Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/SGwhn__bVbPsccKspAWva0mlWKE.roa
File: SGwhn__bVbPsccKspAWva0mlWKE.roa (raw, json)
Hash identifier: 7jfyjyJCW+XQBhQgGW4lFXSavEUqWujd+R1L9MnkSV4=
Subject key identifier: 48:6C:21:9F:FF:DB:55:B3:EC:71:C2:AC:A4:05:AF:6B:49:A5:58:A1
Certificate issuer: /CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
Certificate serial: 019420686AE10E9FC9449DE1E0614B56228F
Authority key identifier: 1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/SGwhn__bVbPsccKspAWva0mlWKE.roa
Signing time: Wed 01 Jan 2025 05:48:21 +0000
ROA not before: Wed 01 Jan 2025 05:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399587
IP address blocks: 193.135.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:6a:e1:0e:9f:c9:44:9d:e1:e0:61:4b:56:22:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
Validity
Not Before: Jan 1 05:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=486c219fffdb55b3ec71c2aca405af6b49a558a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:8e:69:a1:a8:ec:95:d4:ae:85:e8:c1:c8:
54:64:15:89:07:9a:4c:0f:be:67:3a:c9:29:8d:7e:
c7:97:2e:37:4d:9f:42:0a:d5:b1:ed:6d:59:70:0c:
e5:66:9e:9a:4a:fb:bd:dd:b7:94:de:38:1d:d1:99:
15:81:85:af:2a:8c:d7:7d:6f:da:6f:5c:87:99:ee:
3a:17:50:26:50:50:f8:3b:32:e0:fb:59:65:87:b8:
1e:ed:2b:87:dc:6f:15:58:5b:97:89:1c:8e:c3:bd:
42:2b:14:11:f9:84:91:4c:f0:9f:b5:44:f8:15:2d:
1b:e2:e9:63:bc:8e:a6:98:d0:51:08:a6:38:75:a8:
50:af:54:ee:e5:f3:5f:1a:40:e5:5f:3d:9f:36:b5:
05:ce:f1:80:16:b8:9e:a2:2f:e8:a7:65:e5:dd:c5:
c9:dd:0e:80:18:ed:3c:07:fd:ef:1d:1f:19:01:bf:
69:62:2c:72:7f:ea:0e:fe:13:93:04:2f:2f:fc:85:
b2:3e:e3:01:7d:1b:b9:fe:62:62:f3:bd:f8:89:b3:
a4:6f:b3:c2:37:fa:51:aa:a1:bf:6f:6e:72:de:a5:
3f:59:f8:50:5e:b7:31:34:a2:e8:ce:7d:3a:22:53:
4f:63:5f:e0:24:fa:eb:33:6d:69:9f:9a:11:d3:05:
84:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6C:21:9F:FF:DB:55:B3:EC:71:C2:AC:A4:05:AF:6B:49:A5:58:A1
X509v3 Authority Key Identifier:
keyid:1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/SGwhn__bVbPsccKspAWva0mlWKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.119.0/24
Signature Algorithm: sha256WithRSAEncryption
67:77:87:7b:b8:08:3c:80:9b:d9:1a:5e:1b:8f:83:14:dc:14:
14:3a:03:3c:49:11:db:9d:bc:63:fd:52:f0:d7:9e:d9:95:6b:
19:f7:d3:10:2a:2e:e1:40:cf:57:ab:89:40:aa:41:9d:8c:e6:
38:af:92:3b:3e:1f:46:24:40:d3:d2:0c:64:28:29:25:6f:93:
ca:4d:96:d2:54:9a:b0:f9:83:5a:cc:33:2a:09:a0:30:92:78:
f3:8c:5c:96:ac:93:d2:99:02:73:5a:d9:13:f9:5b:7d:43:b6:
3c:9b:34:60:fe:a8:42:7f:9d:f9:cb:dd:a8:94:af:3f:7f:b8:
d2:89:e0:85:57:06:51:65:64:f0:af:16:4c:7f:b4:7e:5f:d3:
90:0c:d0:36:16:1c:0c:44:c0:c7:30:79:4a:57:b3:40:d1:c7:
08:53:cd:a2:4d:0d:f6:25:d7:65:4b:f4:84:3c:63:90:be:63:
05:74:ef:fc:96:08:68:73:a2:a0:72:93:ed:6f:ef:3e:d8:7e:
fc:36:cf:96:0c:c0:a4:70:65:ce:36:58:b0:29:25:d7:1d:4d:
b0:51:98:09:b3:b5:d5:2e:b4:39:94:ca:16:ef:40:6f:c7:65:
46:e0:ea:c6:69:50:4b:ef:e2:b2:99:f8:c8:6c:2d:e1:1e:11:
68:62:7d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:10:36 2025 by rpki-client