Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/tZUvv68-yM-usja9DUYIDzAXY2I.roa
File: tZUvv68-yM-usja9DUYIDzAXY2I.roa (raw, json)
Hash identifier: Q0hNbY9f430OK9DvoeHPSnA7JLwYZhiJ1vkImwKJv4k=
Subject key identifier: B5:95:2F:BF:AF:3E:C8:CF:AE:B2:36:BD:0D:46:08:0F:30:17:63:62
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 01942143C3A63CEC7A12D22453C2B3D3B14F
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/tZUvv68-yM-usja9DUYIDzAXY2I.roa
Signing time: Wed 01 Jan 2025 09:47:56 +0000
ROA not before: Wed 01 Jan 2025 09:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35615
IP address blocks: 5.160.244.0/23 maxlen: 23
5.160.244.0/24 maxlen: 24
5.160.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c3:a6:3c:ec:7a:12:d2:24:53:c2:b3:d3:b1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Jan 1 09:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5952fbfaf3ec8cfaeb236bd0d46080f30176362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3e:c5:a5:58:9c:38:a6:7d:e7:90:8e:d7:74:
9c:c5:f4:9e:b0:f1:67:ae:3b:cf:d9:60:e2:70:18:
c7:66:34:38:ed:15:68:55:ce:4c:e1:8b:de:95:63:
18:37:ef:81:53:93:26:de:74:02:27:df:6f:e2:bb:
48:a9:bf:af:e0:ee:57:df:4a:cb:a4:b3:36:28:9b:
9b:b8:ac:e9:86:03:55:bf:fc:ce:ef:1e:b5:78:29:
34:b2:22:82:00:41:af:9c:2d:60:a8:9c:69:ff:31:
18:71:66:33:d7:42:c2:bf:d9:1e:07:56:a5:14:0a:
58:10:c1:a0:a8:04:ba:9f:73:b0:11:65:12:ce:a9:
37:e2:8f:95:2f:f3:e0:8b:0b:8b:dc:2c:77:b3:90:
1c:83:f3:56:f2:df:e9:b3:ff:94:a8:86:51:8b:30:
83:08:c7:15:d0:2b:24:1b:4e:41:78:48:86:21:9b:
8f:a7:9c:73:ed:6a:62:8c:fc:ee:c0:e3:e1:09:ed:
33:ba:ea:07:6b:59:c7:22:6c:df:94:44:f0:c6:3d:
f3:fe:cd:76:b3:91:10:58:a0:9e:c5:8e:58:09:8c:
90:0d:20:3f:2a:24:aa:13:fd:19:da:57:e0:7d:73:
9d:a2:98:f9:61:33:54:4a:c0:a5:44:a3:bc:9c:94:
77:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:95:2F:BF:AF:3E:C8:CF:AE:B2:36:BD:0D:46:08:0F:30:17:63:62
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/tZUvv68-yM-usja9DUYIDzAXY2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.244.0/23
Signature Algorithm: sha256WithRSAEncryption
69:58:f2:0b:dd:06:65:60:56:76:b9:03:09:2c:56:7b:2f:e3:
b5:f2:05:99:ed:03:a9:2d:f6:a1:14:9c:79:59:b2:e8:c1:72:
38:3b:89:c0:3f:f5:4f:f0:bc:e5:2e:55:2f:8a:06:03:a3:99:
8c:40:08:e4:df:dc:bc:d0:94:dc:d5:42:f6:e7:ce:e8:eb:34:
f6:36:e7:eb:30:99:89:a0:67:8a:97:3e:ec:d4:a0:0b:f7:45:
11:29:95:90:20:a0:3c:41:21:bd:55:d8:a6:81:31:b5:9b:cf:
94:56:c4:b1:17:1e:21:22:57:1f:2e:93:95:8b:ca:b1:72:55:
9a:93:6f:2c:de:7f:8f:49:f4:08:43:c4:d8:44:93:c5:a6:de:
23:39:74:5e:cc:67:73:80:e0:6f:b5:bb:0d:d8:92:e5:e6:ac:
16:08:e4:74:38:df:6d:b4:b0:bd:7c:14:50:46:9f:b9:0e:9d:
69:5e:5d:f0:20:5f:cc:6e:6d:3b:09:0f:bd:98:12:a6:0a:93:
c5:6a:a8:cd:39:ed:03:74:c3:7b:6f:ab:6a:fa:cf:8c:86:c7:
e0:f3:b8:af:d4:ce:7c:17:14:8f:cd:16:2d:0f:1c:73:bb:66:
57:3a:c6:ee:92:aa:64:f4:0d:e8:96:70:ca:3a:03:ff:af:ef:
a5:35:a3:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ8OmPOx6EtIkU8Kz07FPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy
OGI4N2UwHhcNMjUwMTAxMDk0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTk1MmZiZmFmM2VjOGNmYWViMjM2YmQwZDQ2MDgwZjMwMTc2MzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT7FpVicOKZ955CO13ScxfSesPFn
rjvP2WDicBjHZjQ47RVoVc5M4YvelWMYN++BU5Mm3nQCJ99v4rtIqb+v4O5X30rL
pLM2KJubuKzphgNVv/zO7x61eCk0siKCAEGvnC1gqJxp/zEYcWYz10LCv9keB1al
FApYEMGgqAS6n3OwEWUSzqk34o+VL/PgiwuL3Cx3s5Acg/NW8t/ps/+UqIZRizCD
CMcV0CskG05BeEiGIZuPp5xz7WpijPzuwOPhCe0zuuoHa1nHImzflETwxj3z/s12
s5EQWKCexY5YCYyQDSA/KiSqE/0Z2lfgfXOdopj5YTNUSsClRKO8nJR3WQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLWVL7+vPsjPrrI2vQ1GCA8wF2NiMB8GA1UdIwQY
MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt
YjQ1NDBjNzRjOTRiLzEvdFpVdnY2OC15TS11c2phOURVWUlEekFYWTJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi
LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBaD0MA0G
CSqGSIb3DQEBCwUAA4IBAQBpWPIL3QZlYFZ2uQMJLFZ7L+O18gWZ7QOpLfahFJx5
WbLowXI4O4nAP/VP8LzlLlUvigYDo5mMQAjk39y80JTc1UL2587o6zT2NufrMJmJ
oGeKlz7s1KAL90URKZWQIKA8QSG9VdimgTG1m8+UVsSxFx4hIlcfLpOVi8qxclWa
k28s3n+PSfQIQ8TYRJPFpt4jOXRezGdzgOBvtbsN2JLl5qwWCOR0ON9ttLC9fBRQ
Rp+5Dp1pXl3wIF/Mbm07CQ+9mBKmCpPFaqjNOe0DdMN7b6tq+s+Mhsfg87iv1M58
FxSPzRYtDxxzu2ZXOsbukqpk9A3olnDKOgP/r++lNaP6
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:05:31 2025 by rpki-client