Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/SfRTDZQMTSREWX48KPyCH3PZb0c.roa
File: SfRTDZQMTSREWX48KPyCH3PZb0c.roa (raw, json)
Hash identifier: GokIaaFKU+t7QhU0ptxEtmjhzPTrlfaP/5gs1CtzTHo=
Subject key identifier: 49:F4:53:0D:94:0C:4D:24:44:59:7E:3C:28:FC:82:1F:73:D9:6F:47
Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial: 019427482B0B677BB2891C7A526A04FE8A32
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/SfRTDZQMTSREWX48KPyCH3PZb0c.roa
Signing time: Thu 02 Jan 2025 13:50:28 +0000
ROA not before: Thu 02 Jan 2025 13:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202306
IP address blocks: 78.153.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2b:0b:67:7b:b2:89:1c:7a:52:6a:04:fe:8a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49f4530d940c4d2444597e3c28fc821f73d96f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7b:d1:3a:fe:5c:4f:9e:49:49:52:11:03:25:
63:59:ba:91:3d:89:b7:20:f4:15:67:3d:77:22:ff:
5a:ef:a8:3f:6d:d7:1b:43:6f:ad:ca:c1:24:4c:d6:
7c:34:c4:71:98:18:3c:77:78:24:2a:e0:1f:46:f6:
d7:0d:08:4f:96:26:6d:92:40:63:37:2f:4f:2a:50:
eb:6e:fc:19:a2:fd:1a:44:d7:19:eb:f5:fd:06:f5:
93:d4:cd:75:da:84:98:c2:87:35:17:83:5b:4c:6e:
8a:3d:fd:a2:55:31:50:5a:55:82:5b:fc:07:a9:66:
59:73:ab:80:27:16:fd:10:c9:18:db:06:ff:01:3b:
f1:ea:20:01:10:61:da:a4:92:1c:29:3e:67:24:1d:
57:a3:25:42:1e:30:3b:ef:2b:b6:b6:14:94:0d:b7:
79:28:bc:54:dc:11:c6:38:59:5d:e1:d6:56:85:2c:
12:06:a3:d9:d5:61:27:1b:16:04:ec:ac:dc:9d:51:
82:78:ae:20:23:5f:49:92:30:f1:7f:af:ce:14:25:
c6:8d:d1:9f:8d:01:07:52:c7:c5:c2:52:d2:07:ee:
bf:98:6c:5c:35:01:ed:7b:2b:e0:a9:16:ea:23:28:
c6:1f:71:60:db:7a:ff:51:d6:da:54:23:6a:f5:87:
2c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F4:53:0D:94:0C:4D:24:44:59:7E:3C:28:FC:82:1F:73:D9:6F:47
X509v3 Authority Key Identifier:
keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/SfRTDZQMTSREWX48KPyCH3PZb0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.153.140.0/24
Signature Algorithm: sha256WithRSAEncryption
48:04:ac:27:10:a9:fe:4f:a3:6c:6b:11:03:b3:58:71:0b:5d:
59:98:c2:05:b0:c2:38:98:6b:f0:d9:cc:3f:e9:f9:79:3f:22:
1a:5b:ab:9d:9d:57:b1:22:82:33:34:df:6c:a4:b1:9f:f6:6f:
41:8c:dc:46:6f:8e:8e:83:cb:42:70:48:dd:76:47:4b:de:27:
1c:f8:03:a3:2b:77:96:3f:5e:7b:1b:34:83:af:22:e6:bd:04:
b4:55:69:1a:76:3b:22:b0:5d:70:fc:71:ef:84:d5:a5:2c:d6:
3a:b5:df:cc:e5:e0:15:dc:71:a1:5d:8c:13:0b:68:5e:75:bb:
d6:02:0f:36:61:28:e2:9b:05:96:25:48:e4:7f:b2:a0:0c:40:
b7:90:27:c5:60:43:60:1e:c2:b0:1b:eb:eb:c7:7a:83:33:a9:
9f:d0:8f:b3:08:b8:66:e0:00:f3:52:49:b6:f0:b6:15:60:0e:
cb:ce:82:4a:c8:08:86:51:66:17:fb:c5:48:b0:5c:96:24:93:
29:cd:e5:d8:b1:02:86:1e:d1:a3:b7:14:a0:05:1f:b8:3b:49:
cd:48:e6:99:df:f5:3f:d8:a1:57:28:c7:67:8a:07:be:6b:e9:
25:d0:f8:4c:92:4b:64:5b:7c:1a:0b:cd:44:db:29:f0:47:79:
b6:f3:20:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:30:31 2025 by rpki-client