Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/SNGV0mPG4-vHp6-PAm-3E8l_tQ4.roa
File: SNGV0mPG4-vHp6-PAm-3E8l_tQ4.roa (raw, json)
Hash identifier: FllvrAA0IFuRu04U/PVVcunONsM/J0wPDkjc5E97TCo=
Subject key identifier: 48:D1:95:D2:63:C6:E3:EB:C7:A7:AF:8F:02:6F:B7:13:C9:7F:B5:0E
Certificate issuer: /CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Certificate serial: 019426D95852962AA89C235415C658FA285D
Authority key identifier: C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/SNGV0mPG4-vHp6-PAm-3E8l_tQ4.roa
Signing time: Thu 02 Jan 2025 11:49:25 +0000
ROA not before: Thu 02 Jan 2025 11:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198333
IP address blocks: 193.37.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:58:52:96:2a:a8:9c:23:54:15:c6:58:fa:28:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Validity
Not Before: Jan 2 11:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48d195d263c6e3ebc7a7af8f026fb713c97fb50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3f:20:fe:f4:5c:fc:1b:47:55:7b:e4:4c:ba:
b6:a7:a9:c8:4b:5c:ae:4d:dd:d2:96:20:5f:7c:8d:
41:13:df:dd:76:2c:a7:b1:2b:19:13:47:63:ba:a2:
7c:64:9b:c8:f4:70:18:62:3b:75:48:e9:5a:0b:83:
f8:26:ac:5f:56:b9:c6:aa:24:de:a5:19:26:a3:0c:
39:2c:8d:ab:31:33:28:7e:5b:04:70:81:76:49:92:
76:67:31:ca:c3:c6:5e:0c:30:87:a8:ca:17:c2:bd:
e0:a8:9e:19:ee:89:72:4d:4c:a5:74:07:0c:1c:b5:
b7:35:77:83:ca:3e:8b:1c:00:6e:89:e2:3b:df:c4:
01:03:f1:4f:9e:d2:4b:2b:07:a7:7c:a8:5c:96:45:
83:12:75:64:2c:63:c9:0f:5d:82:8e:4c:60:89:6c:
b0:e6:a6:9f:ad:8f:ea:85:44:e2:37:b7:36:72:ea:
6e:87:db:c7:8f:33:d4:8a:60:f8:27:2b:31:36:73:
cb:43:f7:25:fc:54:99:c9:5c:1e:b8:00:1e:00:14:
70:ce:2f:86:a6:5b:66:9f:71:eb:f9:d7:e1:1c:83:
38:ba:de:eb:bf:fc:16:4d:d9:3c:0a:f5:2c:9f:79:
d1:20:43:11:4c:75:29:8e:fa:3b:f5:60:62:b1:c5:
d2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D1:95:D2:63:C6:E3:EB:C7:A7:AF:8F:02:6F:B7:13:C9:7F:B5:0E
X509v3 Authority Key Identifier:
keyid:C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/SNGV0mPG4-vHp6-PAm-3E8l_tQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.149.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:40:6b:aa:65:c5:6a:6f:e3:77:92:8f:6f:37:02:5c:44:d0:
0b:4c:dd:3c:e7:02:23:85:f1:45:fb:03:04:c1:f2:0d:f4:eb:
83:b4:0c:44:1a:9d:27:87:52:4c:3c:bc:55:30:a4:de:1e:07:
48:56:84:f5:2f:3e:8a:09:1a:8b:46:ca:7c:dc:b6:96:07:5a:
02:69:ab:20:aa:05:01:77:09:4f:99:01:ff:07:f7:d2:0e:52:
b5:82:e5:66:60:0b:d5:19:02:71:03:a8:10:68:3a:5f:81:2e:
07:14:0e:dd:15:bb:63:94:d5:64:65:a5:c0:65:de:3f:58:5e:
82:71:17:4d:3f:c3:6c:ba:57:bf:c9:07:c2:88:23:2d:8c:37:
d1:54:dc:6f:ad:f7:91:56:cd:4f:b5:e0:cd:f9:9f:d6:a0:1b:
6e:e0:a4:1e:c2:66:44:b4:b3:a1:1d:8c:36:dd:7b:f0:56:c6:
c6:f1:af:4a:5f:17:5c:7d:f9:f6:0d:09:d4:f1:cb:d2:5c:44:
c2:fe:64:1e:df:00:07:65:d8:26:22:d3:a3:5e:c8:2f:92:bd:
c1:97:b3:e5:3a:09:25:39:ea:5b:5e:8c:50:8a:92:55:0e:e7:
99:db:f7:c0:05:46:5b:3d:92:a6:f1:ff:e1:ad:f7:b6:59:80:
84:a4:91:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:52 2025 by rpki-client