Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/SWEdM65l-EYRwVqCTPoCOjy6GaM.roa
File: SWEdM65l-EYRwVqCTPoCOjy6GaM.roa (raw, json)
Hash identifier: Tv3EVv3dATD+Wzt7v7ZrOSKmfA3WJr20DMhoDuNr2kk=
Subject key identifier: 49:61:1D:33:AE:65:F8:46:11:C1:5A:82:4C:FA:02:3A:3C:BA:19:A3
Certificate issuer: /CN=69d731fa4dd292c0c0532eea6967cec0790745aa
Certificate serial: 01942143A5381E50F19D4B7E639906D8F15E
Authority key identifier: 69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/SWEdM65l-EYRwVqCTPoCOjy6GaM.roa
Signing time: Wed 01 Jan 2025 09:47:48 +0000
ROA not before: Wed 01 Jan 2025 09:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211809
IP address blocks: 185.96.32.0/22 maxlen: 24
2a13:eb00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.mft
rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:a5:38:1e:50:f1:9d:4b:7e:63:99:06:d8:f1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d731fa4dd292c0c0532eea6967cec0790745aa
Validity
Not Before: Jan 1 09:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49611d33ae65f84611c15a824cfa023a3cba19a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e4:ef:19:6a:79:b6:86:04:a2:f9:81:49:f4:
43:af:e8:ab:b1:a4:88:e3:c3:91:8f:63:88:39:ef:
0c:17:2e:6d:05:cc:70:8c:f8:39:3a:8e:d7:db:4f:
00:80:08:ee:c4:a2:11:77:a5:5d:63:16:bb:bf:7b:
4d:e8:b9:40:5e:e2:d1:4d:30:20:49:78:8a:d9:2f:
98:ba:f6:e1:72:fa:a3:1d:55:ef:de:b4:8e:16:c6:
4e:46:62:b4:cf:d8:bf:b9:bd:86:fc:b8:a4:1e:b4:
24:79:a1:d1:df:f5:6e:b6:1d:eb:3f:80:10:ee:35:
27:d8:c0:d8:86:16:f0:02:83:4e:58:bc:69:fb:ed:
6f:e7:75:b7:a2:4f:86:fc:f6:0a:a3:73:9a:7a:69:
5e:04:c6:07:1c:67:61:23:04:ef:11:8e:79:36:39:
15:62:78:04:9b:ac:fb:85:1f:1d:e6:ef:57:9c:ce:
a2:8b:89:41:91:2e:55:ad:70:ea:32:54:d7:e1:ab:
15:12:ef:10:c9:c9:b0:ca:c8:c7:1d:98:da:ea:f1:
52:48:a1:0f:9e:8d:3e:ca:c8:f2:a0:bc:22:cb:5a:
b6:ce:b8:5a:71:a9:9b:78:f4:d4:63:e7:f8:97:77:
bb:91:10:6f:7f:c8:ac:33:23:f3:69:de:75:25:e5:
66:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:61:1D:33:AE:65:F8:46:11:C1:5A:82:4C:FA:02:3A:3C:BA:19:A3
X509v3 Authority Key Identifier:
keyid:69:D7:31:FA:4D:D2:92:C0:C0:53:2E:EA:69:67:CE:C0:79:07:45:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adcx-k3SksDAUy7qaWfOwHkHRao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/SWEdM65l-EYRwVqCTPoCOjy6GaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/adcx-k3SksDAUy7qaWfOwHkHRao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.32.0/22
IPv6:
2a13:eb00::/29
Signature Algorithm: sha256WithRSAEncryption
3c:80:e1:9e:e2:52:97:51:55:d7:e3:fc:ed:16:2d:c8:e1:77:
ad:3a:63:0d:6c:95:e1:1a:e3:3e:a4:36:7a:b8:79:d2:f6:b2:
c9:e7:7d:22:b6:86:8d:6b:01:ef:72:73:e6:36:63:91:16:60:
e8:80:5d:9a:09:e6:92:07:7f:2d:09:c3:33:47:fa:32:a5:6d:
34:0f:3d:3b:b8:3a:1f:b2:6a:d7:9c:d9:8c:26:6c:b6:63:23:
8c:6f:af:e2:d0:1a:24:42:50:fc:2b:1e:45:79:8a:a9:db:bb:
32:59:5d:68:cf:5e:43:b3:8b:0b:67:da:2d:76:2a:c8:92:1e:
44:a9:fc:e9:d8:dd:92:3b:23:f3:42:34:24:9b:ca:4f:14:09:
56:88:cc:13:84:c6:ce:e7:19:8a:b5:5d:af:ea:ae:71:6e:4b:
b1:0b:89:4f:ff:6c:25:f1:71:cb:2d:4b:fd:68:ac:87:25:63:
89:48:a4:a5:8e:dc:1f:da:37:1b:39:13:cd:42:0f:5a:6e:33:
c1:b5:83:e4:40:37:bc:85:f7:35:5e:ac:75:fe:49:1b:92:99:
49:53:75:48:58:15:8d:1d:b1:95:71:f1:9b:b8:21:89:52:e4:
f7:f5:6e:0e:7e:97:13:64:78:d5:2a:65:29:0b:54:a7:25:92:
68:f4:74:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:02:24 2025 by rpki-client