Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/SFEaLCcaSPqW-NAacKDtjgx58ew.roa
File: SFEaLCcaSPqW-NAacKDtjgx58ew.roa (raw, json)
Hash identifier: OMHSr2CJgaO8nulVRKhQLnfgujY5dtYfYIWPqUiWupI=
Subject key identifier: 48:51:1A:2C:27:1A:48:FA:96:F8:D0:1A:70:A0:ED:8E:0C:79:F1:EC
Certificate issuer: /CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Certificate serial: 0194258F27AD3C1E12B096C160ABC5BD0D8C
Authority key identifier: 5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/SFEaLCcaSPqW-NAacKDtjgx58ew.roa
Signing time: Thu 02 Jan 2025 05:48:46 +0000
ROA not before: Thu 02 Jan 2025 05:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199524
IP address blocks: 185.105.1.0/24 maxlen: 24
185.105.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:27:ad:3c:1e:12:b0:96:c1:60:ab:c5:bd:0d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Validity
Not Before: Jan 2 05:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48511a2c271a48fa96f8d01a70a0ed8e0c79f1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:51:b3:93:68:ad:6d:86:5c:f3:b7:ab:78:15:
24:a3:bb:7e:70:cb:94:1d:9f:7a:9b:79:3d:8f:f1:
fd:69:84:e7:46:b8:06:c3:da:1f:d6:a6:b5:fa:3c:
b5:2f:db:5e:72:5b:84:a5:71:fa:ec:95:a5:ef:37:
9d:1e:bc:a9:a4:39:60:2c:81:9f:8d:04:ae:3a:58:
50:e0:6d:4b:b1:31:af:ae:ea:d8:80:7d:29:d7:5f:
d9:ee:d3:4d:c2:b4:5e:7e:ae:dc:9d:ea:76:5d:80:
7a:c9:8b:51:10:41:e2:8d:98:6f:53:7c:5d:ca:e3:
02:b6:35:88:fe:f5:7b:57:fe:6b:88:e8:7e:c1:9b:
5a:b1:dd:14:52:6b:c0:50:6e:c0:f4:b7:94:9d:50:
f1:7f:68:36:fa:a5:f4:fe:d0:d8:8d:9c:55:d4:3c:
d5:f2:54:d4:cc:1b:75:58:49:39:5c:78:60:69:2e:
8b:1c:17:a4:ce:26:bd:af:f6:6e:1d:c0:81:c6:60:
f9:46:67:9d:2a:a9:c2:a0:dd:c5:6d:55:5d:a2:f8:
fb:82:68:4d:17:6e:5f:f4:8d:50:64:44:e2:5d:88:
9d:93:a9:0e:e0:f7:3e:57:bb:2d:b0:1d:04:2e:87:
ce:3a:7b:8b:e3:aa:df:7b:b6:93:64:94:ad:15:8a:
5c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:51:1A:2C:27:1A:48:FA:96:F8:D0:1A:70:A0:ED:8E:0C:79:F1:EC
X509v3 Authority Key Identifier:
keyid:5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/SFEaLCcaSPqW-NAacKDtjgx58ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.1.0-185.105.2.255
Signature Algorithm: sha256WithRSAEncryption
4f:ac:6b:56:97:6f:64:78:a3:ca:a5:c4:70:04:bf:31:c8:38:
52:28:02:a2:54:25:c8:20:34:37:56:87:e6:f1:c0:37:81:b8:
47:ba:18:ee:d1:57:81:8b:8e:40:35:01:6b:55:85:21:cf:ea:
7a:c0:5a:50:0f:35:27:1e:fe:a7:73:29:0f:6b:c2:01:38:ec:
11:bd:f0:cd:17:a0:d8:e9:98:ab:19:ab:c7:46:30:64:d0:75:
42:94:3c:94:8b:b9:b2:e1:08:6d:45:d8:64:63:35:9f:27:a7:
2b:4f:01:79:06:fc:b9:b3:b6:f9:29:02:c6:30:60:75:6a:5f:
b6:23:c9:db:3d:19:c2:b4:9b:e6:8c:72:70:de:36:ab:05:65:
50:c8:60:21:0a:db:d1:98:8a:09:87:3c:59:89:8c:5e:04:a4:
13:05:fc:4c:5e:9e:ca:15:b7:2b:34:43:65:c5:82:8a:6a:18:
1c:02:db:2c:37:3f:a2:9a:80:6c:65:f1:5d:d7:48:56:c1:98:
73:09:5b:19:e6:30:ae:f7:10:42:36:78:e4:30:81:7f:8d:c4:
ec:86:aa:b2:a3:b9:d7:9c:db:02:50:6a:f3:87:59:2e:c9:9e:
13:eb:fa:4f:c5:7e:c2:42:bd:2a:ad:ec:28:c9:f7:96:27:66:
3b:f0:57:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:01:40 2025 by rpki-client