Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/snSvPYVkGepL_9GgsNIGnoIWw44.roa
File: snSvPYVkGepL_9GgsNIGnoIWw44.roa (raw, json)
Hash identifier: T0HMAvigAIpTuY/J9VuaKFj34+4Tc7VdD2Bhy8snzbA=
Subject key identifier: B2:74:AF:3D:85:64:19:EA:4B:FF:D1:A0:B0:D2:06:9E:82:16:C3:8E
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 019421B207DEA13ECB3D9C287D7FB2DC2863
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/snSvPYVkGepL_9GgsNIGnoIWw44.roa
Signing time: Wed 01 Jan 2025 11:48:23 +0000
ROA not before: Wed 01 Jan 2025 11:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14576
IP address blocks: 95.181.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:07:de:a1:3e:cb:3d:9c:28:7d:7f:b2:dc:28:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Jan 1 11:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b274af3d856419ea4bffd1a0b0d2069e8216c38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fb:08:00:8f:37:24:34:f9:09:e1:5f:85:fc:
a3:13:cc:c9:a0:16:07:27:70:66:7b:c5:0d:fd:3f:
73:c3:3e:cb:b5:85:47:83:b0:ed:90:a9:9b:1c:2e:
f9:f0:cf:91:40:16:e9:4c:ad:d9:83:21:53:dc:4f:
ba:fb:32:6f:29:9d:c8:e6:08:22:14:8a:31:d7:c6:
ee:3d:8d:74:6b:a8:6d:ea:48:8c:1b:94:79:ea:e9:
80:5c:08:6e:40:5c:c6:ae:d0:12:dc:9e:f4:d7:68:
42:c7:88:88:2e:29:47:47:d3:ac:4c:92:fb:39:ff:
c9:6e:1c:62:cb:a8:d7:ae:6b:ca:c0:81:f4:5f:20:
42:3b:e8:c1:e0:97:94:3f:d1:fc:37:b0:1b:43:b5:
b2:a5:cb:fe:15:4f:6d:78:7c:ad:23:c5:56:9f:dd:
48:1d:73:a6:4e:46:9a:9e:7a:75:c7:fa:23:c2:41:
e1:4b:f1:fe:7c:a9:d7:26:3c:8b:9a:cc:49:79:f1:
da:b6:69:05:1f:e1:a3:fa:15:bc:c7:f6:02:10:e9:
b6:d7:16:aa:0e:fe:c2:66:97:1b:ea:ec:96:12:0f:
21:b4:d6:a1:72:30:5c:56:8f:9b:cb:55:f8:a1:20:
56:53:1f:82:7c:03:b5:46:df:d2:d7:21:5b:9d:00:
e7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:74:AF:3D:85:64:19:EA:4B:FF:D1:A0:B0:D2:06:9E:82:16:C3:8E
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/snSvPYVkGepL_9GgsNIGnoIWw44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.148.0/22
Signature Algorithm: sha256WithRSAEncryption
08:11:36:6a:b3:f5:5d:d9:d8:6a:5d:6e:28:1b:7b:8b:fa:ae:
1a:8e:73:7d:f3:1b:59:08:0e:79:06:2b:ac:1d:b3:01:dc:27:
86:45:9e:75:37:a1:17:4f:a0:b0:dc:70:b1:b2:cd:0c:ed:0b:
e2:d0:cd:dd:11:c6:3b:89:9c:39:11:75:56:26:5b:a5:2a:19:
1f:55:83:8e:97:97:94:59:5e:cb:5e:f5:44:13:2a:75:d0:3e:
84:4b:59:bd:d2:32:14:21:84:8d:11:b2:a0:ba:75:32:e7:6a:
6b:df:cd:29:53:ee:79:9a:c7:96:19:78:8f:fc:11:33:89:1a:
49:bd:47:23:12:06:95:38:10:2d:8f:4a:cf:89:1f:e9:29:c6:
aa:a8:f2:88:57:17:f3:0f:0d:2c:8c:41:5a:13:50:13:a7:14:
1c:6f:07:24:f6:ff:d0:81:5b:cd:0c:2c:85:de:40:45:1a:23:
bd:4d:bc:c3:f0:02:b7:2e:1f:08:05:c3:ae:c2:ad:c6:18:70:
2b:ea:1f:e7:b8:62:7a:1c:d1:84:4e:c1:c9:8a:02:95:ba:37:
18:62:5d:a7:12:ad:f8:51:e2:29:a5:c2:64:ab:6a:fa:18:f9:
bf:b9:89:02:24:65:5e:61:ba:a3:63:6d:c1:df:3f:54:7d:d7:
62:c5:f5:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsgfeoT7LPZwofX+y3ChjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1
YTNjMjAwHhcNMjUwMTAxMTE0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjc0YWYzZDg1NjQxOWVhNGJmZmQxYTBiMGQyMDY5ZTgyMTZjMzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/sIAI83JDT5CeFfhfyjE8zJoBYH
J3Bme8UN/T9zwz7LtYVHg7DtkKmbHC758M+RQBbpTK3ZgyFT3E+6+zJvKZ3I5ggi
FIox18buPY10a6ht6kiMG5R56umAXAhuQFzGrtAS3J7012hCx4iILilHR9OsTJL7
Of/Jbhxiy6jXrmvKwIH0XyBCO+jB4JeUP9H8N7AbQ7Wypcv+FU9teHytI8VWn91I
HXOmTkaannp1x/ojwkHhS/H+fKnXJjyLmsxJefHatmkFH+Gj+hW8x/YCEOm21xaq
Dv7CZpcb6uyWEg8htNahcjBcVo+by1X4oSBWUx+CfAO1Rt/S1yFbnQDnqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLJ0rz2FZBnqS//RoLDSBp6CFsOOMB8GA1UdIwQY
MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt
Mzk5ZmM5NjkzYjIyLzEvc25TdlBZVmtHZXBMXzlHZ3NOSUdub0lXdzQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy
LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCX7WUMA0G
CSqGSIb3DQEBCwUAA4IBAQAIETZqs/Vd2dhqXW4oG3uL+q4ajnN98xtZCA55Bius
HbMB3CeGRZ51N6EXT6Cw3HCxss0M7Qvi0M3dEcY7iZw5EXVWJlulKhkfVYOOl5eU
WV7LXvVEEyp10D6ES1m90jIUIYSNEbKgunUy52pr380pU+55mseWGXiP/BEziRpJ
vUcjEgaVOBAtj0rPiR/pKcaqqPKIVxfzDw0sjEFaE1ATpxQcbwck9v/QgVvNDCyF
3kBFGiO9TbzD8AK3Lh8IBcOuwq3GGHAr6h/nuGJ6HNGETsHJigKVujcYYl2nEq34
UeIppcJkq2r6GPm/uYkCJGVeYbqjY23B3z9UfddixfU3
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:14 2025 by rpki-client