Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/jpRHBZLf_q4Ab3-HF019A6C7iC0.roa
File: jpRHBZLf_q4Ab3-HF019A6C7iC0.roa (raw, json)
Hash identifier: XPIdJosbQpsOENbhceS7WOOyP4m8ucmeXHipAQ07T6I=
Subject key identifier: 8E:94:47:05:92:DF:FE:AE:00:6F:7F:87:17:4D:7D:03:A0:BB:88:2D
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 0194A1732A2EC9D2FBD2C7EDFED314C8BDD7
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/jpRHBZLf_q4Ab3-HF019A6C7iC0.roa
Signing time: Sun 26 Jan 2025 07:11:06 +0000
ROA not before: Sun 26 Jan 2025 07:11:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198926
IP address blocks: 5.160.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a1:73:2a:2e:c9:d2:fb:d2:c7:ed:fe:d3:14:c8:bd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Jan 26 07:11:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e94470592dffeae006f7f87174d7d03a0bb882d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:40:4d:ce:15:39:eb:b4:ad:bd:a7:0f:14:
9a:58:54:b5:ec:27:54:74:ca:b5:14:18:31:7d:1d:
68:3d:8a:d8:c3:28:c4:f5:e7:e1:d8:c7:50:21:fe:
19:24:8b:29:39:1e:e7:f5:50:83:91:ab:f2:7a:ca:
3b:bf:cd:0a:80:b3:7b:23:69:69:73:5a:90:01:de:
57:1f:fc:89:ad:8b:eb:89:68:49:0a:6d:a2:c9:24:
c2:d2:5e:1c:45:22:66:ed:77:c7:5b:e4:80:cc:65:
e7:12:9b:cb:32:ce:f5:56:7c:bf:ab:89:24:97:ee:
7d:01:52:e4:0b:bb:e6:26:d7:3f:b2:3b:b4:3e:a6:
ea:91:64:ad:bb:c5:09:6f:19:c4:8b:8f:5e:c4:38:
b5:a0:05:7b:ae:52:d6:6f:99:a7:58:e4:67:6a:18:
d2:34:0e:5e:96:ef:52:84:23:f4:ea:38:f0:d4:fc:
c6:e8:0e:19:31:b9:79:f4:8b:34:37:04:71:e5:7f:
ca:5f:6e:a2:3a:a6:bf:21:93:98:5c:64:48:3c:50:
32:d7:bd:e8:7e:87:ba:be:36:3b:6e:0e:2d:b4:df:
35:97:9c:40:a6:60:f6:ed:ad:3a:e1:b9:02:de:77:
fc:0c:b6:69:ec:26:1d:61:83:48:40:1a:7f:ef:bf:
c7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:94:47:05:92:DF:FE:AE:00:6F:7F:87:17:4D:7D:03:A0:BB:88:2D
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/jpRHBZLf_q4Ab3-HF019A6C7iC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.135.0/24
Signature Algorithm: sha256WithRSAEncryption
67:36:45:57:99:21:34:9d:b0:4c:e9:3d:40:ec:67:ae:71:db:
5e:c4:b7:2a:5d:6d:09:00:8e:63:78:3c:c9:ab:bd:0f:ef:23:
f0:77:b4:2e:7b:33:fc:59:7e:01:43:1e:76:de:e9:a3:90:66:
af:34:02:06:29:a1:92:1d:4f:39:c1:2f:65:6f:00:0e:9f:5c:
48:30:f3:46:02:d7:6a:b6:12:40:03:6f:84:0e:85:43:06:ee:
17:ee:1f:43:a0:03:fd:86:ae:ee:40:e1:60:b1:37:fd:6c:06:
e3:76:4a:88:4c:5c:7e:17:8a:a4:bb:fb:ca:41:62:c0:6a:d1:
cd:61:a5:ff:f3:5e:c7:cb:c0:52:e6:9d:8c:4a:a9:39:dd:0e:
88:3f:ba:d5:61:90:71:35:d8:f7:fc:0f:46:43:69:c8:f6:4f:
33:b4:94:d2:c0:66:02:ee:9d:8e:58:9e:3c:0b:09:d7:3a:d6:
24:c5:a7:7e:ea:00:9c:c7:a7:80:a5:23:df:ea:07:cb:f4:7c:
55:65:33:6e:b8:ac:ee:36:c9:67:c8:7c:b6:43:4c:73:af:a6:
14:2c:17:b7:70:0f:df:a1:84:16:21:3f:ca:19:13:62:39:15:
fe:e7:73:49:35:cf:a5:f4:49:3b:ab:13:5b:7a:5b:fb:76:a3:
17:51:78:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:57:14 2025 by rpki-client