Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/SMzV5wz9frkN5XS4CCkb3nLca30.roa
File: SMzV5wz9frkN5XS4CCkb3nLca30.roa (raw, json)
Hash identifier: zmKq49sGkkYH+u/sbr+cNTvPXrtLzX6dJ5oof0YJlac=
Subject key identifier: 48:CC:D5:E7:0C:FD:7E:B9:0D:E5:74:B8:08:29:1B:DE:72:DC:6B:7D
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01942827C6C73AD7137B623350CBF0212EE4
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/SMzV5wz9frkN5XS4CCkb3nLca30.roa
Signing time: Thu 02 Jan 2025 17:54:42 +0000
ROA not before: Thu 02 Jan 2025 17:54:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213980
IP address blocks: 87.229.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:c6:c7:3a:d7:13:7b:62:33:50:cb:f0:21:2e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 2 17:54:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48ccd5e70cfd7eb90de574b808291bde72dc6b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ef:fa:05:6c:ee:d4:90:a0:b0:1e:e0:82:58:
11:07:45:3f:0a:da:16:90:94:e7:71:01:71:50:29:
1e:c9:83:b4:79:fa:2f:5a:26:b4:04:e3:88:ae:3e:
5b:36:86:67:20:b7:26:3f:6e:4b:8b:6a:cc:96:53:
ec:b2:1b:7e:30:ea:91:46:15:1e:76:a8:79:f6:21:
d7:29:0e:35:1d:65:79:b4:38:d0:3b:7c:ae:9a:20:
bb:98:07:80:f1:1c:3b:4a:8d:28:83:11:e0:47:ed:
c1:7b:ab:17:6d:11:3e:f1:2b:a0:a6:66:cc:73:f7:
dd:89:3b:a5:1d:78:22:d4:c0:9d:be:b0:45:d5:04:
8d:26:cf:88:5d:7f:d3:e3:b5:93:f8:18:0f:b5:a5:
c4:ad:2a:bb:87:0f:2d:81:90:5f:88:98:6a:26:57:
60:f6:35:00:3c:74:d2:ec:d3:55:8c:80:53:0a:73:
06:4a:be:b9:c8:66:40:9e:2c:29:62:cb:bf:c5:a5:
15:6f:53:43:fd:10:f3:9e:ae:2f:f2:87:4d:bb:b5:
28:54:88:19:16:6d:3e:f6:a9:6c:d1:42:08:5e:e8:
f6:29:6e:d4:ee:66:a8:66:86:b4:7b:a3:f7:5c:b7:
ce:1c:af:87:d9:da:4e:7c:32:a0:8f:86:68:a5:84:
22:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CC:D5:E7:0C:FD:7E:B9:0D:E5:74:B8:08:29:1B:DE:72:DC:6B:7D
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/SMzV5wz9frkN5XS4CCkb3nLca30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.41.0/24
Signature Algorithm: sha256WithRSAEncryption
97:02:78:d3:e5:97:da:61:f0:a3:8a:1c:77:09:24:94:32:56:
48:69:70:ec:cb:d5:fb:e1:66:ac:38:91:ad:8e:bb:49:e8:f2:
30:8a:5b:34:d2:22:26:9f:b0:0d:3f:96:5c:18:b1:8d:18:e5:
2b:1a:19:62:5a:f4:50:85:70:fa:05:81:b6:55:99:3d:da:d6:
dd:a2:74:28:6d:cc:65:73:19:41:f3:66:e3:d8:fe:8d:17:20:
d9:b4:ae:0b:78:eb:79:49:aa:b9:5b:84:8d:6c:0c:fb:20:aa:
60:23:fa:b0:bd:4e:33:23:4b:0a:94:22:48:5c:53:1e:ac:99:
07:1b:1c:90:0f:be:be:f7:79:4d:49:95:3e:ae:c2:27:93:eb:
61:64:a1:34:33:2e:9d:8c:88:96:c1:e8:99:da:20:8e:44:3e:
90:fc:84:84:d0:d2:30:f4:c0:3c:fe:58:cd:47:97:60:5c:ec:
83:1a:e6:80:6f:97:98:ba:cb:73:ae:a0:68:64:c3:19:56:7b:
1c:2e:8d:94:07:70:45:01:7a:d1:f8:4f:70:fa:a7:98:23:13:
4b:ce:7e:fa:93:e7:98:c8:3b:50:1a:31:f8:dc:8e:53:eb:34:
96:58:fa:8b:1f:94:e3:76:f2:37:e6:69:f8:42:74:22:07:c2:
6d:b7:b2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:43:02 2025 by rpki-client