Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Sw2GbKoJ8rfrZjEQTkFwYz2FnOg.roa
File: Sw2GbKoJ8rfrZjEQTkFwYz2FnOg.roa (raw, json)
Hash identifier: vokvJGT+Pa2Ai2Kj9IpjJzrJytLkCCqfTkYZIe2tcyQ=
Subject key identifier: 4B:0D:86:6C:AA:09:F2:B7:EB:66:31:10:4E:41:70:63:3D:85:9C:E8
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 01952956657C3C64ECB6002DF32DA8CD0C30
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Sw2GbKoJ8rfrZjEQTkFwYz2FnOg.roa
Signing time: Fri 21 Feb 2025 16:28:02 +0000
ROA not before: Fri 21 Feb 2025 16:28:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200195
IP address blocks: 176.98.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:29:56:65:7c:3c:64:ec:b6:00:2d:f3:2d:a8:cd:0c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Feb 21 16:28:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b0d866caa09f2b7eb6631104e4170633d859ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:79:70:0a:ea:b1:19:18:67:20:75:e9:b7:
9e:b7:01:6a:d1:43:96:09:e3:c2:69:5a:85:31:d3:
60:7d:19:64:0a:d8:3f:67:f3:0d:ca:de:9b:36:84:
70:a5:fe:bf:73:2e:ac:4e:9f:14:1a:50:38:5e:33:
23:29:41:db:76:95:37:9d:9b:2d:30:27:6c:b0:55:
89:07:d5:0b:22:57:91:14:0e:e3:02:82:44:55:e8:
ef:86:60:57:83:bf:c7:4b:9b:5d:f8:41:a5:ec:30:
11:c9:70:eb:b7:72:05:6a:3d:66:e1:87:b8:6c:f9:
95:bf:cc:ec:b5:32:5b:82:bd:9f:4a:0b:7a:1c:9b:
ac:79:0c:58:9f:02:0e:5e:e7:c5:d0:08:5f:1e:17:
f2:03:fd:11:19:24:57:27:e0:0c:11:ad:bd:04:aa:
36:ba:49:5d:aa:97:b2:78:b5:82:8a:a3:20:ea:00:
c4:c8:04:0c:bf:b7:9e:06:09:87:61:27:8b:8c:05:
9a:05:8c:4c:28:e5:df:b1:d2:1c:9e:07:67:92:58:
ed:4e:19:29:54:1b:78:e3:11:91:59:2a:fd:45:6e:
f1:3d:53:59:fd:6a:e3:e4:11:04:cb:9b:af:2d:4f:
04:ac:d7:6f:f3:f6:a5:bf:65:0d:99:1e:55:45:f6:
d4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0D:86:6C:AA:09:F2:B7:EB:66:31:10:4E:41:70:63:3D:85:9C:E8
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Sw2GbKoJ8rfrZjEQTkFwYz2FnOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.184.0/24
Signature Algorithm: sha256WithRSAEncryption
19:42:e1:95:76:6e:68:35:17:33:ef:74:c8:31:cd:9f:13:f3:
b4:cc:8e:40:db:07:a9:b6:7c:8d:60:fa:43:2c:19:18:7c:ba:
e7:b7:ab:6c:f3:86:47:55:6f:59:b1:0d:83:49:e0:7a:7c:03:
f5:c1:09:08:a6:f1:b0:32:cb:1c:fb:7c:39:ec:2f:8d:31:47:
30:57:b1:cf:7a:2e:53:09:28:3a:f0:c8:cb:c0:b0:7b:89:29:
69:91:61:69:b1:4e:23:5a:37:53:23:b3:b9:51:c7:24:4b:51:
71:c7:bb:3d:dd:5f:95:2d:30:91:b2:5c:de:47:b1:c5:03:1b:
c2:1f:47:f2:b7:43:18:9b:c3:00:4d:19:67:51:b4:0e:b5:7f:
a2:25:4d:b0:d7:c1:2c:56:26:03:ba:20:f5:cb:67:15:80:bd:
3e:27:6f:41:62:d1:8e:04:de:30:41:16:cd:5c:83:00:d9:b0:
b6:26:4f:59:be:60:c4:1c:18:1e:b5:cd:e8:33:61:d5:6f:27:
6c:06:26:03:f6:41:f5:c5:02:0d:d8:e3:bf:22:1f:da:3e:0f:
fb:b8:1a:93:2f:f9:ad:50:4b:db:f9:d4:93:34:42:4b:2c:fe:
7f:a3:83:b3:4e:a9:40:a0:c1:e7:e6:36:ec:35:8a:48:f6:66:
1a:04:62:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:55:52 2025 by rpki-client