Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/SAErMn910QcsjZhMZn2xF6Hedt8.roa
File: SAErMn910QcsjZhMZn2xF6Hedt8.roa (raw, json)
Hash identifier: m0heJy2RnMYv+s0k0IbcIoFZhmwcKXlBwC48PIe+ALA=
Subject key identifier: 48:01:2B:32:7F:75:D1:07:2C:8D:98:4C:66:7D:B1:17:A1:DE:76:DF
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0194244555FD48489B991C6479DB2C556D01
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/SAErMn910QcsjZhMZn2xF6Hedt8.roa
Signing time: Wed 01 Jan 2025 23:48:31 +0000
ROA not before: Wed 01 Jan 2025 23:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35185
IP address blocks: 46.234.14.0/24 maxlen: 24
84.44.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:55:fd:48:48:9b:99:1c:64:79:db:2c:55:6d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48012b327f75d1072c8d984c667db117a1de76df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e7:c4:f4:9c:0c:d0:6a:ca:99:a4:e2:f0:f4:
d2:40:da:90:1a:a3:fb:31:cd:ad:7d:2b:fb:9f:37:
1e:40:3a:42:2d:8c:d1:7f:15:62:c4:2c:03:dd:ad:
8e:e9:81:38:e0:61:47:0a:70:9f:55:6a:00:ca:62:
6c:c9:8d:11:d8:85:57:b3:08:83:89:2a:83:4f:b8:
63:c8:92:8b:d6:b8:b2:5f:94:68:06:ae:b5:6c:ec:
2f:81:f9:fb:0f:c7:3a:46:51:11:bb:0e:87:02:f4:
9d:de:8d:8a:d0:8c:c8:d4:4d:e5:33:01:34:f3:b3:
a6:41:e3:6c:3f:60:1b:a5:29:87:7c:62:6c:54:49:
b4:b6:03:e2:0e:87:2b:58:17:a0:54:57:3c:0e:0c:
bd:40:83:c0:22:0d:51:3b:ff:ce:2d:99:b7:6c:73:
47:f0:e1:15:8c:6c:6c:99:ff:71:a2:cc:3e:36:88:
a2:36:0f:1d:9f:59:3b:d2:21:cf:b5:1d:a0:a2:03:
62:34:8b:11:fc:bf:27:fc:b8:5e:8a:b8:c2:bf:2f:
1c:e9:83:e3:d8:f2:b1:2f:52:2a:13:0b:62:d8:65:
e0:b5:92:38:ee:98:2d:37:62:ed:46:de:d9:08:a1:
f5:a6:58:04:91:95:44:ab:8b:31:f0:68:ed:bf:ca:
7f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:01:2B:32:7F:75:D1:07:2C:8D:98:4C:66:7D:B1:17:A1:DE:76:DF
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/SAErMn910QcsjZhMZn2xF6Hedt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.234.14.0/24
84.44.7.0/24
Signature Algorithm: sha256WithRSAEncryption
53:91:dd:c9:ad:c3:ec:3c:1d:95:16:c7:41:3e:36:60:2c:ed:
21:5e:8f:00:71:81:1f:67:f6:c7:47:53:25:e1:e0:f4:fe:a0:
01:21:cf:0f:1d:ca:a3:a0:6d:2a:76:75:c6:9c:08:09:22:92:
de:ce:c0:6a:d9:c3:ae:a6:fd:19:ce:ad:64:98:11:7c:f7:65:
09:81:7d:17:07:19:22:b2:12:1f:e0:cc:0d:4d:4b:76:55:70:
f1:f1:8a:07:b3:a3:9c:f2:c3:82:24:92:92:e8:f4:8b:92:bd:
23:3f:41:a3:76:9d:5e:6a:b7:3f:07:d3:0e:3a:d9:3d:52:ef:
bd:17:fb:39:b2:4b:1e:a1:9b:e2:a4:99:2f:3b:54:55:2b:6d:
de:ac:63:e1:2e:b8:f4:a3:d0:96:63:99:67:a0:2c:3f:fb:da:
0d:08:59:c7:9a:12:04:c1:84:93:b4:b0:91:5a:22:ac:83:53:
dd:b8:bd:66:c1:40:3b:86:df:c7:0c:05:af:28:93:4f:ce:d0:
5f:ba:b8:67:91:53:a0:f3:a2:69:b5:96:52:c3:29:ab:e3:bd:
b0:e5:b8:8f:e8:96:70:c9:78:d8:c2:87:38:2c:18:24:cd:92:
27:91:db:9a:9f:fb:b0:93:40:fe:cb:1c:cd:52:ff:91:e5:9d:
5f:f0:f3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:04:18 2025 by rpki-client