Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/SdPsCTfwAHnWyy4c7c1Aeg-32X0.roa
File: SdPsCTfwAHnWyy4c7c1Aeg-32X0.roa (raw, json)
Hash identifier: Q88X+XCoIe1GgvuMiDy+YHNXi5dKKD+EVkEWITArGTg=
Subject key identifier: 49:D3:EC:09:37:F0:00:79:D6:CB:2E:1C:ED:CD:40:7A:0F:B7:D9:7D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FA14D065494BCE469127ACB7ABFB1
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/SdPsCTfwAHnWyy4c7c1Aeg-32X0.roa
Signing time: Thu 02 Jan 2025 05:49:17 +0000
ROA not before: Thu 02 Jan 2025 05:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43849
IP address blocks: 146.158.0.0/21 maxlen: 24
146.158.8.0/23 maxlen: 24
2a02:128:17::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a1:4d:06:54:94:bc:e4:69:12:7a:cb:7a:bf:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49d3ec0937f00079d6cb2e1cedcd407a0fb7d97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:28:08:73:6a:03:1c:1f:d8:72:3d:5a:31:
a3:e9:c2:e2:80:3d:0e:81:23:49:6d:51:2c:ba:42:
10:18:c7:dc:6f:03:e4:0c:25:5c:34:d6:74:3b:68:
d7:24:64:36:cb:fe:83:ac:05:f9:4e:64:df:ac:57:
2f:71:30:f0:fb:bf:50:44:bc:11:9d:ce:5d:b4:3b:
dd:01:2e:0a:2f:d0:23:c3:25:1b:4f:5d:3d:36:83:
8a:e6:da:fe:2e:21:24:e0:b6:06:a5:7d:60:87:9c:
5c:af:16:6f:89:fd:25:d3:7b:49:93:e8:1b:b7:67:
43:b4:d7:af:25:14:77:75:c8:ee:fc:0a:09:42:70:
d9:02:ad:10:c1:83:44:17:4f:3c:e0:8a:c3:4b:36:
c1:0d:74:93:2d:2b:06:f2:71:d3:cc:87:35:74:5c:
d5:5c:89:2a:f0:fd:23:e1:d9:2c:9b:66:2c:6b:d8:
fa:3f:8c:40:3d:47:04:eb:12:aa:55:76:34:4a:1c:
54:bf:8b:ea:fe:26:69:97:43:0a:99:33:1e:61:84:
42:13:12:41:84:13:ed:4d:89:84:7d:0b:d5:2d:66:
0d:65:b6:29:68:bb:ea:a2:e6:13:ef:7f:cc:5e:fe:
a7:1d:f4:8e:4c:a7:82:cc:6d:85:a6:61:3c:83:c9:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D3:EC:09:37:F0:00:79:D6:CB:2E:1C:ED:CD:40:7A:0F:B7:D9:7D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/SdPsCTfwAHnWyy4c7c1Aeg-32X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.158.0.0-146.158.9.255
IPv6:
2a02:128:17::/48
Signature Algorithm: sha256WithRSAEncryption
04:7b:0f:da:dd:19:e9:f5:d3:24:77:3b:9d:33:a7:24:88:ce:
8a:72:17:90:b9:65:71:84:8e:89:60:95:f3:ba:1b:08:1b:a3:
06:ea:8a:e5:69:ba:90:9a:b9:af:55:61:24:5b:f0:53:92:be:
8f:68:ac:d5:55:bf:0a:ac:70:e1:ff:55:f2:83:9c:af:db:2e:
83:97:f2:c1:56:fe:0d:7c:15:05:ea:51:ba:0c:85:10:a0:0c:
bd:d1:d3:be:2e:e6:09:ea:81:01:88:33:37:97:a0:d2:e8:1c:
27:e3:4d:32:60:93:63:d6:40:a1:58:e1:45:e3:6b:6a:0e:e6:
e0:f2:be:3c:9a:32:0b:8a:bc:db:cb:8e:8d:ac:46:81:5c:7c:
3f:87:ea:74:da:5d:85:c9:c8:fa:e6:4a:0a:77:c7:06:84:4f:
6f:9f:3a:6a:66:56:90:10:17:99:1c:b0:66:51:0c:2f:13:02:
53:c8:32:89:18:b6:ee:06:e9:c0:7d:cc:a4:f6:e8:6a:dd:d2:
ed:e6:37:a2:02:77:2a:c9:67:94:bd:0a:a9:28:8a:ef:70:db:
e3:ca:97:03:86:ee:d4:6e:4b:87:a3:fd:88:f5:25:a4:81:a2:
8d:1e:5a:84:65:7a:60:82:0a:ac:23:47:e0:f4:08:47:aa:44:
2b:c6:03:7f
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQlj6FNBlSUvORpEnrLer+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWQzZWMwOTM3ZjAwMDc5ZDZjYjJlMWNlZGNkNDA3YTBmYjdkOTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql8oCHNqAxwf2HI9WjGj6cLigD0O
gSNJbVEsukIQGMfcbwPkDCVcNNZ0O2jXJGQ2y/6DrAX5TmTfrFcvcTDw+79QRLwR
nc5dtDvdAS4KL9AjwyUbT109NoOK5tr+LiEk4LYGpX1gh5xcrxZvif0l03tJk+gb
t2dDtNevJRR3dcju/AoJQnDZAq0QwYNEF0884IrDSzbBDXSTLSsG8nHTzIc1dFzV
XIkq8P0j4dksm2Ysa9j6P4xAPUcE6xKqVXY0ShxUv4vq/iZpl0MKmTMeYYRCExJB
hBPtTYmEfQvVLWYNZbYpaLvqouYT73/MXv6nHfSOTKeCzG2FpmE8g8kDyQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFEnT7Ak38AB51ssuHO3NQHoPt9l9MB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvU2RQc0NUZndBSG5XeXk0YzdjMUFlZy0zMlgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjATBAIAATANMAsDAwGSngME
AZKeCDAPBAIAAjAJAwcAKgIBKAAXMA0GCSqGSIb3DQEBCwUAA4IBAQAEew/a3Rnp
9dMkdzudM6ckiM6KcheQuWVxhI6JYJXzuhsIG6MG6orlabqQmrmvVWEkW/BTkr6P
aKzVVb8KrHDh/1Xyg5yv2y6Dl/LBVv4NfBUF6lG6DIUQoAy90dO+LuYJ6oEBiDM3
l6DS6Bwn400yYJNj1kChWOFF42tqDubg8r48mjILirzby46NrEaBXHw/h+p02l2F
ycj65koKd8cGhE9vnzpqZlaQEBeZHLBmUQwvEwJTyDKJGLbuBunAfcyk9uhq3dLt
5jeiAncqyWeUvQqpKIrvcNvjypcDhu7UbkuHo/2I9SWkgaKNHlqEZXpgggqsI0fg
9AhHqkQrxgN/
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:08 2025 by rpki-client