Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/SGAPHhpCJa9JFOb_Zf20G8kvkhI.roa
File: SGAPHhpCJa9JFOb_Zf20G8kvkhI.roa (raw, json)
Hash identifier: 27D8nmxY/4y8rMryghx5LNMAGS+7aTblTkGND6PBRy0=
Subject key identifier: 48:60:0F:1E:1A:42:25:AF:49:14:E6:FF:65:FD:B4:1B:C9:2F:92:12
Certificate issuer: /CN=ce49fc134b706542caf1a1efbe034f7011b49436
Certificate serial: 0194228E14A1C0DA9F77F78CCBA948A7D952
Authority key identifier: CE:49:FC:13:4B:70:65:42:CA:F1:A1:EF:BE:03:4F:70:11:B4:94:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkn8E0twZULK8aHvvgNPcBG0lDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/SGAPHhpCJa9JFOb_Zf20G8kvkhI.roa
Signing time: Wed 01 Jan 2025 15:48:44 +0000
ROA not before: Wed 01 Jan 2025 15:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215563
IP address blocks: 91.223.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkn8E0twZULK8aHvvgNPcBG0lDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:14:a1:c0:da:9f:77:f7:8c:cb:a9:48:a7:d9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce49fc134b706542caf1a1efbe034f7011b49436
Validity
Not Before: Jan 1 15:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48600f1e1a4225af4914e6ff65fdb41bc92f9212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cf:14:a7:62:56:49:a1:06:d9:b7:a9:58:4b:
9f:4c:a8:d2:b5:73:bf:33:75:9e:6e:67:7c:e1:b8:
4a:b0:cd:c9:7e:4b:81:ba:58:8f:8f:d4:00:c1:d5:
d8:d3:ad:ab:4e:f0:3b:b2:07:e2:f8:d9:c1:95:82:
8a:07:78:dc:bd:f2:6f:54:2f:67:4c:0d:e7:00:b1:
a7:1e:df:b1:bf:0a:11:c2:46:b5:3c:91:f4:da:ae:
5d:56:de:4c:e4:f7:b2:f3:d6:1d:a3:23:82:ec:07:
c3:70:63:40:e6:ae:b1:46:40:a6:1f:3d:d6:7c:69:
52:9d:47:71:d5:8e:ad:a5:2c:8f:74:52:d3:d6:2b:
d1:f9:12:79:1f:af:3a:1e:bf:e0:77:00:55:b9:a5:
b6:a9:e3:11:07:8b:87:e3:f5:62:e6:2f:e6:f3:97:
40:5e:a1:7c:a0:e0:21:a7:a9:0d:13:37:c2:b2:3b:
73:8e:41:6a:f3:0c:9f:1b:bd:3b:f3:21:aa:66:bd:
12:9c:6b:f6:70:e3:49:cd:e4:06:41:03:19:cf:d0:
c3:14:95:04:54:66:c0:f1:e8:2e:b0:9f:4a:89:91:
55:f9:77:a3:ad:6f:43:14:65:29:81:34:30:32:8f:
f4:2c:f3:00:c5:1f:95:46:ae:65:56:c9:25:90:75:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:60:0F:1E:1A:42:25:AF:49:14:E6:FF:65:FD:B4:1B:C9:2F:92:12
X509v3 Authority Key Identifier:
keyid:CE:49:FC:13:4B:70:65:42:CA:F1:A1:EF:BE:03:4F:70:11:B4:94:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkn8E0twZULK8aHvvgNPcBG0lDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/SGAPHhpCJa9JFOb_Zf20G8kvkhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.183.0/24
Signature Algorithm: sha256WithRSAEncryption
84:4e:72:a5:5e:9d:5e:32:e6:1f:af:7e:7a:e3:03:6d:55:92:
8a:2c:5d:23:1a:ff:75:58:fe:f8:fc:2c:24:db:17:8c:c0:b8:
1b:16:c8:c4:8e:15:a0:fe:4a:d3:26:5f:ca:bd:f8:80:be:85:
27:20:04:33:12:7a:05:63:cf:5d:2a:5d:e8:02:55:45:fe:61:
42:be:04:4b:d7:c4:c7:06:83:90:be:30:af:0f:e6:d2:f1:30:
00:4c:39:73:19:8d:ee:70:e3:01:e6:f2:6b:3a:f9:8b:c3:88:
51:85:8c:44:3e:f0:43:d9:7c:a3:48:b5:83:9d:17:8b:35:ea:
78:32:e5:5a:c7:f0:87:1c:04:94:3e:ae:c8:60:9f:d0:c0:0b:
9c:ee:c6:5e:67:dc:8c:37:f8:d5:28:6e:30:39:b6:d0:be:77:
52:d7:bb:5b:82:a8:0b:a7:17:13:d1:c8:90:cd:d8:94:d5:d3:
77:7a:21:f5:00:b9:5c:da:53:e0:49:22:4b:05:4f:cc:a7:ad:
1a:05:c3:73:cc:2a:de:78:0e:68:b3:61:85:8a:7e:14:f6:c4:
a3:b2:9b:7a:c1:91:b0:16:d3:9e:6b:1c:d0:f9:ed:db:a9:a2:
11:e7:db:59:32:b8:b6:d0:5e:75:c9:89:f9:06:01:0a:96:6e:
32:70:ce:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijhShwNqfd/eMy6lIp9lSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNDlmYzEzNGI3MDY1NDJjYWYxYTFlZmJlMDM0ZjcwMTFi
NDk0MzYwHhcNMjUwMTAxMTU0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODYwMGYxZTFhNDIyNWFmNDkxNGU2ZmY2NWZkYjQxYmM5MmY5MjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns8Up2JWSaEG2bepWEufTKjStXO/
M3Webmd84bhKsM3JfkuBuliPj9QAwdXY062rTvA7sgfi+NnBlYKKB3jcvfJvVC9n
TA3nALGnHt+xvwoRwka1PJH02q5dVt5M5Pey89YdoyOC7AfDcGNA5q6xRkCmHz3W
fGlSnUdx1Y6tpSyPdFLT1ivR+RJ5H686Hr/gdwBVuaW2qeMRB4uH4/Vi5i/m85dA
XqF8oOAhp6kNEzfCsjtzjkFq8wyfG7078yGqZr0SnGv2cONJzeQGQQMZz9DDFJUE
VGbA8egusJ9KiZFV+XejrW9DFGUpgTQwMo/0LPMAxR+VRq5lVsklkHUg0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEhgDx4aQiWvSRTm/2X9tBvJL5ISMB8GA1UdIwQY
MBaAFM5J/BNLcGVCyvGh774DT3ARtJQ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemtuOEUwdHdaVUxLOGFIdnZnTlBjQkcwbERZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8wMWRiYmMtMmZiYS00ZDk3LTg1ZjYt
NjQxZWRkYTA2Y2NlLzEvU0dBUEhocENKYTlKRk9iX1pmMjBHOGt2a2hJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8wMWRiYmMtMmZiYS00ZDk3LTg1ZjYtNjQxZWRkYTA2Y2Nl
LzEvemtuOEUwdHdaVUxLOGFIdnZnTlBjQkcwbERZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9+3MA0G
CSqGSIb3DQEBCwUAA4IBAQCETnKlXp1eMuYfr3564wNtVZKKLF0jGv91WP74/Cwk
2xeMwLgbFsjEjhWg/krTJl/KvfiAvoUnIAQzEnoFY89dKl3oAlVF/mFCvgRL18TH
BoOQvjCvD+bS8TAATDlzGY3ucOMB5vJrOvmLw4hRhYxEPvBD2XyjSLWDnReLNep4
MuVax/CHHASUPq7IYJ/QwAuc7sZeZ9yMN/jVKG4wObbQvndS17tbgqgLpxcT0ciQ
zdiU1dN3eiH1ALlc2lPgSSJLBU/Mp60aBcNzzCreeA5os2GFin4U9sSjspt6wZGw
FtOeaxzQ+e3bqaIR59tZMri20F51yYn5BgEKlm4ycM6Z
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:59 2025 by rpki-client