Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/qw7p6clS2YhsNdDV7OVEHG57THA.roa
File: qw7p6clS2YhsNdDV7OVEHG57THA.roa (raw, json)
Hash identifier: ln6YKQpvxhfRCoiu+0hB/cJGGn3tv26jLKFncu+e4tg=
Subject key identifier: AB:0E:E9:E9:C9:52:D9:88:6C:35:D0:D5:EC:E5:44:1C:6E:7B:4C:70
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 01942143CDFFC10FAA1FCCE1F614F20E040B
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/qw7p6clS2YhsNdDV7OVEHG57THA.roa
Signing time: Wed 01 Jan 2025 09:47:59 +0000
ROA not before: Wed 01 Jan 2025 09:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62265
IP address blocks: 5.160.222.0/23 maxlen: 23
5.160.222.0/24 maxlen: 24
5.160.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:cd:ff:c1:0f:aa:1f:cc:e1:f6:14:f2:0e:04:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Jan 1 09:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab0ee9e9c952d9886c35d0d5ece5441c6e7b4c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:70:fc:7d:09:41:45:46:04:8b:9e:82:4a:
7e:47:39:ec:26:ad:56:07:b8:46:37:96:f8:9b:fd:
5c:1f:68:f6:d7:80:de:e3:fb:3d:46:9d:2d:ae:7d:
04:5b:c1:83:0b:0d:9d:5e:ca:09:9a:d5:b4:c3:ec:
8d:51:9a:50:09:c4:93:a1:9f:f9:57:e9:4b:b1:8e:
a5:53:b6:f4:66:13:91:c9:af:64:43:bd:41:4f:b5:
27:3c:43:f5:c7:21:c4:da:21:87:9b:52:e2:40:a5:
8c:ce:d0:4a:6f:ae:47:df:77:41:8f:5e:14:ed:2e:
27:d6:80:87:c7:93:8b:01:57:34:18:25:13:19:27:
0c:7d:84:fa:4a:6c:91:36:08:51:0c:c1:a9:0d:20:
a9:d7:2a:ce:c4:c6:6c:72:93:73:b2:b4:a7:dd:3f:
f3:15:57:4e:98:95:53:f7:2b:79:85:ee:0d:af:16:
5a:80:ed:c0:e7:5e:2c:cc:7b:94:dd:ac:45:ba:de:
9b:d4:85:c3:80:01:b3:47:bb:72:b4:dd:15:6e:ae:
62:6e:76:29:6c:4d:f9:19:73:84:ea:4d:82:4e:3f:
ab:f7:44:9b:e9:f8:6e:1e:66:a4:08:c5:6d:3b:47:
b6:30:be:30:bb:35:1c:82:0b:b5:69:8d:58:b0:ce:
4d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0E:E9:E9:C9:52:D9:88:6C:35:D0:D5:EC:E5:44:1C:6E:7B:4C:70
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/qw7p6clS2YhsNdDV7OVEHG57THA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.222.0/23
Signature Algorithm: sha256WithRSAEncryption
80:c3:d4:58:56:8a:5f:06:1c:93:61:b3:ed:57:b3:b5:65:5c:
f7:71:10:90:0a:bf:8d:95:ff:ac:81:05:36:1a:8e:8e:d5:26:
31:74:ee:ec:79:fe:ed:dc:c4:e2:ea:f9:61:30:d0:b3:9d:6b:
02:a8:b5:5d:a7:59:c2:86:e1:86:09:4d:59:02:3d:72:86:25:
d6:26:b2:d8:0c:89:28:9a:67:fe:c0:b5:ad:ef:01:6a:12:cb:
4f:5d:7d:ab:33:56:b1:f4:eb:a8:35:4f:4c:08:70:4f:29:fd:
a4:60:3e:c4:25:bf:66:e6:8d:77:a4:dc:c5:1e:85:38:41:5e:
7e:d4:9e:17:6b:89:f1:fb:34:12:f1:a1:e7:a0:57:4e:22:5b:
aa:b8:dc:ad:00:2d:8a:10:3a:ac:ba:3f:d4:0a:93:2c:9a:91:
23:e9:06:31:f4:95:69:05:81:67:01:6d:8f:40:79:83:fe:a3:
37:bf:c7:d1:a6:f0:74:97:10:dc:4b:fa:69:e0:75:be:ae:a1:
45:37:57:53:e5:9e:40:bf:44:1b:f6:9d:fe:89:22:96:9d:2f:
0b:78:4a:5f:69:3a:de:47:4b:f6:1e:a6:ac:0b:87:66:64:8a:
02:fa:9f:3c:40:2b:e8:60:df:85:29:9a:21:8c:69:a1:06:57:
64:03:20:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:08:06 2025 by rpki-client