Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/SWMQOyTGATFbPpkUlNDEK9R_wf8.roa
File: SWMQOyTGATFbPpkUlNDEK9R_wf8.roa (raw, json)
Hash identifier: 7EyjDFKkXOO8nAJj/SWkoOh1Lc7HdnR9vXAWI1FbOGc=
Subject key identifier: 49:63:10:3B:24:C6:01:31:5B:3E:99:14:94:D0:C4:2B:D4:7F:C1:FF
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 0194266BB49A476C927D1722FEA77CF76A6C
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/SWMQOyTGATFbPpkUlNDEK9R_wf8.roa
Signing time: Thu 02 Jan 2025 09:49:40 +0000
ROA not before: Thu 02 Jan 2025 09:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201723
IP address blocks: 185.54.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b4:9a:47:6c:92:7d:17:22:fe:a7:7c:f7:6a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Jan 2 09:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4963103b24c601315b3e991494d0c42bd47fc1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:f4:17:7d:7d:25:5e:7d:b1:2b:0a:d8:20:
9d:28:dc:5a:27:4b:48:07:bc:90:f4:76:3d:22:e0:
de:96:9c:57:60:5b:d9:19:3c:11:30:6d:07:b1:57:
4a:22:29:8b:1e:e1:c1:19:69:a2:f8:fc:95:dc:7e:
ad:51:ea:0a:be:01:a7:e8:25:35:7c:c7:c9:24:db:
d9:80:ed:dc:72:45:c4:1b:ad:fb:a7:51:e5:ba:8d:
8e:aa:54:a5:de:1c:c6:ef:f4:f0:e1:24:46:f5:6f:
56:96:ff:9b:ce:83:39:75:b5:c1:1e:ed:fa:66:7c:
41:1c:f3:e2:83:66:a3:21:ad:68:6b:d0:c3:a4:36:
b5:a2:6f:a7:19:55:fd:ed:95:ac:15:0c:b5:a1:75:
34:21:92:fd:24:ab:c0:27:42:8d:4f:4c:b9:f5:87:
06:11:07:68:bc:f5:d8:3d:21:7d:c1:b8:42:99:34:
b1:92:ce:bd:de:2c:9d:d6:d2:71:35:19:90:64:4b:
44:49:3d:ba:05:cd:14:96:d1:f7:5e:bd:ee:a5:b4:
9c:24:85:fe:f5:45:6d:47:c7:95:85:48:b7:20:0a:
d8:ac:a7:85:74:b2:b4:b0:91:eb:f5:18:93:96:1d:
76:72:9a:40:cf:44:59:9c:d4:29:f7:0f:6c:b4:d9:
37:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:63:10:3B:24:C6:01:31:5B:3E:99:14:94:D0:C4:2B:D4:7F:C1:FF
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/SWMQOyTGATFbPpkUlNDEK9R_wf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.95.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:61:9b:55:6c:07:93:49:13:44:5d:e9:ec:4f:f4:30:be:94:
61:3b:a1:02:d6:30:89:3d:ca:52:23:bf:c5:74:93:aa:65:1d:
d5:01:9b:f8:fc:01:1b:a1:d6:7f:2b:02:40:d6:7e:fe:d9:0b:
39:72:56:0b:ce:7e:3b:0c:09:b8:2f:de:a6:6a:15:61:f7:dc:
a5:d7:ea:5e:a4:3d:b3:b8:13:a8:06:70:b9:d6:00:a2:c8:95:
b4:de:df:0f:ba:6b:42:ae:37:9b:d4:1b:14:29:02:9c:87:27:
52:92:c1:0f:b9:f9:3e:67:41:bf:14:6f:cc:0a:1f:34:10:a6:
49:aa:09:11:ad:a0:54:05:0a:75:87:4d:ac:68:1d:d2:0a:81:
49:40:a8:7d:0f:a6:55:1e:f4:40:2b:cd:6c:32:e3:17:e7:4a:
3e:17:38:92:ec:b4:2e:32:b3:fb:69:15:25:cd:36:f9:45:cc:
63:d7:63:5b:5f:26:47:65:d4:a9:92:06:5e:8c:c7:02:9e:13:
00:07:77:73:1f:e1:b8:23:b9:2c:68:01:9c:f3:32:86:32:1b:
29:79:4f:04:c0:92:a5:2f:88:04:e5:5e:d0:ae:f1:57:fa:b3:
81:c2:a5:80:e3:99:e2:ea:00:a3:f1:54:d4:78:48:08:c5:c9:
3e:33:fa:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:23:24 2025 by rpki-client