Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/SmKw7AOI9JUtfz6HkGV4t9qJQqE.roa
File: SmKw7AOI9JUtfz6HkGV4t9qJQqE.roa (raw, json)
Hash identifier: GwxaToKhMxog5Qb6KLB212ESabEWepvnGaUrIpVp2N0=
Subject key identifier: 4A:62:B0:EC:03:88:F4:95:2D:7F:3E:87:90:65:78:B7:DA:89:42:A1
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01942369F0A757A20CB0E876C66DC6B9935E
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/SmKw7AOI9JUtfz6HkGV4t9qJQqE.roa
Signing time: Wed 01 Jan 2025 19:48:52 +0000
ROA not before: Wed 01 Jan 2025 19:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19762
IP address blocks: 194.69.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f0:a7:57:a2:0c:b0:e8:76:c6:6d:c6:b9:93:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 1 19:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a62b0ec0388f4952d7f3e87906578b7da8942a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:72:8b:ab:ae:45:d4:1f:fa:30:a3:6c:42:ef:
b7:61:13:f7:6e:ad:8e:18:2c:af:c2:6d:9f:32:17:
17:e4:00:f1:c2:90:34:ed:7c:ed:1a:69:45:a4:bb:
a7:8b:85:91:63:1e:ce:f4:00:23:ea:27:54:a4:a0:
ed:39:4d:d6:37:d7:b9:fc:88:31:d3:a8:e9:40:1a:
ab:c7:03:a8:f4:f0:89:36:2e:e5:83:02:81:bb:34:
ab:85:c2:c5:50:d3:b3:5e:ff:ac:c3:3f:e2:13:ae:
ed:5e:2f:6c:b3:f4:48:41:17:5b:07:75:11:3d:c6:
89:59:18:29:a7:cf:31:c5:51:35:06:ce:ce:e2:90:
b9:9f:bc:75:77:d6:06:74:f3:6e:5c:d9:1b:5c:9a:
84:38:47:54:d4:02:7a:c1:0f:4b:2a:c8:72:51:a0:
c9:1a:7a:df:6e:5b:f0:41:5b:00:44:f1:79:14:8b:
f7:d5:41:d4:0b:6b:d6:0f:3a:30:54:2f:c5:e9:1f:
2b:51:4e:81:25:5c:cb:6b:f6:83:7d:94:33:17:70:
a9:9f:4c:de:42:13:2e:d0:88:82:86:be:8f:66:83:
8d:f1:3d:68:e9:0a:04:95:cc:7d:7e:7e:f9:20:28:
8b:cc:46:3c:cd:41:57:d4:62:a0:80:ff:ee:91:47:
bf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:62:B0:EC:03:88:F4:95:2D:7F:3E:87:90:65:78:B7:DA:89:42:A1
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/SmKw7AOI9JUtfz6HkGV4t9qJQqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.160.0/24
Signature Algorithm: sha256WithRSAEncryption
90:49:79:e4:5c:83:49:bf:ec:4d:b5:0c:ea:3f:0f:45:54:94:
a5:17:8b:41:d0:fa:85:72:84:54:cc:8d:39:f6:eb:79:94:65:
27:67:c7:a2:9f:58:e7:80:88:fc:c7:6c:29:f7:45:bd:54:0c:
b2:58:d7:17:f2:a5:ab:c5:7f:9d:fe:f8:e0:67:fd:63:51:0e:
77:90:16:28:c9:29:78:1d:b6:a4:a1:fb:70:ee:68:7d:b9:f9:
0a:22:7e:00:b4:90:75:5b:91:5e:10:4f:a2:93:89:11:0a:25:
f6:11:f6:50:84:26:87:40:2c:6f:0d:06:dc:a5:ee:1f:95:66:
c6:11:f1:cc:fc:ef:74:2e:3c:af:c2:3f:16:de:84:c1:5c:de:
70:a0:40:86:27:00:d4:15:b4:e0:4d:2c:ab:c1:98:cd:a5:f0:
34:2d:0b:48:42:7b:6c:bf:5b:e9:4c:7a:b3:ce:0a:76:4e:3f:
95:7a:68:ae:9f:25:f6:1b:de:63:d5:9a:b1:cb:f8:d8:e2:04:
10:79:ec:cf:a3:42:2e:43:c4:86:7d:0b:29:d3:a8:ea:5a:ca:
c5:b6:cb:58:c8:1a:ae:6a:d6:bf:96:4d:9a:06:18:fd:61:be:
c0:ff:a3:df:53:3c:6a:9d:34:61:bb:98:1b:a1:a5:50:de:3e:
35:86:24:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjafCnV6IMsOh2xm3GuZNeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjUwMTAxMTk0ODUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTYyYjBlYzAzODhmNDk1MmQ3ZjNlODc5MDY1NzhiN2RhODk0MmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHKLq65F1B/6MKNsQu+3YRP3bq2O
GCyvwm2fMhcX5ADxwpA07XztGmlFpLuni4WRYx7O9AAj6idUpKDtOU3WN9e5/Igx
06jpQBqrxwOo9PCJNi7lgwKBuzSrhcLFUNOzXv+swz/iE67tXi9ss/RIQRdbB3UR
PcaJWRgpp88xxVE1Bs7O4pC5n7x1d9YGdPNuXNkbXJqEOEdU1AJ6wQ9LKshyUaDJ
GnrfblvwQVsARPF5FIv31UHUC2vWDzowVC/F6R8rUU6BJVzLa/aDfZQzF3Cpn0ze
QhMu0IiChr6PZoON8T1o6QoElcx9fn75ICiLzEY8zUFX1GKggP/ukUe/xQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEpisOwDiPSVLX8+h5BleLfaiUKhMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvU21LdzdBT0k5SlV0Zno2SGtHVjR0OXFKUXFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkWgMA0G
CSqGSIb3DQEBCwUAA4IBAQCQSXnkXINJv+xNtQzqPw9FVJSlF4tB0PqFcoRUzI05
9ut5lGUnZ8ein1jngIj8x2wp90W9VAyyWNcX8qWrxX+d/vjgZ/1jUQ53kBYoySl4
Hbakoftw7mh9ufkKIn4AtJB1W5FeEE+ik4kRCiX2EfZQhCaHQCxvDQbcpe4flWbG
EfHM/O90Ljyvwj8W3oTBXN5woECGJwDUFbTgTSyrwZjNpfA0LQtIQntsv1vpTHqz
zgp2Tj+VemiunyX2G95j1Zqxy/jY4gQQeezPo0IuQ8SGfQsp06jqWsrFtstYyBqu
ata/lk2aBhj9Yb7A/6PfUzxqnTRhu5gboaVQ3j41hiS8
-----END CERTIFICATE-----
Generated at Wed Feb 5 12:53:17 2025 by rpki-client