Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/SWriLr3nVJjiUOMV3ZQzft65uIQ.roa
File: SWriLr3nVJjiUOMV3ZQzft65uIQ.roa (raw, json)
Hash identifier: spVCEv9GHrawAsPw1EVJ3YvZeiUgfGRBjgYb4vGUxOc=
Subject key identifier: 49:6A:E2:2E:BD:E7:54:98:E2:50:E3:15:DD:94:33:7E:DE:B9:B8:84
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01947ACFCE7327D18BF58F31AFACF562327C
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/SWriLr3nVJjiUOMV3ZQzft65uIQ.roa
Signing time: Sat 18 Jan 2025 19:07:06 +0000
ROA not before: Sat 18 Jan 2025 19:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 185.226.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7a:cf:ce:73:27:d1:8b:f5:8f:31:af:ac:f5:62:32:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 18 19:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=496ae22ebde75498e250e315dd94337edeb9b884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fa:c0:b6:ae:2e:6f:5e:72:f5:7b:cd:b0:2b:
1a:6d:c2:1f:7f:23:78:44:f0:5a:26:ff:71:ca:d8:
37:16:c3:00:8f:36:89:fc:94:69:a1:7a:7d:e3:c7:
7e:a1:3d:91:c5:23:a9:ab:a1:31:c6:6b:78:45:5a:
2a:43:46:bb:e6:0d:a2:c4:bb:0f:1c:8b:d4:d3:41:
dc:6c:62:03:5b:05:8b:de:2e:b9:48:33:82:c4:75:
1a:19:c0:2f:c1:6a:62:ec:cd:17:76:49:f1:a8:cc:
6c:be:03:23:c7:e3:f7:3a:60:d6:6c:ce:eb:7a:7b:
a8:d7:f3:90:10:33:c1:d5:03:1c:4c:4b:ab:e2:71:
6f:16:71:67:44:0a:3b:51:db:4b:89:96:4a:be:fe:
9b:3e:78:fb:a9:cb:46:88:ab:3f:a1:c1:65:9f:ba:
de:0a:35:c1:21:a0:93:82:eb:9b:29:a9:d2:2b:dd:
2b:a6:71:3c:f5:04:60:a7:59:26:d6:64:5f:5b:47:
51:c3:5c:7e:c8:19:69:23:9e:3d:e0:7e:65:a8:71:
02:94:ef:d0:83:c4:fb:85:24:44:1a:77:80:2e:8e:
7c:46:52:93:4e:f4:90:bb:46:87:42:97:aa:f9:05:
d9:3a:d1:4e:34:6f:fc:3f:f8:19:41:59:82:12:d2:
ed:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6A:E2:2E:BD:E7:54:98:E2:50:E3:15:DD:94:33:7E:DE:B9:B8:84
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/SWriLr3nVJjiUOMV3ZQzft65uIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.181.0/24
Signature Algorithm: sha256WithRSAEncryption
09:49:5b:0c:ab:04:c0:d3:3b:8e:9a:8d:b7:25:c1:5e:4f:79:
cb:94:80:41:19:20:51:60:9e:9c:71:88:a6:f6:57:9a:3b:b4:
a3:74:47:c0:1d:eb:54:b3:6d:4d:12:7f:4a:40:19:d7:c3:85:
66:b0:70:7c:bc:32:d9:e7:25:d0:0d:9e:5f:2f:0e:c8:62:e7:
3d:f6:38:05:47:4f:63:ec:49:da:90:44:f4:b0:90:b8:9d:93:
a9:24:4c:39:50:43:c0:5b:7b:f6:7f:af:95:a9:61:f2:2d:fa:
e5:72:ec:77:bc:8f:5a:cb:9d:57:f7:3c:81:c0:47:cc:78:24:
e8:4d:d9:69:f6:8c:57:4b:44:c8:07:d0:7d:4a:e2:58:67:ad:
6a:ea:9e:88:04:04:b3:22:9b:c3:38:70:cb:1a:c5:4f:f1:dc:
02:3a:d8:d7:28:52:ab:f1:e0:b6:29:b3:f3:79:d7:21:4e:90:
69:58:9b:78:4f:50:11:60:cb:7e:fa:6f:b8:54:70:7d:0c:7b:
95:00:33:b3:74:24:78:2a:e7:71:17:2c:63:86:48:dd:ee:95:
30:34:98:59:f3:e3:7c:cd:bb:d6:dd:f9:cb:64:e7:d1:90:67:
e1:d1:d4:77:dd:7b:9d:3e:25:d7:c8:3b:95:ed:07:bc:4d:d9:
32:55:66:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:16:19 2025 by rpki-client