Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/rLmkerNpNMKEEptaj-3sGSaO8Tc.roa
File: rLmkerNpNMKEEptaj-3sGSaO8Tc.roa (raw, json)
Hash identifier: UDaHZvqKpCq/QNJtMj3Fo135cadvlXNDPr0XNybIHmY=
Subject key identifier: AC:B9:A4:7A:B3:69:34:C2:84:12:9B:5A:8F:ED:EC:19:26:8E:F1:37
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 0196C3F3B3E7C689779BEDCA929329CEC6CA
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/rLmkerNpNMKEEptaj-3sGSaO8Tc.roa
Signing time: Mon 12 May 2025 10:04:10 +0000
ROA not before: Mon 12 May 2025 10:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213644
IP address blocks: 5.160.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f3:b3:e7:c6:89:77:9b:ed:ca:92:93:29:ce:c6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: May 12 10:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acb9a47ab36934c284129b5a8fedec19268ef137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:47:8e:28:ac:fe:0e:00:50:8c:44:b0:20:38:
0e:08:e9:5e:80:18:e1:dc:87:9b:33:27:ea:1e:18:
90:28:72:e0:7b:66:8b:7d:67:a6:f3:29:3b:9b:1f:
04:de:8c:57:42:ff:17:0b:63:14:d5:d3:87:15:8d:
21:bf:07:52:ec:57:73:36:d1:4a:56:5c:00:fa:87:
2e:b2:69:de:02:a2:b3:f9:2c:b7:18:77:07:83:8a:
2d:c5:99:92:f9:1c:77:c4:61:57:41:97:c0:51:52:
b0:de:ec:d0:eb:8c:8a:6b:2f:17:dd:92:bd:cd:4d:
78:2c:88:8e:81:7d:8d:00:21:4e:d4:4a:91:6a:b9:
da:3f:5c:2c:06:5e:bf:ed:b6:4d:a5:40:bd:02:11:
94:0b:79:9c:69:11:1a:f7:14:35:42:91:a7:76:1f:
60:f1:74:2a:bc:6e:d0:50:f1:bb:e6:16:aa:58:6d:
51:44:5c:36:95:e0:cd:22:04:8e:c5:6c:80:fe:ec:
2b:01:33:f5:64:15:d8:d4:dd:f3:93:5b:f9:2a:57:
7c:6b:b7:53:fa:87:b1:bf:1c:49:fa:8d:9d:04:ae:
7e:eb:fc:e3:b7:d9:8a:f4:90:f9:1c:ef:e5:f6:3d:
5e:bb:fc:54:b1:8a:d6:d0:e9:9f:b4:42:09:0b:fa:
99:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B9:A4:7A:B3:69:34:C2:84:12:9B:5A:8F:ED:EC:19:26:8E:F1:37
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/rLmkerNpNMKEEptaj-3sGSaO8Tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.132.0/24
Signature Algorithm: sha256WithRSAEncryption
36:70:95:dc:23:db:d2:ca:65:a4:b1:75:2b:bf:06:31:a8:ae:
27:18:3b:fe:cc:b7:73:eb:7a:b8:3d:b3:07:76:df:de:a8:60:
0a:5b:2b:3e:3e:02:3b:4c:22:d8:f2:d6:47:9d:57:20:3a:b9:
e4:16:d0:87:d6:d9:fe:f2:6c:1c:19:b6:f0:a2:b3:f9:a4:e9:
79:37:36:29:d1:52:1c:88:0a:1c:50:33:cc:90:e4:27:60:88:
49:da:1b:a1:e2:64:9c:c8:0d:13:37:ed:64:33:13:8d:78:bf:
32:fe:a5:90:66:6e:77:da:28:4c:0e:51:0a:a7:ad:dc:4b:05:
0f:30:73:4b:57:f0:e5:87:66:d3:81:3a:0b:8f:fa:42:34:9e:
27:02:f2:63:9a:d8:e3:10:3b:32:fc:14:c4:7e:d5:cf:cf:57:
10:2a:72:c6:25:21:15:8d:46:10:1e:25:70:91:c4:ad:04:f7:
14:ee:05:b8:34:51:2a:27:10:09:bc:7e:30:3a:90:5a:3c:85:
9d:3b:c1:11:f7:23:b7:29:e3:da:d4:3c:56:b2:a7:81:ff:96:
88:5c:77:ca:89:c8:82:85:e4:9d:e9:3e:58:23:e5:ea:b4:d2:
f7:0c:7c:1b:34:93:dc:41:4f:3a:b4:7a:cb:98:37:d8:6a:f0:
2b:fb:52:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:43:39 2025 by rpki-client