Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Bq_bmxbtCoj574nrr-P_sU_UnH8.roa
File: Bq_bmxbtCoj574nrr-P_sU_UnH8.roa (raw, json)
Hash identifier: ep0kklezsEsm6fyrAzHrNiZIZJ18JWgZ7crTbymB5hE=
Subject key identifier: 06:AF:DB:9B:16:ED:0A:88:F9:EF:89:EB:AF:E3:FF:B1:4F:D4:9C:7F
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 0194D57A415E564AED1A45AAB06A5239FCB7
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Bq_bmxbtCoj574nrr-P_sU_UnH8.roa
Signing time: Wed 05 Feb 2025 09:39:06 +0000
ROA not before: Wed 05 Feb 2025 09:39:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49847
IP address blocks: 5.160.160.0/24 maxlen: 24
5.160.161.0/24 maxlen: 24
5.160.164.0/24 maxlen: 24
5.160.165.0/24 maxlen: 24
5.160.180.0/22 maxlen: 24
5.160.180.0/23 maxlen: 23
5.160.182.0/23 maxlen: 23
5.160.183.0/24 maxlen: 24
46.209.54.0/24 maxlen: 24
46.209.55.0/24 maxlen: 24
46.209.178.0/24 maxlen: 24
46.209.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:7a:41:5e:56:4a:ed:1a:45:aa:b0:6a:52:39:fc:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Feb 5 09:39:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06afdb9b16ed0a88f9ef89ebafe3ffb14fd49c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:80:1d:ae:c8:55:04:0c:bd:1b:0e:ad:84:1c:
05:cb:d2:97:b7:e2:f6:3e:9f:23:f1:07:2b:26:a3:
e8:57:05:2c:33:91:50:09:52:76:e1:53:f1:0b:53:
dc:f7:d9:8b:8f:03:b0:f0:56:33:01:ee:ba:54:7a:
ad:71:d1:be:f7:c8:03:47:0f:62:7c:0f:5a:bf:f5:
90:90:df:d0:2a:17:b6:27:e3:bd:83:e5:0a:7b:a1:
74:30:02:98:26:52:4e:af:68:17:10:f8:d3:69:6b:
1f:50:71:b2:e5:ee:2c:4d:1a:f4:67:1d:98:61:b7:
7d:00:25:fa:c1:6e:07:05:33:95:8d:07:e7:3c:47:
fe:ba:1e:9d:2a:89:76:c2:b2:3e:fe:94:1b:ea:0c:
d5:7a:e3:af:0f:73:64:da:48:a4:e7:b1:b4:22:6b:
b4:90:db:6c:b5:50:45:a2:0d:ab:50:e3:c6:ac:18:
d6:33:46:18:b9:01:e6:29:59:df:8c:cc:ae:d2:f0:
3f:7f:2e:49:f1:45:5e:f2:5d:2c:67:d7:12:82:19:
8c:ec:aa:b1:d7:76:41:90:83:db:64:9a:05:ea:2b:
0b:19:c6:f8:66:d3:fd:51:9b:b5:c0:58:88:90:9f:
00:88:bd:5d:96:79:87:bb:f1:00:48:b5:a5:48:ce:
82:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AF:DB:9B:16:ED:0A:88:F9:EF:89:EB:AF:E3:FF:B1:4F:D4:9C:7F
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Bq_bmxbtCoj574nrr-P_sU_UnH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.160.0/23
5.160.164.0/23
5.160.180.0/22
46.209.54.0/23
46.209.178.0/23
Signature Algorithm: sha256WithRSAEncryption
06:6e:a6:57:86:c1:c6:ef:90:f2:a1:19:09:b6:69:dc:9e:ce:
4a:ce:9e:85:33:69:8d:37:ed:2d:8b:8c:80:0c:4c:52:44:4a:
8a:bd:7f:b0:bc:3a:3d:27:62:d8:5d:dc:9c:c2:a2:ca:7a:e6:
ca:ec:93:ab:bb:45:7e:f4:74:4c:3e:10:57:f7:6f:e1:69:d2:
f2:20:44:0e:fe:e3:33:0a:32:30:46:cf:79:0c:27:70:a4:aa:
41:15:b6:65:4f:68:02:39:12:1e:14:a7:67:37:1f:74:2b:bf:
e9:0d:a0:c0:a6:00:ca:21:04:81:d4:ec:e8:d0:f9:62:7e:29:
01:27:c9:94:65:dc:c2:06:37:f0:a9:7d:e5:ac:28:6b:1d:2f:
67:92:fe:2e:37:0a:e9:a4:bb:5c:5e:86:0e:bf:22:ea:50:a0:
eb:0d:4d:11:c6:da:22:f6:8c:f8:76:5a:76:71:a3:69:4d:de:
64:f4:d1:72:8f:1a:bb:44:5b:ef:16:eb:14:98:72:8a:a7:83:
84:2c:de:71:61:53:fa:be:d3:6f:c8:c9:fc:8d:7f:e3:1c:99:
50:ce:ff:5a:ce:31:fa:1e:c5:45:c8:3c:52:b2:4d:b2:c2:77:
66:a1:88:a0:16:51:48:7a:6b:23:aa:22:3f:03:80:bd:41:cd:
dd:0a:a4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:58:25 2025 by rpki-client