Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/SZniDvbA3xGyko4uBw0wSK1iTzI.roa
File: SZniDvbA3xGyko4uBw0wSK1iTzI.roa (raw, json)
Hash identifier: kzzWmCXEeVZh12Lzyl4Un0cqdmZrru/ISSndxfTEtCc=
Subject key identifier: 49:99:E2:0E:F6:C0:DF:11:B2:92:8E:2E:07:0D:30:48:AD:62:4F:32
Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial: 0194228DBA6CB2415BBB2895CC261D856D3D
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/SZniDvbA3xGyko4uBw0wSK1iTzI.roa
Signing time: Wed 01 Jan 2025 15:48:21 +0000
ROA not before: Wed 01 Jan 2025 15:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199763
IP address blocks: 2a01:e281:a200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ba:6c:b2:41:5b:bb:28:95:cc:26:1d:85:6d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Validity
Not Before: Jan 1 15:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4999e20ef6c0df11b2928e2e070d3048ad624f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ea:44:31:e8:17:50:3d:2b:05:d3:0f:b3:31:
31:78:2a:95:0c:88:61:f6:49:8f:38:37:e7:85:09:
34:ed:51:6c:3e:f3:ac:93:f4:02:64:1c:23:7c:cc:
2e:7f:fc:8c:ce:05:8c:37:3b:e6:a1:cd:e2:22:fa:
81:98:b8:e8:fa:a5:94:da:30:86:4c:97:46:d7:b1:
21:2a:97:ce:07:7f:6a:11:ff:de:b4:fa:b9:5a:44:
61:14:7f:1d:ff:d2:aa:18:44:bd:ae:a9:8d:58:26:
ca:c3:af:89:89:16:ef:b7:71:a7:d7:b1:f7:7e:cd:
a4:8c:82:87:82:2d:fa:17:b3:96:65:7d:7d:67:f1:
2b:96:cd:e3:25:bd:4f:5d:80:7f:0d:77:c6:36:d7:
07:ac:91:a2:f6:46:9e:61:88:1c:92:5b:33:96:5a:
3d:df:81:1e:3e:2c:39:1c:ec:9e:91:08:67:d8:7e:
72:71:2a:d7:f8:c3:a5:c3:0e:28:ee:70:49:3a:ef:
ea:83:29:b8:21:59:2d:35:9c:44:39:a8:56:5d:52:
0a:c2:61:39:28:96:ac:0d:6b:a2:4e:a4:d2:ba:b4:
99:f4:35:90:31:5d:89:81:97:cf:ec:74:b9:00:1b:
c5:e3:a7:c2:bd:95:f9:e5:e6:ec:ca:22:07:9c:c6:
5f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:99:E2:0E:F6:C0:DF:11:B2:92:8E:2E:07:0D:30:48:AD:62:4F:32
X509v3 Authority Key Identifier:
keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/SZniDvbA3xGyko4uBw0wSK1iTzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e281:a200::/40
Signature Algorithm: sha256WithRSAEncryption
37:13:14:be:44:c1:fe:9d:93:04:c5:ec:8f:65:2c:96:81:a5:
f5:98:b5:87:d7:be:d7:ff:f1:91:51:c7:6c:85:dc:ed:ed:b7:
3f:ab:44:16:34:8b:a5:6b:ae:34:df:fa:75:08:2a:cf:46:d3:
81:01:f0:37:9b:f2:37:43:91:1d:04:57:6a:c2:76:66:59:4e:
21:bc:4d:36:a1:00:6a:26:da:d4:5e:b1:86:e8:d8:18:98:c8:
12:76:4d:b5:33:fc:07:96:6f:a5:3b:c2:75:6a:6a:1c:ee:2c:
68:2d:c0:d4:8f:2d:b0:40:87:e1:67:30:23:fb:ec:ce:e1:57:
c9:07:b3:55:50:33:cc:d4:57:26:e2:0c:41:87:a2:39:b5:40:
e3:b3:29:c9:e2:ff:64:04:03:b7:8d:15:5e:26:69:a4:07:e7:
d8:48:6b:1c:e2:1b:c8:64:81:c8:4f:31:3d:6a:3f:4d:7f:b8:
8b:00:0d:b3:61:2a:54:ad:b4:fe:27:62:99:4f:91:83:c2:c2:
a0:c6:96:29:c1:f4:b3:d8:aa:22:8d:7c:28:a8:dc:a5:23:aa:
7c:25:57:b6:59:b1:8d:44:ed:ad:98:4d:5f:e4:74:45:43:3b:
b1:04:83:1d:52:92:ce:35:09:94:25:70:2c:68:35:bb:41:88:
91:55:4e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:48:17 2025 by rpki-client