Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/rA7j8bEErgP7AvTsNy_ett5NxTw.roa
File: rA7j8bEErgP7AvTsNy_ett5NxTw.roa (raw, json)
Hash identifier: G4G3NJoQY5uMbj/h2+BpwuW+DfhWAn3O+FHfXMH3cHE=
Subject key identifier: AC:0E:E3:F1:B1:04:AE:03:FB:02:F4:EC:37:2F:DE:B6:DE:4D:C5:3C
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 01942143C7F6D920FA13B2D7CF907664EA75
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/rA7j8bEErgP7AvTsNy_ett5NxTw.roa
Signing time: Wed 01 Jan 2025 09:47:57 +0000
ROA not before: Wed 01 Jan 2025 09:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59501
IP address blocks: 5.160.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c7:f6:d9:20:fa:13:b2:d7:cf:90:76:64:ea:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Jan 1 09:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac0ee3f1b104ae03fb02f4ec372fdeb6de4dc53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:27:a2:90:1b:6d:3f:f8:7b:82:40:6d:6e:
e5:88:bb:1f:6d:52:3c:65:58:aa:52:71:7b:d6:90:
4a:cd:35:c3:0d:1d:dc:8d:31:bb:bc:89:71:33:b1:
58:5f:c2:dd:c0:22:89:94:ef:73:43:cf:80:e3:e2:
e6:95:2f:22:82:06:c2:53:fd:70:10:21:c8:5d:5f:
a3:d9:ae:2c:33:6a:40:c1:09:c8:34:f3:e8:43:e9:
02:56:89:21:71:e7:1d:d7:6c:d0:72:cb:0c:7c:69:
1d:35:ef:da:de:3a:f0:64:9a:b8:33:c8:47:a3:02:
19:a3:07:50:77:33:bc:e0:0b:3e:1e:5d:10:de:b3:
1a:9d:a9:20:c4:8f:a2:fb:f5:4e:99:82:25:14:9e:
a4:c2:61:fc:1d:c3:d5:54:7b:59:d2:d0:60:97:61:
8a:f4:d7:93:7c:1f:4e:6d:55:bb:d1:8c:77:e4:f5:
5d:e1:77:0b:cd:87:ec:c8:bf:e9:67:95:9c:47:87:
43:52:57:4b:e3:ff:15:d0:a0:11:d7:1b:93:b3:24:
2c:b6:27:19:bf:09:f3:05:7d:6e:20:9a:bb:9d:45:
30:df:d3:35:17:9d:34:9c:47:a7:19:70:7e:f3:fb:
f3:86:53:20:45:f6:be:d2:73:53:2c:4f:a3:3f:47:
d7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0E:E3:F1:B1:04:AE:03:FB:02:F4:EC:37:2F:DE:B6:DE:4D:C5:3C
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/rA7j8bEErgP7AvTsNy_ett5NxTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.217.0/24
Signature Algorithm: sha256WithRSAEncryption
42:1d:c0:b6:be:5a:37:7c:89:06:c0:4a:aa:b2:cd:f4:a6:95:
32:5c:89:23:1c:7f:33:bf:12:e8:27:ef:cf:9f:f7:8f:15:da:
d5:7f:0c:29:0b:70:fe:d3:27:73:8b:34:07:63:10:e0:e6:cc:
b3:1f:ec:4f:87:29:86:30:e5:cc:3a:d3:62:ed:e3:6e:58:d7:
0f:54:ec:82:08:34:99:18:58:c0:cb:ad:7d:7f:a4:e6:d9:93:
07:4c:69:29:18:f7:d1:8d:a8:8c:aa:07:f3:ec:40:03:26:b4:
a4:77:3f:c6:72:7d:72:aa:64:92:ca:6d:95:a4:1b:69:fd:88:
99:43:ff:b3:61:b5:47:e1:05:f0:2f:26:55:a3:84:79:aa:74:
c2:68:ea:05:88:b6:cd:b7:3c:ef:81:b2:b1:c7:e3:a3:9d:1b:
59:fe:2a:fc:5f:a7:3c:45:5e:9d:ac:e3:47:81:d4:e1:b5:a6:
71:31:88:61:82:73:5f:de:ef:22:48:66:73:6f:37:84:a3:5c:
35:dd:43:d9:8a:e3:a6:4b:98:08:a2:1f:20:39:74:0f:d8:12:
b8:d8:71:ac:36:b8:15:74:39:d5:8b:50:7e:f2:1c:02:32:e6:
b0:38:52:61:07:dd:04:b3:57:d8:49:54:97:56:60:43:72:ac:
3c:f9:92:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:01:27 2025 by rpki-client