Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/SnGTBXW1XcwewDa-smIR5I1JKZI.roa
File: SnGTBXW1XcwewDa-smIR5I1JKZI.roa (raw, json)
Hash identifier: xpAJV0wk9t7OjG7z/ce//LAqwxfBmtBr4RGOH/HzNPU=
Subject key identifier: 4A:71:93:05:75:B5:5D:CC:1E:C0:36:BE:B2:62:11:E4:8D:49:29:92
Certificate issuer: /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial: 019421445B639660490F42FA1A27E4FAF11C
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/SnGTBXW1XcwewDa-smIR5I1JKZI.roa
Signing time: Wed 01 Jan 2025 09:48:35 +0000
ROA not before: Wed 01 Jan 2025 09:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60619
IP address blocks: 185.249.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:5b:63:96:60:49:0f:42:fa:1a:27:e4:fa:f1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
Validity
Not Before: Jan 1 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a71930575b55dcc1ec036beb26211e48d492992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a5:4f:5b:3a:26:d5:2d:44:c5:32:7c:92:9f:
bc:2e:ae:96:84:22:5c:c5:80:4f:7f:b2:8c:1f:d0:
c6:33:78:6c:1c:5c:5f:dc:52:a6:b6:30:6a:08:67:
e0:1f:84:4f:6c:3c:53:f4:d9:79:a1:f1:a2:82:fe:
f9:16:3d:80:54:2f:1b:49:8f:c4:29:1e:72:74:1a:
d2:fc:e7:f0:d9:4a:e8:ee:ba:90:30:13:45:fb:70:
29:72:5e:db:be:5e:fa:50:7c:35:df:d4:6d:83:66:
08:02:e5:01:d5:81:68:c9:21:c5:e5:44:0d:b7:7b:
20:44:5d:dc:02:13:88:58:11:99:9d:a8:ab:c8:7a:
e0:ff:80:0f:46:14:ae:d6:6f:58:8c:d2:6c:d6:26:
bc:11:28:2a:63:1b:b4:2b:8e:0c:74:09:90:83:68:
e3:e1:cb:4b:91:8d:cc:33:05:08:17:7c:84:ef:49:
b4:2c:d9:df:81:43:8a:bb:90:7e:2e:a2:39:76:7b:
9b:81:70:c1:6d:b8:54:66:44:c6:b7:60:0b:c5:74:
48:79:f9:26:55:9e:4d:83:33:17:1a:13:ba:c1:39:
bb:71:b4:8f:be:9f:cf:e9:7f:a5:0b:d6:9c:3b:79:
05:3d:a5:27:9b:a9:fc:a8:8f:8a:7f:af:b5:18:27:
38:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:71:93:05:75:B5:5D:CC:1E:C0:36:BE:B2:62:11:E4:8D:49:29:92
X509v3 Authority Key Identifier:
keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/SnGTBXW1XcwewDa-smIR5I1JKZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.144.0/22
Signature Algorithm: sha256WithRSAEncryption
76:82:4d:03:0c:0e:c0:91:b5:6c:93:7c:15:a0:83:ed:ea:32:
1a:0c:c6:d9:3b:b8:d6:41:f4:9e:39:f9:e9:1a:b4:cf:21:4a:
23:db:55:2a:58:6a:ae:b1:4c:c8:34:1a:32:13:03:6b:0e:08:
4f:ca:48:e8:ea:6d:7c:2f:06:02:51:3e:c5:72:90:b3:12:2e:
1a:e9:a7:ee:30:a8:7b:ab:d1:19:a1:60:a0:bd:cb:17:05:f5:
89:10:2b:68:1c:09:4e:40:0b:0e:71:95:de:92:ba:dc:58:0c:
b9:16:1f:f4:21:de:83:a9:f6:7c:9e:ed:9f:e6:1c:e0:da:9c:
cb:a4:e7:c5:19:28:62:1a:25:94:9e:af:0e:d6:ff:51:15:94:
33:ee:d8:ec:8d:23:b6:7a:51:d4:f8:af:31:bf:47:5a:57:d7:
92:ad:48:37:08:ff:1d:c0:bf:46:a0:64:de:60:c8:53:80:02:
78:49:8e:e4:6d:d6:a4:d4:a1:38:6c:30:35:64:3e:5e:78:76:
c5:23:9b:3d:0f:8c:fd:2f:b0:82:6d:f0:35:76:d3:ed:10:5e:
88:e6:54:d9:b0:33:d1:b6:0e:1b:73:7f:92:96:cd:4e:d2:79:
fd:f6:7b:0e:b5:52:57:85:fa:8c:6a:7f:15:3c:01:d3:f5:31:
a6:bd:24:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:36:52 2025 by rpki-client