Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/SIYGgJXCeaCBIpqe-fEHkI1-HJw.roa
File: SIYGgJXCeaCBIpqe-fEHkI1-HJw.roa (raw, json)
Hash identifier: P+RDHUaG0eWluHxWMnMCO20mZC8r5TcHXwdmUuDZof0=
Subject key identifier: 48:86:06:80:95:C2:79:A0:81:22:9A:9E:F9:F1:07:90:8D:7E:1C:9C
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0194282827BB43AC1122A91FC75FC81F2317
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/SIYGgJXCeaCBIpqe-fEHkI1-HJw.roa
Signing time: Thu 02 Jan 2025 17:55:07 +0000
ROA not before: Thu 02 Jan 2025 17:55:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200458
IP address blocks: 78.83.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:27:bb:43:ac:11:22:a9:1f:c7:5f:c8:1f:23:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4886068095c279a081229a9ef9f107908d7e1c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:56:c7:c0:87:00:d9:65:80:e0:ad:2b:de:
31:16:ac:ea:72:a7:95:d1:28:0c:37:6d:98:7f:5c:
3e:8f:d2:6c:b0:32:36:3b:fb:06:5b:4b:17:bd:28:
a8:88:23:05:22:42:37:ad:1e:e2:81:f9:59:b6:b4:
82:21:c0:c3:2a:6d:d2:f3:6b:bc:ad:42:79:11:30:
39:b0:77:06:22:82:f3:bf:22:60:e8:87:2d:43:8a:
72:d4:06:c8:88:f6:ac:35:a8:75:8d:58:5f:b9:c8:
bb:dd:a3:84:fb:f8:0a:3d:11:07:ae:45:90:63:ea:
68:39:f6:38:87:55:9b:8b:18:3e:e5:b6:4c:d6:8b:
71:f2:d3:03:09:6d:84:76:18:eb:78:3a:3c:ce:b7:
6a:37:d7:6d:9a:95:f4:9d:78:07:fd:1f:ee:51:7b:
79:9d:46:46:57:d7:0d:51:3c:88:89:90:02:17:92:
56:89:de:6a:8a:46:e2:6d:a5:c5:d5:06:09:8c:83:
a9:48:ef:44:d9:a8:a2:9e:bc:6a:0b:eb:e2:79:f4:
12:e9:a5:36:9a:70:85:69:2e:35:18:50:8d:c6:d5:
5a:58:da:cb:3e:4d:4d:ae:05:82:e7:7b:8c:5e:61:
82:da:92:e8:9f:5c:2f:53:f3:35:d4:75:14:34:06:
48:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:86:06:80:95:C2:79:A0:81:22:9A:9E:F9:F1:07:90:8D:7E:1C:9C
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/SIYGgJXCeaCBIpqe-fEHkI1-HJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.83.235.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:5b:62:1b:8c:a5:90:22:b4:99:9d:ab:e6:86:c3:eb:8e:ce:
64:66:86:77:cf:e6:1b:33:03:98:d3:01:f1:18:f9:82:7d:b0:
99:a5:13:3e:30:a0:3a:2b:c9:4e:1c:1d:b6:6e:5c:86:8b:ca:
69:10:72:59:8b:2e:05:29:d2:f4:43:b7:a8:6c:33:c0:06:88:
fa:76:5e:68:8c:0a:b0:16:5a:25:67:2e:b4:5d:44:7f:87:0c:
3e:1e:37:3c:b9:25:af:39:43:04:fe:82:96:b8:0f:73:a5:28:
f9:47:e9:62:35:d1:21:1c:ad:b5:f0:53:7a:17:a2:8c:03:c3:
f0:cf:16:d0:0e:c5:cc:b6:21:e2:ca:f3:14:dd:73:8d:3e:cf:
0c:1e:21:97:f0:5b:36:d3:d6:60:67:00:f8:4c:53:e1:78:19:
65:9c:b4:42:12:4e:b9:04:02:5e:54:09:a6:fa:56:94:26:b0:
92:29:7c:11:1f:a7:87:e9:b4:fe:a7:da:04:00:97:2e:92:aa:
a2:89:8d:f3:43:74:10:bb:28:42:40:ea:e6:68:a6:d6:13:94:
92:ef:f2:92:61:17:99:59:d8:91:72:f0:9c:87:f0:fa:48:fd:
4d:2b:91:3f:34:6c:3e:9a:45:52:41:4c:dd:75:db:93:e5:c7:
be:80:52:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:28 2025 by rpki-client