Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/SGQBvdPhJeyzXH46rCn1HprgoUQ.roa
File: SGQBvdPhJeyzXH46rCn1HprgoUQ.roa (raw, json)
Hash identifier: JigxCYquveWyuHmkXH4kT+LxBtbk4j6Ry0hBrLIoDFY=
Subject key identifier: 48:64:01:BD:D3:E1:25:EC:B3:5C:7E:3A:AC:29:F5:1E:9A:E0:A1:44
Certificate issuer: /CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Certificate serial: 019426D9CF20A7B7F54C5A31498F596A31E8
Authority key identifier: 05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/SGQBvdPhJeyzXH46rCn1HprgoUQ.roa
Signing time: Thu 02 Jan 2025 11:49:56 +0000
ROA not before: Thu 02 Jan 2025 11:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211702
IP address blocks: 193.163.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:cf:20:a7:b7:f5:4c:5a:31:49:8f:59:6a:31:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Validity
Not Before: Jan 2 11:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=486401bdd3e125ecb35c7e3aac29f51e9ae0a144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c6:85:29:51:29:fc:b6:a2:0f:28:89:9b:37:
27:01:dc:0a:38:33:6c:02:4f:31:9a:77:ba:68:a5:
14:39:07:db:13:6d:5a:13:4b:be:42:45:03:93:12:
03:df:8b:93:ff:3f:37:c2:97:a5:e1:df:19:c8:21:
c6:84:26:8f:22:f4:b7:ed:6b:36:57:9e:82:52:e8:
9b:3b:aa:66:01:44:74:ca:d2:f4:7d:40:a0:2f:1f:
f7:b4:10:bf:6f:41:0c:cc:5e:c0:cd:5f:44:cc:99:
1e:6f:08:9e:d4:38:2a:ef:2f:eb:e6:0d:39:12:b6:
8a:f0:c6:23:af:0e:16:8a:74:b3:ea:8a:8f:81:4f:
a7:68:47:22:5a:5e:9c:d1:29:e8:57:6a:99:71:1a:
7a:4e:59:ae:c5:0d:a3:c0:74:86:03:dd:af:01:0a:
11:08:13:0e:38:1c:25:fa:7f:70:4b:eb:c2:06:04:
0b:d3:68:f4:85:99:74:e8:d8:04:b7:b0:6b:72:60:
b7:53:5a:94:54:e2:e5:43:d5:79:01:19:98:18:09:
32:24:19:44:b7:cb:e3:a5:fd:e4:23:07:87:39:6c:
91:b0:8d:d2:d9:44:6c:25:9f:f1:13:66:f6:b1:6e:
f8:3b:b9:d5:6c:c9:4d:c9:f4:31:52:eb:51:f2:ba:
54:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:64:01:BD:D3:E1:25:EC:B3:5C:7E:3A:AC:29:F5:1E:9A:E0:A1:44
X509v3 Authority Key Identifier:
keyid:05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/SGQBvdPhJeyzXH46rCn1HprgoUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.144.0/24
Signature Algorithm: sha256WithRSAEncryption
17:36:c0:a1:a7:32:49:ae:61:71:53:14:d3:d3:3a:70:ff:bf:
c0:c8:00:4a:95:ea:79:e0:ed:cc:08:ca:47:6b:90:47:1a:84:
ed:d8:43:84:2e:da:02:fd:e5:9c:3c:3e:92:a6:f1:17:e3:7e:
d3:3d:ab:b9:4d:e6:8e:e8:2e:76:c6:e8:9b:a1:2a:22:62:b0:
d3:f0:0e:9c:23:68:ec:e2:6c:b2:58:00:97:fb:f6:00:26:b2:
98:5f:ee:2d:19:42:37:d2:1a:e1:c3:22:70:fd:b9:52:40:8d:
4e:7d:f8:23:c0:62:39:81:95:70:64:8c:ca:61:3e:8a:29:0f:
51:30:2e:27:a4:f3:db:65:0e:98:df:50:25:39:d1:6b:55:38:
35:19:c0:38:c0:bb:7f:12:64:1b:c1:c3:da:7c:f1:32:24:5c:
2e:7f:c6:f1:cc:79:33:59:42:00:9e:a3:0e:fc:19:7a:a0:17:
33:b5:e3:df:63:aa:d1:29:cb:1b:24:c8:33:91:48:18:9c:4a:
f9:c1:f0:8b:15:f2:20:4a:c9:c4:cd:ea:a2:c2:01:d6:ac:f1:
65:09:ab:c8:f8:a1:c3:75:8b:c4:87:cb:93:cd:2f:b6:30:86:
8e:b2:d2:bf:67:fa:f6:83:c5:4f:d3:7e:16:17:16:d1:ce:e6:
4a:9d:83:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:45:01 2025 by rpki-client