Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/SHsQx5nLK3je9BRJdGpJA5FmBJw.roa
File: SHsQx5nLK3je9BRJdGpJA5FmBJw.roa (raw, json)
Hash identifier: w1LS0Na0/a/or8fsG3pHVRaGF64EW4fSRED25Ol57DY=
Subject key identifier: 48:7B:10:C7:99:CB:2B:78:DE:F4:14:49:74:6A:49:03:91:66:04:9C
Certificate issuer: /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial: 019427B61BEDCFFA9829D7B917817FB5D281
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/SHsQx5nLK3je9BRJdGpJA5FmBJw.roa
Signing time: Thu 02 Jan 2025 15:50:33 +0000
ROA not before: Thu 02 Jan 2025 15:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212017
IP address blocks: 185.159.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:1b:ed:cf:fa:98:29:d7:b9:17:81:7f:b5:d2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Validity
Not Before: Jan 2 15:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=487b10c799cb2b78def41449746a49039166049c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3d:f2:ef:ef:ab:e7:71:09:f3:a6:ef:8d:d8:
36:c3:4c:3a:3e:0b:18:62:7d:ff:74:f8:1c:d4:15:
c4:b6:93:3d:ca:bb:8a:99:18:72:8b:c6:73:64:b9:
29:e9:d7:e2:ac:03:0e:eb:e8:33:c8:4b:06:c0:6f:
4f:51:99:ce:83:bb:bc:fc:7d:91:a8:91:13:2f:d4:
6b:82:bc:2c:23:85:73:90:25:da:9b:79:e2:ef:17:
17:23:8b:da:d1:84:64:d8:f6:44:ed:b2:38:85:1c:
90:66:25:0d:40:ca:66:21:7f:70:f8:88:c3:be:20:
e8:91:6d:99:c6:a5:e7:9d:07:16:00:f2:b1:d1:61:
05:df:a0:7e:eb:b4:03:dd:10:82:b2:fc:22:8b:ac:
13:e1:d2:3f:0c:e3:b1:66:18:d7:87:71:d5:38:80:
09:38:f2:96:0d:73:c9:fd:bd:83:08:c8:2c:bb:59:
1d:72:8d:00:d7:fb:69:9e:4a:11:96:e6:cd:e6:b7:
40:55:ee:55:94:e3:a9:98:4e:11:dc:09:51:ae:f6:
2d:0b:ff:a4:a9:cf:c1:d3:3e:e1:50:a2:95:17:50:
5d:cd:aa:49:e7:e3:e2:aa:3b:90:61:06:54:59:58:
47:a1:98:56:2f:e4:99:fa:19:5e:b5:ca:68:c6:20:
47:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7B:10:C7:99:CB:2B:78:DE:F4:14:49:74:6A:49:03:91:66:04:9C
X509v3 Authority Key Identifier:
keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/SHsQx5nLK3je9BRJdGpJA5FmBJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.40.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:ce:35:ca:ff:d8:3d:a0:3f:28:71:91:57:37:43:85:ff:44:
98:3f:50:93:79:f5:15:45:15:6d:f0:01:17:38:71:62:d2:67:
3b:46:7f:b8:1b:77:7e:79:41:f3:98:72:f6:da:40:71:8a:b3:
43:d8:5e:ba:6d:44:29:9c:1d:49:db:aa:40:54:07:7b:27:f8:
38:ec:63:63:de:c0:4e:39:0f:a6:f1:08:30:44:17:f7:2e:42:
55:1c:6b:99:36:f3:6c:b2:b6:82:3d:eb:3c:48:43:4f:08:82:
79:d6:39:c9:fc:53:3b:27:ee:8d:1f:f3:fa:ae:3e:3c:3c:dc:
99:43:16:62:a8:d9:41:de:f9:83:1e:ed:f0:07:42:d4:79:42:
80:b4:82:0e:85:86:d7:fc:1f:31:60:cb:a3:38:e7:ae:1d:56:
81:70:fc:ff:3d:94:46:85:f9:f0:b3:d2:16:f6:f9:1e:fc:5f:
c8:62:d1:ab:72:e4:d3:aa:8f:da:17:41:0d:c6:00:a5:91:6c:
9c:fd:da:8a:dd:18:7d:ef:7e:79:14:32:2d:3d:ef:c7:0b:f0:
3e:4d:eb:7a:ce:6d:3c:61:9c:8e:19:cf:cc:eb:0a:ff:19:c2:
d4:05:bd:03:50:9c:ef:4b:04:fd:4e:90:55:5c:10:5d:44:9f:
a9:12:63:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:50:14 2025 by rpki-client