Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/sgoYeQNtFnh12FV-ZwGviu0rJg4.roa
File: sgoYeQNtFnh12FV-ZwGviu0rJg4.roa (raw, json)
Hash identifier: 2Vn+m+ijRNITjJPoC4Uhp6Js9ds/J9KOP+oHIgtb3es=
Subject key identifier: B2:0A:18:79:03:6D:16:78:75:D8:55:7E:67:01:AF:8A:ED:2B:26:0E
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 019424455D1D3659A8F9EF929592F18D4AD5
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/sgoYeQNtFnh12FV-ZwGviu0rJg4.roa
Signing time: Wed 01 Jan 2025 23:48:33 +0000
ROA not before: Wed 01 Jan 2025 23:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58156
IP address blocks: 46.234.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:5d:1d:36:59:a8:f9:ef:92:95:92:f1:8d:4a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b20a1879036d167875d8557e6701af8aed2b260e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f9:e3:f5:ed:79:e5:6d:4e:1c:f8:e8:a3:33:
ea:6d:d6:f9:e3:89:3c:ae:b6:c1:40:aa:bf:11:82:
7c:ce:25:0a:53:ce:c2:e1:1e:c5:7a:bf:84:2f:68:
14:b3:d4:28:d5:86:a6:93:be:80:2c:96:b5:73:2e:
a1:c8:d8:d7:38:d9:8d:48:80:17:1c:9c:a1:56:80:
55:77:05:e8:37:71:b4:31:84:2b:70:c2:a4:58:8c:
94:df:17:4c:71:44:14:da:d1:93:f2:58:28:94:06:
68:33:ad:a5:7a:0a:55:ee:be:e6:07:cc:21:76:d9:
5c:6f:0c:85:54:da:24:4e:34:b4:88:08:16:8b:27:
c0:1a:22:a3:fe:24:34:5a:c1:cb:d4:ad:41:4d:df:
47:33:61:38:dc:d3:e7:56:51:d6:cb:9e:95:cb:cb:
2d:d8:1d:05:21:5b:de:06:a6:d7:d8:4c:70:4c:f4:
ae:a7:68:d4:e1:ac:30:f2:86:ff:1b:83:55:be:3f:
74:5e:47:d5:2f:a5:ea:1d:aa:e6:1d:77:f9:35:33:
7a:c9:00:1a:83:0c:ee:5b:45:aa:a5:1c:fc:6a:08:
06:26:9b:03:34:37:85:0d:b9:ad:9a:0d:72:48:1f:
ca:99:83:86:14:01:84:c0:9b:8b:d3:49:9d:be:32:
79:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0A:18:79:03:6D:16:78:75:D8:55:7E:67:01:AF:8A:ED:2B:26:0E
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/sgoYeQNtFnh12FV-ZwGviu0rJg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.234.13.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b6:f0:e0:17:1a:b4:1d:1b:ae:ff:f1:84:86:8b:12:02:76:
8e:e5:e7:90:2b:4c:47:23:c3:38:1e:50:b6:d6:d3:11:fd:bf:
ec:e3:f2:42:c3:43:3e:2b:d6:ab:ba:40:91:c7:00:fd:aa:28:
15:26:ed:cf:a5:12:49:71:d1:5f:ee:64:08:4c:38:a2:1a:53:
34:a2:9e:7c:e6:94:9a:62:6f:b8:45:ff:05:38:2a:86:81:63:
cf:69:57:28:1c:4c:5d:f2:bc:67:0d:41:ff:2c:f0:20:27:a1:
9c:a0:e3:e1:72:b1:e7:ce:33:18:0a:b7:4c:5f:fc:8e:07:6a:
9f:15:03:ad:0b:ae:d7:f9:d3:93:d3:e4:ae:1c:9f:4b:44:f1:
1e:07:3b:fd:52:f1:e1:a3:03:81:5a:3a:ad:99:de:e1:3e:98:
77:8a:83:5d:fd:f1:a9:6c:db:56:7c:64:ac:7c:92:d4:89:0c:
f4:bd:53:ef:8b:a1:ef:21:bd:d8:22:2f:bd:a7:0b:24:b3:b8:
ae:84:40:a3:c6:b0:27:33:5a:73:16:ea:ba:9c:5f:21:1c:fe:
e0:7b:b7:c4:60:87:7a:63:d6:81:b4:ff:ed:b3:c2:ef:02:08:
89:d3:4d:09:58:25:ca:ff:a2:45:b6:61:53:2d:c5:e2:ef:15:
7a:3e:2c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:04:06 2025 by rpki-client