Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SwpSTt8oJj-jl3G7cg9tuDAv5Fs.roa
File: SwpSTt8oJj-jl3G7cg9tuDAv5Fs.roa (raw, json)
Hash identifier: RWp0TuZpTIOlFqbMTSeH5nMITMlHFhrARxnfWhj5ruE=
Subject key identifier: 4B:0A:52:4E:DF:28:26:3F:A3:97:71:BB:72:0F:6D:B8:30:2F:E4:5B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019428275E8741772E52B1151CA87C69074B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SwpSTt8oJj-jl3G7cg9tuDAv5Fs.roa
Signing time: Thu 02 Jan 2025 17:54:16 +0000
ROA not before: Thu 02 Jan 2025 17:54:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52000
IP address blocks: 45.135.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:5e:87:41:77:2e:52:b1:15:1c:a8:7c:69:07:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b0a524edf28263fa39771bb720f6db8302fe45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:18:c6:b4:4b:54:ff:da:33:87:98:d0:47:a3:
67:d3:0e:28:be:9b:8e:2b:67:27:36:12:75:c3:55:
1f:e1:1c:cb:06:9e:7e:c9:94:e1:53:be:62:18:ca:
76:da:dc:a8:67:79:21:8d:83:07:54:da:61:68:71:
69:d5:3a:ef:11:39:f1:f5:62:54:0a:b5:e0:3c:3e:
ea:81:af:1c:40:c1:e9:43:8d:6f:ae:be:a9:38:b1:
82:69:15:7a:70:b3:9c:19:17:18:7b:0a:79:90:08:
29:cc:64:18:12:d4:d2:8b:af:68:ed:63:b9:89:cc:
13:0e:2f:e3:49:0a:9f:5f:ae:76:53:6e:29:04:7b:
40:03:d3:88:51:a6:0a:e5:33:b3:b6:2a:33:b3:e6:
54:d8:7b:ee:b6:ac:e6:8f:fe:4b:ba:1d:2e:17:21:
44:b0:e8:e9:5c:86:c2:ab:02:1f:51:2d:15:2e:6b:
94:4f:03:a6:a0:10:7d:26:2e:11:49:39:56:73:df:
e7:3e:a3:1e:e7:0a:66:e0:27:2c:d8:06:cd:77:1d:
71:ba:91:dc:f1:81:01:c9:de:1f:fd:f6:e4:3b:cb:
09:2f:ed:0e:70:fc:41:e9:32:47:3b:b4:b8:19:c8:
78:33:c4:2f:25:07:76:73:8f:5b:20:ff:e4:79:7a:
65:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0A:52:4E:DF:28:26:3F:A3:97:71:BB:72:0F:6D:B8:30:2F:E4:5B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/SwpSTt8oJj-jl3G7cg9tuDAv5Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.181.0/24
Signature Algorithm: sha256WithRSAEncryption
27:1e:78:cd:ea:a7:f5:5f:73:de:3b:f2:ac:63:f0:9c:ee:cf:
b6:85:6e:ce:fa:1b:43:a4:c1:3b:82:aa:64:f7:3b:3d:fe:5e:
df:6d:c1:d6:e0:8b:3c:fa:65:14:ff:da:e8:46:e7:f5:e6:8b:
3e:14:23:64:bd:00:7e:c4:08:28:29:20:5d:2e:8b:35:02:34:
dc:b6:13:49:36:64:d9:76:4b:a0:f8:ec:a1:68:57:47:21:c7:
c3:77:1f:63:d5:2c:7d:19:32:7f:2a:35:21:40:1d:a5:22:e4:
44:f8:fd:81:47:fa:91:60:7c:54:bf:4f:cf:a9:05:f7:ee:b4:
69:8a:04:41:b7:b2:4b:6e:c5:32:25:9a:3a:d2:dc:a1:d3:b9:
9b:1b:b5:1a:e7:57:a4:31:81:c3:6d:d7:3d:27:8a:79:1e:36:
6e:d9:3c:59:23:99:ae:c9:0f:3b:fa:e7:98:30:3f:8f:6c:e2:
58:b0:84:e0:ed:33:7f:7b:fa:14:7a:60:30:11:93:51:cb:27:
b6:ee:47:d7:30:4f:b8:78:8e:06:7a:22:4b:c5:bc:2f:4c:ad:
c2:67:91:7e:61:91:80:db:e6:b9:b7:b4:db:37:9e:62:ff:07:
c3:ce:d2:75:e4:f4:dc:79:8f:90:74:a5:7d:c3:f3:88:ee:cf:
3f:bb:22:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:39:43 2025 by rpki-client