Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/SeWVIKVcFZf5OfSUSvJx8xzrGmw.roa
File: SeWVIKVcFZf5OfSUSvJx8xzrGmw.roa (raw, json)
Hash identifier: R1Xjt4d6fbhtdYnW5OsTMCBTcoqdj84LM2GJBD6GMIY=
Subject key identifier: 49:E5:95:20:A5:5C:15:97:F9:39:F4:94:4A:F2:71:F3:1C:EB:1A:6C
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 0195B8C198191D47ED28FA13B8D0FD61F0EF
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/SeWVIKVcFZf5OfSUSvJx8xzrGmw.roa
Signing time: Fri 21 Mar 2025 12:50:49 +0000
ROA not before: Fri 21 Mar 2025 12:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 85.153.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b8:c1:98:19:1d:47:ed:28:fa:13:b8:d0:fd:61:f0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Mar 21 12:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49e59520a55c1597f939f4944af271f31ceb1a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:b3:fd:3c:bb:86:22:33:84:4c:d5:6e:2b:
c6:6b:bc:8e:3e:8d:2f:9c:22:f9:c4:b1:12:92:dc:
4c:15:40:4e:71:ee:86:56:21:11:d7:61:60:9b:08:
2d:30:fc:ae:47:06:f8:a2:13:73:9f:2b:e2:c6:e5:
7b:c8:da:c0:6f:04:3e:47:6d:9b:43:97:22:fb:23:
b3:ba:b2:83:27:aa:95:d0:b0:a8:3e:62:39:45:7d:
51:ab:cb:62:71:08:3d:f6:8f:17:61:8c:4c:de:54:
6d:cd:f2:e0:25:31:fc:ab:30:97:a2:1e:34:30:63:
b6:64:89:6c:74:88:6d:75:57:a1:5c:6e:3b:b5:74:
07:3c:7e:31:f1:49:58:95:e1:9d:d2:93:ed:af:44:
0f:20:68:39:93:d7:63:d8:7e:75:a2:a9:85:f4:9b:
aa:80:b8:84:1a:f0:6a:01:09:30:ea:77:d5:5f:15:
74:1d:96:06:49:ff:3c:43:83:46:5a:a7:ee:c0:8e:
24:fa:73:96:64:b5:bb:8e:fa:28:a5:8c:1b:34:b1:
f7:d2:bc:a1:78:02:de:00:8a:16:7b:1e:6d:8c:12:
be:69:76:6b:e5:20:24:16:40:7f:26:2b:de:f7:18:
9c:59:b5:e4:78:6a:13:07:65:d5:3c:1d:63:42:95:
c2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E5:95:20:A5:5C:15:97:F9:39:F4:94:4A:F2:71:F3:1C:EB:1A:6C
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/SeWVIKVcFZf5OfSUSvJx8xzrGmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.76.0/22
Signature Algorithm: sha256WithRSAEncryption
14:d8:c1:70:78:02:0e:fb:d5:07:5d:0d:e2:d0:4b:33:9e:69:
d4:06:cc:64:71:e2:55:cb:1d:5f:8a:98:25:0c:4b:cc:c6:2d:
46:9a:c2:b4:dc:55:6e:7a:64:37:4f:d5:2e:47:77:3e:99:a8:
31:e9:0e:ef:91:d6:54:ad:f5:51:44:61:cb:6f:d8:36:b2:7e:
a2:7d:42:19:15:c3:48:bb:88:e2:e3:5a:8d:a4:b9:6f:8b:b4:
00:81:18:19:45:d5:02:b7:c1:8d:2f:d3:9c:b2:27:55:2a:53:
85:06:61:27:46:df:85:ec:e7:05:71:b7:bb:26:4a:d1:65:5b:
9f:31:38:bc:e8:2c:0d:b7:40:fc:1f:e8:33:c7:46:a9:f7:33:
2e:04:6a:98:27:00:e2:1b:20:46:28:bf:e9:2f:ae:e2:0e:c4:
bc:42:ac:0a:01:d4:d0:c9:7f:3e:48:04:bc:c8:1c:8f:6e:b4:
d8:9d:60:64:ef:e2:15:51:0f:b7:1e:f0:c3:e6:e2:6f:d6:85:
22:56:20:b5:fc:66:96:fd:46:6f:ba:7b:44:6c:ec:b9:6c:18:
58:bb:1e:ff:e2:c8:cb:a8:55:fd:6a:3a:4a:e5:b3:43:da:6c:
1f:15:32:e1:8f:6d:b5:c2:09:93:f8:64:e5:e4:69:47:01:75:
6d:40:49:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:09:43 2025 by rpki-client