Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/SBAY3X0ag78zS0EUPjNLZb6SYSQ.roa
File: SBAY3X0ag78zS0EUPjNLZb6SYSQ.roa (raw, json)
Hash identifier: OydBmmEFHyhqDwhUUh/2di1wU6Dsu+xQxO0g1DcsLh4=
Subject key identifier: 48:10:18:DD:7D:1A:83:BF:33:4B:41:14:3E:33:4B:65:BE:92:61:24
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019427488F07EAE5A812CECB8C6C6A35E731
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/SBAY3X0ag78zS0EUPjNLZb6SYSQ.roa
Signing time: Thu 02 Jan 2025 13:50:54 +0000
ROA not before: Thu 02 Jan 2025 13:50:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60522
IP address blocks: 194.62.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:8f:07:ea:e5:a8:12:ce:cb:8c:6c:6a:35:e7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=481018dd7d1a83bf334b41143e334b65be926124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:95:3e:0f:47:79:45:70:3b:61:7d:ec:2d:7f:
4f:a8:8e:ac:91:a6:49:36:b2:77:0e:15:2a:7c:be:
a2:bf:cf:e0:20:2b:43:5f:fa:b0:11:8b:31:fd:df:
32:8a:f4:5d:02:e8:fa:b0:10:59:b9:5a:b1:71:02:
bd:87:fd:6b:26:fb:31:b6:23:03:f2:2d:b9:75:79:
02:cc:de:18:bd:05:f7:14:8a:4e:81:32:91:c8:e6:
b4:1d:00:47:9d:49:28:46:b0:c8:3d:61:b0:fd:50:
f4:da:7b:da:b4:a8:07:2d:da:97:68:96:87:d4:89:
8c:9a:69:e6:a8:4b:ea:0e:a0:e3:5f:86:67:19:65:
39:44:7a:11:cd:a8:10:2a:b2:4f:ae:ae:a5:b9:e8:
03:cf:96:5c:e8:2e:26:db:7d:e2:21:43:a8:69:a3:
ea:71:f1:7f:00:71:2a:98:ae:bf:cc:af:80:e7:64:
7b:fc:95:9d:74:8b:fc:6f:81:e5:11:4a:2e:65:45:
b7:07:76:e5:61:66:07:ef:7e:66:33:bb:ae:e5:14:
23:fa:3f:29:74:58:11:1e:b2:96:cc:a7:41:48:ad:
3c:0e:6f:ab:55:f7:b5:91:a3:51:d8:d8:ac:a6:29:
59:cc:91:af:f2:f3:65:6d:89:a9:b5:47:9d:14:b7:
40:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:10:18:DD:7D:1A:83:BF:33:4B:41:14:3E:33:4B:65:BE:92:61:24
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/SBAY3X0ag78zS0EUPjNLZb6SYSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.248.0/22
Signature Algorithm: sha256WithRSAEncryption
35:14:5f:ec:ef:13:20:3f:2a:15:8b:89:6e:c7:e9:13:b7:ab:
cc:65:b4:d2:0c:60:6e:d7:e8:a1:5d:c0:e5:c0:33:b7:62:a4:
07:e6:eb:0e:50:5f:1c:e4:f8:b8:fd:63:9b:18:03:08:91:24:
5e:02:cf:ec:8a:a5:af:c1:a3:61:8a:6d:53:2e:64:63:9b:01:
aa:a2:4d:e2:0b:59:03:1d:c2:75:b1:66:32:95:9c:6c:e8:b8:
cc:9f:33:e1:ae:94:6e:5b:1e:f6:7a:9d:98:df:91:34:29:d9:
9a:a4:bd:0e:f8:80:2c:5d:36:fb:7b:9c:91:76:44:32:02:8f:
12:e8:17:41:90:a4:a6:f8:fd:52:ac:05:c7:29:3e:9f:9d:5b:
6f:d7:d0:eb:99:83:bf:53:c9:61:68:3f:76:85:04:4c:88:37:
de:df:53:90:98:4c:dd:7c:10:f5:84:80:8a:00:31:bc:2e:98:
b3:67:19:dc:a3:66:78:56:7d:71:3b:13:94:4f:d9:ff:83:0c:
9c:eb:c5:32:87:4a:65:db:93:05:cd:48:53:b3:b6:d0:1f:38:
30:9e:13:03:80:18:e5:ed:65:65:f5:fb:5d:c6:fc:99:d7:26:
7c:cc:b7:e7:17:26:16:89:83:b0:30:83:e6:69:7f:e0:ba:a0:
d6:a2:ec:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:44:26 2025 by rpki-client