:34:15:93:29:82:1a:80:72:36:
fa:1a:12:37:90:8c:32:83:c2:5e:b8:8c:e5:50:ff:
1b:44:82:24:33:a4:6d:3e:50:74:de:fe:56:73:7f:
85:98:66:9c:7b:73:3d:90:fd:9d:28:97:2f:76:16:
ee:bb:ef:ed:d9:c8:bb:f8:72:47:77:a0:a2:41:b6:
0e:f3:44:f7:7d:f8:83:23:07:bb:40:a5:22:4a:fc:
db:b5:1b:88:55:55:03:a4:b6:c0:43:fb:18:3e:bd:
28:1a:9f:b1:2f:f0:08:10:ee:32:42:4a:c4:33:2d:
d4:b8:d2:26:77:7b:b5:e5:54:e2:62:3a:2b:f7:be:
22:ac:6d:e6:0d:07:68:42:c2:c5:20:c2:3e:77:70:
c7:c0:8e:6e:8a:0a:e8:de:60:92:23:5c:a1:dd:66:
8c:67:27:72:52:1b:a9:35:92:e9:59:ee:38:3f:01:
2e:4c:97:ae:73:79:25:a7:3d:6c:80:8e:14:bd:dd:
e5:21:92:e4:84:bc:76:a0:ef:2b:65:30:16:78:9e:
de:66:58:54:0a:f7:df:e0:90:73:d4:a2:b1:ce:14:
54:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:90:2A:5E:76:B7:0B:40:63:C0:E0:69:49:F1:7A:B2:85:59:70:ED
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/jpAqXna3C0BjwOBpSfF6soVZcO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.145.0/24
Signature Algorithm: sha256WithRSAEncryption
32:18:60:ff:a8:16:39:69:4b:9f:28:e0:1c:0f:2c:1a:13:04:
60:8f:76:f6:86:31:a7:9f:a3:3f:85:3d:e4:be:67:64:ca:8f:
b1:ea:b5:32:5b:11:20:a2:f3:b9:7f:2a:26:0f:3a:91:d5:90:
e3:82:0c:2b:59:4f:32:4a:a8:4e:41:fa:1f:dc:d2:f2:ed:07:
76:45:b4:c3:e9:a4:7e:3a:db:9d:38:a8:d6:48:46:06:80:23:
10:40:ed:63:78:37:78:3b:cb:b2:19:07:a0:9b:97:e9:59:b5:
25:55:19:d3:05:f7:fa:80:7e:37:b6:45:1a:b9:5e:fd:7f:7d:
19:0b:da:62:5a:55:26:4b:9e:4b:3e:7a:17:51:43:37:44:88:
a3:24:1b:ba:a7:ba:69:c3:e3:06:a4:6a:d7:16:f7:48:58:f2:
8d:8c:45:4e:6b:36:71:13:b4:93:80:01:7e:10:b8:d1:6b:21:
f3:4b:c8:4b:01:56:25:97:2a:72:21:a8:bb:15:1c:30:a1:61:
3c:73:43:ae:0b:15:7a:75:6a:c4:65:95:51:25:38:fd:cc:54:
5a:b5:75:1e:2b:87:0d:fa:1e:3e:6a:9a:f1:8c:7f:4c:13:d5:
cf:0f:3d:c9:f8:23:d4:50:e9:45:13:2b:b3:3e:2b:f3:d2:b8:
06:0a:7a:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ9TIBQC969E5oVa0cIX/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy
OGI4N2UwHhcNMjUwMTAxMDk0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTkwMmE1ZTc2YjcwYjQwNjNjMGUwNjk0OWYxN2FiMjg1NTk3MGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YP+iqQbZR55A+Jx+2O3hzZIXKJn
pi9aBvlynS0AtrHFTqU0FZMpghqAcjb6GhI3kIwyg8JeuIzlUP8bRIIkM6RtPlB0
3v5Wc3+FmGace3M9kP2dKJcvdhbuu+/t2ci7+HJHd6CiQbYO80T3ffiDIwe7QKUi
SvzbtRuIVVUDpLbAQ/sYPr0oGp+xL/AIEO4yQkrEMy3UuNImd3u15VTiYjor974i
rG3mDQdoQsLFIMI+d3DHwI5uigro3mCSI1yh3WaMZydyUhupNZLpWe44PwEuTJeu
c3klpz1sgI4Uvd3lIZLkhLx2oO8rZTAWeJ7eZlhUCvff4JBz1KKxzhRUxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI6QKl52twtAY8DgaUnxerKFWXDtMB8GA1UdIwQY
MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt
YjQ1NDBjNzRjOTRiLzEvanBBcVhuYTNDMEJqd09CcFNmRjZzb1ZaY08wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi
LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABaCRMA0G
CSqGSIb3DQEBCwUAA4IBAQAyGGD/qBY5aUufKOAcDywaEwRgj3b2hjGnn6M/hT3k
vmdkyo+x6rUyWxEgovO5fyomDzqR1ZDjggwrWU8ySqhOQfof3NLy7Qd2RbTD6aR+
OtudOKjWSEYGgCMQQO1jeDd4O8uyGQegm5fpWbUlVRnTBff6gH43tkUauV79f30Z
C9piWlUmS55LPnoXUUM3RIijJBu6p7ppw+MGpGrXFvdIWPKNjEVOazZxE7STgAF+
ELjRayHzS8hLAVYllypyIai7FRwwoWE8c0OuCxV6dWrEZZVRJTj9zFRatXUeK4cN
+h4+aprxjH9ME9XPDz3J+CPUUOlFEyuzPivz0rgGCnr3
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:09:21 2025 by rpki-client