Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SckUylR9vyQXpFkiBcOuOlAHE6Y.roa
File: SckUylR9vyQXpFkiBcOuOlAHE6Y.roa (raw, json)
Hash identifier: enKyEpEfGine+RttIjtRRlMwsZBV//uEh/EJ4TDu2ck=
Subject key identifier: 49:C9:14:CA:54:7D:BF:24:17:A4:59:22:05:C3:AE:3A:50:07:13:A6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194214402AB58E4C4F94DD32D4553768000
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SckUylR9vyQXpFkiBcOuOlAHE6Y.roa
Signing time: Wed 01 Jan 2025 09:48:12 +0000
ROA not before: Wed 01 Jan 2025 09:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202662
IP address blocks: 82.152.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:02:ab:58:e4:c4:f9:4d:d3:2d:45:53:76:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49c914ca547dbf2417a4592205c3ae3a500713a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:62:d9:94:7a:f5:c2:3b:a7:3c:ac:12:84:03:
a2:cb:33:54:23:d3:40:77:92:8f:8b:e4:ad:61:86:
71:2d:2e:75:d4:40:5c:bc:45:e5:e8:d2:3e:4e:bb:
23:6c:61:01:74:b8:66:7f:11:64:e8:4c:3d:29:6c:
d5:44:64:c6:55:e7:f8:53:6b:f7:47:d2:97:02:26:
a2:96:ed:4f:f0:98:84:a8:c0:0d:c6:e7:a3:eb:09:
5e:73:52:af:5f:96:4a:e8:96:e2:29:70:25:89:68:
0f:0d:6b:8b:d9:16:ae:20:d3:0d:c9:14:46:bf:b7:
b0:00:41:ee:4e:94:fe:3c:4e:4b:a6:3d:ba:f9:a2:
15:de:cd:00:e6:7f:40:59:37:c7:fb:19:36:11:a5:
e8:af:7a:28:11:86:dd:7a:d3:11:60:7f:62:54:8a:
f3:34:ef:d7:f3:61:33:49:f8:f2:31:a5:8f:12:cc:
7f:d9:dc:36:20:5e:1b:63:72:1f:2d:ec:12:a1:22:
0d:81:22:ad:8c:5b:cc:9f:45:df:d5:a3:e9:09:5a:
d7:d2:4f:46:96:4d:fa:3b:3e:d6:50:fd:93:fb:1b:
4b:1e:00:60:04:9f:1b:a1:5c:c4:ad:a4:57:a1:42:
54:ab:47:70:45:5e:bd:02:b6:fa:de:6f:cd:d8:89:
41:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C9:14:CA:54:7D:BF:24:17:A4:59:22:05:C3:AE:3A:50:07:13:A6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SckUylR9vyQXpFkiBcOuOlAHE6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.160.0/21
Signature Algorithm: sha256WithRSAEncryption
32:ac:da:71:4c:56:b2:70:99:81:48:42:f2:46:89:d2:6a:ff:
54:80:fb:90:0a:fc:bf:4a:de:3f:05:f0:48:e6:2d:bc:a4:ef:
b0:79:9d:e2:25:81:49:5a:95:32:9a:15:eb:03:b6:49:20:e3:
9e:5b:39:97:30:20:69:3a:14:f8:4f:6e:65:45:8a:1b:a1:9f:
4f:56:54:6a:76:a7:48:5f:f1:1a:19:29:35:47:09:f8:db:0e:
ee:06:59:45:14:7c:fe:0c:b3:61:c6:d4:a1:22:a3:79:7e:15:
89:6c:87:82:9f:c3:35:6c:fa:c1:2d:71:a9:44:47:65:7e:d3:
ce:44:35:d6:2a:0c:c1:e1:af:49:3a:6a:0e:37:cc:41:40:fb:
be:61:45:22:02:46:0b:dc:7b:24:bb:f7:75:3b:ee:6e:b5:1e:
0a:2a:83:75:f2:ec:e1:3a:6b:49:ca:60:47:db:43:60:f6:8d:
2c:49:f3:49:dc:d4:de:58:27:78:5e:18:b8:9e:da:c5:6a:f4:
64:e3:a3:77:a0:ec:80:fb:db:7a:ef:a5:67:5c:b3:7e:c5:9a:
2e:76:66:50:37:31:40:e4:ab:eb:ca:f6:db:54:f8:6e:09:b6:
b1:a8:5e:d1:c8:aa:79:b5:d5:95:ce:e2:3c:ce:03:b5:d6:0f:
d0:28:22:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:50:51 2025 by rpki-client