Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/SDwa_442z28okDepd5smjiOQRww.roa
File: SDwa_442z28okDepd5smjiOQRww.roa (raw, json)
Hash identifier: vI2MQekdn3KI3C4mvdXcQ3gXy8wA7HojYkfFVqdmGF0=
Subject key identifier: 48:3C:1A:FF:8E:36:CF:6F:28:90:37:A9:77:9B:26:8E:23:90:47:0C
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 01941FFA925E78F8C67ADFADEECE9C0C11DA
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/SDwa_442z28okDepd5smjiOQRww.roa
Signing time: Wed 01 Jan 2025 03:48:22 +0000
ROA not before: Wed 01 Jan 2025 03:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8896
IP address blocks: 80.86.208.0/20 maxlen: 20
81.29.32.0/20 maxlen: 20
2a03:9a00::/29 maxlen: 29
2a03:9a00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:92:5e:78:f8:c6:7a:df:ad:ee:ce:9c:0c:11:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Jan 1 03:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=483c1aff8e36cf6f289037a9779b268e2390470c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:9d:41:1f:45:39:c2:b8:88:7e:cb:fc:da:
62:ab:68:2b:f3:f0:9c:ae:77:e8:24:29:a1:72:46:
5d:ec:74:4a:0a:ab:d3:9f:dc:a4:3d:16:e9:31:5c:
ce:7e:a6:83:65:d6:27:a6:20:c4:fb:83:0f:fa:d7:
8b:6e:83:58:b2:73:26:0f:b6:e6:7b:ed:2b:a4:15:
75:e0:28:a2:51:be:9f:eb:f6:0c:20:51:e1:d0:7c:
27:e0:a5:ce:5d:31:ff:b0:c9:8c:38:83:03:6c:7a:
af:56:29:45:0e:d8:29:ee:01:44:dd:04:7d:71:82:
6f:ac:8d:d5:70:83:21:3d:b9:76:88:f0:e0:b5:e5:
3d:9c:68:65:9f:1e:bc:92:c1:b6:f3:14:35:55:b3:
30:c9:29:1a:44:d7:47:8d:a2:a6:71:4c:62:0a:b3:
f2:1f:5d:44:44:05:8b:1a:50:31:54:3f:9e:bf:b4:
1d:21:d8:89:79:6e:41:56:f6:40:c0:5e:13:d0:71:
61:04:bc:14:4f:81:26:7c:5c:1e:19:99:cb:2a:8b:
61:ef:c3:df:38:62:6b:21:11:60:76:bd:ad:9c:71:
19:f3:99:64:9c:64:31:ae:22:f3:83:eb:d1:c8:e9:
e8:97:fd:7b:21:c7:36:3c:7d:1c:11:04:43:74:00:
9a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3C:1A:FF:8E:36:CF:6F:28:90:37:A9:77:9B:26:8E:23:90:47:0C
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/SDwa_442z28okDepd5smjiOQRww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.208.0/20
81.29.32.0/20
IPv6:
2a03:9a00::/29
Signature Algorithm: sha256WithRSAEncryption
02:5b:f4:a0:c3:4b:df:c6:a6:bb:7d:c2:3c:ba:75:3b:2e:0c:
e1:6e:a3:b8:27:36:67:7c:ba:ae:b3:08:78:40:7a:1f:3e:6e:
aa:50:9b:00:d2:2a:66:6c:7c:94:de:8a:62:51:71:81:71:9c:
85:e0:5a:f8:f3:d9:ad:26:27:b3:31:ce:22:30:c5:2f:af:a7:
16:f3:60:21:fe:d6:34:ee:56:e8:dd:d9:bc:fd:32:7b:9a:8a:
3a:05:85:ea:25:7b:93:59:d7:c9:4a:b9:a7:c5:eb:51:da:78:
d3:77:74:3d:b9:99:f1:da:69:7a:53:0f:21:fa:3f:d1:a7:21:
af:bc:92:04:e8:36:35:08:06:68:a7:68:1b:35:2e:5f:0a:5e:
33:1a:3a:65:98:e7:21:6c:6a:f3:ed:71:f8:ed:40:8e:8f:1e:
b4:ac:ba:c2:e5:68:e8:37:a0:49:b3:06:93:f7:ec:2b:61:bb:
d3:88:07:74:aa:87:3a:2b:c4:43:b0:0e:18:c7:09:93:0c:e3:
98:c6:59:60:ac:59:6d:05:c2:d8:e0:17:1b:e2:6c:48:89:9a:
a0:e5:84:dc:e4:0f:f6:54:fc:a2:2d:4e:9c:3f:2d:76:56:9c:
a6:1a:78:fe:06:74:3d:8a:69:a3:37:a5:f3:e6:bd:90:33:70:
0e:92:25:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:20:29 2025 by rpki-client