Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/SalDxwYnKzervGIcZp186xtzhug.roa
File: SalDxwYnKzervGIcZp186xtzhug.roa (raw, json)
Hash identifier: EtmDhhah0eA3Tfn8nv8gHra13dzs3VvNRMhkqeNatXs=
Subject key identifier: 49:A9:43:C7:06:27:2B:37:AB:BC:62:1C:66:9D:7C:EB:1B:73:86:E8
Certificate issuer: /CN=8794395ac822dfe01165216c7781ffd61db28d5b
Certificate serial: 019427470E692036BA1B823847669E0B8CD6
Authority key identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/SalDxwYnKzervGIcZp186xtzhug.roa
Signing time: Thu 02 Jan 2025 13:49:15 +0000
ROA not before: Thu 02 Jan 2025 13:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49824
IP address blocks: 185.46.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:0e:69:20:36:ba:1b:82:38:47:66:9e:0b:8c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794395ac822dfe01165216c7781ffd61db28d5b
Validity
Not Before: Jan 2 13:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49a943c706272b37abbc621c669d7ceb1b7386e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a0:98:5b:e6:b1:c8:46:94:a1:47:c9:75:57:
2a:ab:bf:68:50:d4:f6:c8:2c:60:7a:50:0f:24:bd:
a8:8e:63:0b:61:42:16:2c:b6:9d:ef:96:d8:61:6d:
cf:76:69:ee:ca:a9:78:ef:26:fb:53:4c:1f:68:c2:
d4:40:36:ed:c9:23:8f:e5:8a:e4:ff:6c:ba:44:d9:
a0:e7:da:b8:5b:43:bc:24:9f:e4:27:40:65:22:a3:
8e:58:7b:94:69:de:89:be:90:cb:d7:05:83:cf:01:
a7:fe:3f:f3:3c:0c:42:9c:ac:ea:50:52:36:95:c4:
72:67:72:8c:87:0c:b1:20:f8:14:e3:fd:80:f9:77:
0d:6e:3c:41:23:cc:f5:ea:d1:b7:2a:6f:e2:5c:26:
a1:2a:55:eb:b5:7d:46:eb:b8:a9:04:27:5b:8c:44:
d7:a8:20:a2:98:7e:19:f4:99:f9:13:b3:88:c7:78:
c3:6a:93:96:57:a4:c8:5c:aa:0e:af:cd:1e:29:9e:
e4:68:ba:fd:82:c7:31:90:63:f4:7c:79:0c:0b:c2:
1f:b9:d3:a0:72:3b:81:15:b4:d4:7d:78:e4:68:8f:
08:1e:66:4c:cb:ed:7f:60:a8:ec:a4:7a:1a:63:d1:
49:f4:b9:b7:f6:90:51:a4:95:1b:c8:a7:2f:ea:02:
f0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A9:43:C7:06:27:2B:37:AB:BC:62:1C:66:9D:7C:EB:1B:73:86:E8
X509v3 Authority Key Identifier:
keyid:87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/SalDxwYnKzervGIcZp186xtzhug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.143.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:a5:43:b3:ec:c0:7a:df:42:34:1e:b6:ba:38:c5:50:20:7b:
f9:bd:17:87:97:2a:f8:24:7e:5f:3c:bc:b8:46:5f:f0:b6:38:
dd:9e:2e:ee:05:00:b8:bd:bc:ab:f7:61:e9:e5:a6:ba:6b:69:
7c:d9:ed:ac:97:4e:3f:6e:f9:63:8d:fc:3e:de:6b:a8:0c:4e:
47:ad:70:ae:7e:92:1d:84:99:c0:ae:ed:61:ef:59:12:5f:5a:
26:61:6b:ba:ab:f4:c4:5b:81:08:db:59:d3:88:79:f1:c5:95:
27:de:45:6d:5c:c6:46:03:80:1d:43:2f:47:04:a6:09:b9:3d:
66:dc:b9:62:78:ab:01:d6:61:18:8b:03:91:e7:dc:dd:49:88:
7d:bf:48:bb:26:c1:68:ab:55:e6:ae:af:d5:fb:12:e4:8a:7c:
f1:fd:95:53:9a:40:a3:cb:ad:1a:8f:9f:f0:dc:05:98:17:e3:
2a:e5:21:57:0f:7f:2a:92:67:ef:d2:2f:56:89:25:74:ae:4a:
9a:83:81:1e:4c:22:56:4c:9e:13:7f:84:31:63:ce:42:4b:9f:
3b:8d:32:db:2d:ec:9c:93:ab:23:44:6c:c1:4e:08:01:98:da:
1b:b0:dd:7a:c7:be:7e:e9:25:1c:8b:d8:13:89:d4:30:7c:87:
48:c4:c3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:52 2025 by rpki-client