Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1SgwzQxvwynQlvMHXPKzjlz4FEU.roa
File: 1SgwzQxvwynQlvMHXPKzjlz4FEU.roa (raw, json)
Hash identifier: bBU4SUCzX9fziCmM5qJUhKibFl9cDMWp5vc/k0+gKJg=
Subject key identifier: D5:28:30:CD:0C:6F:C3:29:D0:96:F3:07:5C:F2:B3:8E:5C:F8:14:45
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01942068389814DB97ED8795333C2DCB7594
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1SgwzQxvwynQlvMHXPKzjlz4FEU.roa
Signing time: Wed 01 Jan 2025 05:48:08 +0000
ROA not before: Wed 01 Jan 2025 05:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 193.233.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:38:98:14:db:97:ed:87:95:33:3c:2d:cb:75:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d52830cd0c6fc329d096f3075cf2b38e5cf81445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:5f:b4:28:94:ef:86:4b:85:5a:cb:99:e9:
d9:48:c2:7d:1f:be:da:6d:ad:a2:fd:37:c8:fd:60:
fd:bc:53:89:09:b5:32:bb:dc:b5:34:36:18:d8:b0:
fe:25:d7:ba:db:dc:2e:16:ae:8b:e7:2d:72:f1:12:
b9:2d:b4:4c:cd:c8:ac:d0:1e:56:3f:62:59:50:c3:
13:f6:f8:c1:a5:f8:0c:33:57:5b:a2:79:ea:40:fc:
f8:fc:4b:6d:b7:90:43:e9:a3:07:1a:bb:22:04:26:
8f:6a:53:78:41:62:e7:aa:75:c4:c3:45:48:06:20:
f0:fb:c1:8d:46:d0:bd:e8:3c:b5:34:ee:4d:be:22:
e5:61:40:d1:23:5b:19:0c:83:af:bf:4d:b9:f4:ca:
a4:63:df:87:75:4f:48:7f:99:7b:b3:de:17:9d:94:
95:c6:e5:cb:02:67:87:bf:cd:4f:89:57:44:60:56:
e8:7f:16:d6:96:4e:46:f4:1d:77:ec:3b:c2:ba:a5:
1a:67:83:3d:80:14:cf:0f:4d:f6:ae:70:cf:4a:6d:
28:79:f3:2f:1f:a7:f3:80:73:63:ce:92:52:f7:f5:
7c:ee:a8:88:9d:6f:7f:7d:3d:a1:e0:37:eb:19:b1:
bc:19:61:43:6d:9d:f5:a6:27:b3:8d:b4:9e:ce:55:
9d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:28:30:CD:0C:6F:C3:29:D0:96:F3:07:5C:F2:B3:8E:5C:F8:14:45
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1SgwzQxvwynQlvMHXPKzjlz4FEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.108.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:5e:03:5f:2a:e8:a7:f3:d2:6e:39:59:a5:b9:0a:6b:8f:1b:
9a:34:74:cf:61:41:6e:83:4a:39:44:f8:c8:ba:b6:c0:99:8f:
93:6c:8d:83:5b:78:42:80:3c:58:ad:91:aa:b9:52:30:e5:66:
4b:e1:6c:be:1d:91:47:56:54:5b:19:43:73:45:f7:fd:10:be:
1e:99:ad:0a:17:d3:04:d8:1d:98:9a:1f:61:a3:2e:eb:49:ec:
a8:e4:4a:34:bd:28:da:ee:9b:9b:c6:8f:a4:bb:64:18:27:4e:
c5:cf:43:2e:97:d0:3e:7a:40:93:a1:c8:e8:84:a9:77:f4:58:
bd:88:53:00:62:42:25:74:b9:1d:54:d7:b8:3e:98:6b:5b:8b:
ac:5d:eb:9e:03:79:35:2a:1f:5c:9b:35:37:66:b8:63:28:e9:
ef:82:7a:49:f2:49:a4:e6:cf:75:5e:02:b5:aa:8b:c2:50:da:
a9:bf:fd:b8:00:07:8b:7a:bb:b8:86:60:59:66:b4:08:e8:f9:
a1:db:3a:d3:3a:8c:07:c5:99:93:72:12:8c:42:b7:ad:50:f2:
4d:c2:3d:7c:bb:ca:24:1e:1c:af:9e:6c:24:4c:b3:c3:e3:65:
47:78:11:2e:a5:58:76:05:54:bd:4d:35:bc:14:5e:30:4c:91:
0d:5b:7e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:12:06 2025 by rpki-client