Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/SCkAB-mzJj0dSFNpFDQBySYjjG0.roa
File: SCkAB-mzJj0dSFNpFDQBySYjjG0.roa (raw, json)
Hash identifier: uGD59nBDk+ejCbmjxXlG6/1ooKrSuF8TSVbcJWU61+Y=
Subject key identifier: 48:29:00:07:E9:B3:26:3D:1D:48:53:69:14:34:01:C9:26:23:8C:6D
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019427483A23CA30706C92CCC2F7E94C91C3
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/SCkAB-mzJj0dSFNpFDQBySYjjG0.roa
Signing time: Thu 02 Jan 2025 13:50:32 +0000
ROA not before: Thu 02 Jan 2025 13:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39944
IP address blocks: 139.28.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3a:23:ca:30:70:6c:92:cc:c2:f7:e9:4c:91:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48290007e9b3263d1d485369143401c926238c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:a5:20:7d:d0:cb:f2:35:82:ad:7f:73:64:
20:8f:f0:6b:3d:1f:d7:01:bb:51:9a:95:fb:c1:c8:
a2:c3:8b:3b:6a:86:f6:bc:b9:46:e3:8d:a4:d3:4f:
7c:4e:a8:bb:2f:97:1e:31:e4:12:d4:78:08:96:7f:
6c:98:5a:c6:c8:99:62:fc:0a:54:dd:f8:5b:37:e7:
b0:7d:4c:9e:1b:7c:43:9b:1a:ac:fe:b1:93:64:a0:
d5:b7:67:49:3f:ab:6b:f0:1c:66:0e:f1:ac:c6:e3:
a4:d4:92:36:4f:7f:1c:b6:fa:fb:1e:5a:72:7d:4f:
53:47:c5:c3:38:09:cc:b3:a3:59:77:76:fb:8a:3d:
b6:50:85:97:de:63:86:0f:45:d2:6c:fc:31:79:76:
d7:64:d7:ff:81:1a:10:a7:4f:e4:2a:05:fb:09:5f:
34:f1:37:82:f8:8a:13:7a:c0:82:08:17:e0:e1:64:
03:05:28:92:cc:8c:08:1b:76:04:f0:ab:07:6c:be:
f2:dd:c0:45:5a:03:2c:36:c1:bd:c2:5a:94:f8:f6:
ed:6c:d1:68:06:d7:c9:af:cc:42:63:25:1a:40:ec:
7f:46:9c:03:3d:f7:1e:67:a0:ee:20:fd:2c:3b:55:
e7:1e:40:43:05:dd:2c:cc:7b:bf:53:d7:a3:ba:92:
24:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:29:00:07:E9:B3:26:3D:1D:48:53:69:14:34:01:C9:26:23:8C:6D
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/SCkAB-mzJj0dSFNpFDQBySYjjG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.86.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:e9:61:14:09:42:ba:c7:1d:f8:4d:cd:d1:62:79:c8:72:d1:
79:5b:a4:5e:01:e3:43:ea:49:4c:65:9e:41:1f:ac:cb:d2:e5:
f1:20:a5:4a:c0:01:f6:3b:ae:cd:c7:f4:a5:e2:12:87:db:68:
9e:a8:a6:1e:55:ff:9e:5c:1d:0e:67:7a:ae:ca:58:ce:69:b0:
d6:32:93:78:3a:f2:e0:ea:ab:12:9b:82:f0:b2:b5:08:d8:f9:
55:16:5a:4c:8f:2f:39:ca:d0:a1:cd:3a:fd:83:04:d2:b4:ab:
2a:b3:8c:ae:32:6d:98:9e:d7:6e:e8:cb:71:bc:be:af:b7:cf:
3c:08:06:c0:fa:9a:40:94:5b:f9:ad:42:8a:ca:46:08:c5:0c:
62:9a:83:05:5a:aa:b7:19:fb:b5:40:d5:23:e5:59:42:b9:ff:
5c:fd:36:0c:59:fe:ce:71:d6:66:52:9a:f3:6f:69:0e:a3:04:
aa:70:68:93:37:ff:ae:9e:07:ca:93:a8:27:c7:6c:48:bc:cd:
da:a8:9f:9e:e7:ab:f9:32:98:80:cc:91:e4:23:5f:5e:da:f5:
8a:0a:fa:f2:ae:4f:6b:84:81:d5:90:05:ca:8d:53:02:ea:fb:
b8:88:ba:5d:13:50:99:51:67:d1:ca:7f:e9:f9:8c:6c:06:41:
07:d5:20:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:15:04 2025 by rpki-client