Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/skwI5z0yRaxwKtpU_esg67kB00Q.roa
File: skwI5z0yRaxwKtpU_esg67kB00Q.roa (raw, json)
Hash identifier: EqlJoKVURG/J6mvKy5/m2E2AIiZZyDge/9pJkErrDyk=
Subject key identifier: B2:4C:08:E7:3D:32:45:AC:70:2A:DA:54:FD:EB:20:EB:B9:01:D3:44
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FF49444A4157C3FA03CC9FF4466CE
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/skwI5z0yRaxwKtpU_esg67kB00Q.roa
Signing time: Thu 02 Jan 2025 05:49:38 +0000
ROA not before: Thu 02 Jan 2025 05:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204752
IP address blocks: 95.47.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:f4:94:44:a4:15:7c:3f:a0:3c:c9:ff:44:66:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b24c08e73d3245ac702ada54fdeb20ebb901d344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:06:01:01:11:e6:44:4a:33:2b:74:61:48:
2d:75:1d:89:cf:c2:45:fc:34:cb:ef:93:dd:9f:c9:
bf:3b:35:68:73:7d:d9:b7:93:4d:83:d9:d9:70:2d:
53:03:af:b3:d5:df:49:93:2b:31:64:69:8c:27:98:
1a:73:60:5c:10:9b:22:04:79:17:7a:c0:54:05:07:
31:82:b5:92:58:61:23:26:bd:4a:df:89:2f:00:34:
bc:01:cc:7c:2a:67:c1:d9:db:9c:71:ff:02:01:db:
07:38:d3:8f:4a:bc:c9:21:99:c6:be:9b:d9:2d:1f:
ce:d9:2d:8b:c6:b5:d5:fb:47:12:33:da:36:85:06:
58:9f:12:be:56:4c:32:50:a5:45:8c:7d:5a:60:b3:
4a:5b:9c:eb:1f:2a:d2:03:1b:be:f8:78:4b:e7:e4:
0c:4d:29:61:9e:2c:cd:13:fb:7f:cc:95:62:49:f6:
7e:02:a4:94:3c:3b:54:e6:c4:b7:ce:3d:db:47:75:
9a:fc:17:d6:a7:2b:87:5e:f5:d9:46:ee:7c:75:4a:
3d:f5:e1:e3:4a:79:9b:b2:2b:0f:fc:ed:f2:37:4e:
b6:6a:d6:8e:30:eb:c6:fb:ba:03:dc:3b:0f:c2:8c:
11:6b:57:d4:74:ac:04:b9:e2:20:1d:1d:7c:21:a0:
60:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4C:08:E7:3D:32:45:AC:70:2A:DA:54:FD:EB:20:EB:B9:01:D3:44
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/skwI5z0yRaxwKtpU_esg67kB00Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.118.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:6f:85:48:ae:d2:46:b1:09:3c:13:f0:87:e1:24:99:f0:9b:
1f:61:90:47:8a:e0:6d:69:44:19:b7:d6:f0:43:6a:9f:96:97:
b0:9c:d7:11:75:f9:17:e9:ae:45:93:b2:92:35:f7:7c:a6:1b:
dc:49:0d:30:72:82:b9:42:34:e8:29:28:4b:c1:89:58:0b:09:
dc:32:52:c4:7a:fd:27:11:61:54:9f:f8:84:0f:65:0a:5b:49:
51:8d:32:c5:34:f5:32:6a:fb:70:32:99:33:bc:eb:6b:bc:de:
b7:a1:cf:e3:21:a6:9d:b2:a4:4e:13:46:9e:6f:7d:41:80:1b:
e8:c1:4f:19:bf:09:d4:cd:9c:86:f4:5f:dc:36:77:d1:da:52:
73:4f:aa:d1:52:ab:28:ff:37:12:d6:f4:2c:ec:60:09:82:a6:
94:d8:05:f5:29:23:c5:aa:aa:af:b5:ce:a5:e0:e1:50:1b:34:
f8:6a:c6:83:ca:b9:0e:18:fc:3b:f3:3b:8c:3f:b3:35:c1:5c:
81:c5:a1:6b:c7:0f:36:5f:0f:cf:f6:b2:11:1a:de:2d:5c:fe:
74:92:27:f8:36:f5:2b:72:18:8b:6e:eb:04:a5:79:d7:09:bf:
1f:5b:08:37:76:5e:9b:4e:45:3c:31:c1:89:4a:42:c8:09:b0:
73:a0:23:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:23:11 2025 by rpki-client