Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/S6yD0xSsAdYMuFY-SqJP0As2TGI.roa
File: S6yD0xSsAdYMuFY-SqJP0As2TGI.roa (raw, json)
Hash identifier: NWiZKpb2JP7oKryMsUVnNHlDjQunxGKrj2ir9mx8k8E=
Subject key identifier: 4B:AC:83:D3:14:AC:01:D6:0C:B8:56:3E:4A:A2:4F:D0:0B:36:4C:62
Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial: 019421B1C1D4C8D400A0F99C9699420D7847
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/S6yD0xSsAdYMuFY-SqJP0As2TGI.roa
Signing time: Wed 01 Jan 2025 11:48:04 +0000
ROA not before: Wed 01 Jan 2025 11:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15491
IP address blocks: 92.241.64.0/19 maxlen: 24
109.238.224.0/20 maxlen: 24
185.51.16.0/22 maxlen: 24
213.131.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c1:d4:c8:d4:00:a0:f9:9c:96:99:42:0d:78:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
Validity
Not Before: Jan 1 11:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bac83d314ac01d60cb8563e4aa24fd00b364c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:60:be:24:3c:1f:d5:44:14:b7:fa:21:e1:15:
87:8d:3a:54:70:71:39:ed:64:f7:60:45:f7:dc:4d:
17:51:4e:20:d2:1d:ad:a7:dc:6e:52:7b:19:3f:f2:
4a:43:6c:08:63:ac:3a:30:26:d8:ef:96:7f:f1:49:
f7:7a:fd:56:fb:ed:4f:b1:b0:fa:ca:59:4c:a6:6c:
48:62:cf:0d:5c:e3:c8:66:81:1b:b7:1e:e3:c1:94:
02:f0:b5:70:a5:3b:78:8b:08:85:60:b6:09:77:99:
4b:e4:39:b1:4b:5b:9d:32:5f:75:c7:12:3a:29:0a:
dc:3c:63:83:f3:be:4f:65:95:7c:d4:39:5a:1d:8d:
a3:7d:4e:df:2e:b5:ba:14:0e:3e:88:11:32:09:ee:
22:11:20:25:74:31:b3:de:99:5b:3b:ef:04:be:ed:
4d:36:b6:ea:9e:a3:bb:31:14:22:2a:3d:57:b2:13:
8e:be:2b:7b:83:5e:e4:34:19:d5:45:7f:db:fa:11:
5d:34:04:9d:6f:d2:69:4e:f5:87:d7:94:e2:b2:44:
6d:1b:1c:46:38:c4:6b:8b:8b:98:06:76:68:e8:6f:
ee:4e:22:ed:a4:ca:e0:f5:aa:06:7b:2f:58:0a:03:
9d:99:45:23:02:b3:fc:45:dc:9c:3f:dd:35:c6:f5:
37:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AC:83:D3:14:AC:01:D6:0C:B8:56:3E:4A:A2:4F:D0:0B:36:4C:62
X509v3 Authority Key Identifier:
keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/S6yD0xSsAdYMuFY-SqJP0As2TGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.241.64.0/19
109.238.224.0/20
185.51.16.0/22
213.131.32.0/19
Signature Algorithm: sha256WithRSAEncryption
ac:74:f8:88:18:9a:67:f4:8a:b1:97:e5:db:a5:66:8f:47:21:
de:ac:5e:df:a0:3d:a8:db:e8:8b:dc:43:f4:8e:59:f9:63:b8:
62:5a:6c:d6:63:1d:4e:5c:1a:26:74:01:65:3c:d2:48:cf:35:
aa:9e:e0:16:50:8e:27:4d:34:1c:37:a8:19:3b:2f:66:15:85:
f0:de:6d:0f:d3:4f:cb:1f:af:37:aa:39:2c:0a:db:5a:f3:ee:
17:c9:73:a3:87:4a:f0:77:15:ec:8a:df:89:55:02:f4:8c:94:
4c:f5:3a:85:ed:9c:b9:e0:f4:0a:44:ea:2d:de:1e:3f:01:55:
a5:0c:39:65:dd:cf:57:8c:68:f5:14:d5:85:70:72:11:38:6e:
50:5a:59:aa:e3:47:11:55:36:e7:3c:11:79:48:37:84:d5:1d:
f1:e2:a8:17:07:1d:f2:80:fe:a2:54:77:ee:28:2d:fd:74:1e:
ec:d8:67:16:86:c1:2a:d7:c2:90:51:5c:54:82:34:4c:85:96:
d4:11:6b:32:fe:f4:c0:fe:20:82:20:43:1a:04:56:22:aa:b8:
7e:60:9b:87:28:45:ad:75:f9:98:3a:e1:03:bc:6e:75:c5:7f:
27:8a:18:26:aa:f1:c1:06:fb:e6:fa:3f:82:9c:7f:3b:f7:dc:
58:62:80:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:55:35 2025 by rpki-client