Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/smSXSjOqkSm8yhu8ksysc8GRhzQ.roa
File: smSXSjOqkSm8yhu8ksysc8GRhzQ.roa (raw, json)
Hash identifier: Jq/+rwvgSdEvWUi01IBzdtKDZwEjK2lpfqbnsHzjr3s=
Subject key identifier: B2:64:97:4A:33:AA:91:29:BC:CA:1B:BC:92:CC:AC:73:C1:91:87:34
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 0196DA141258BFA3A18E3D7427E9A01C1A28
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/smSXSjOqkSm8yhu8ksysc8GRhzQ.roa
Signing time: Fri 16 May 2025 17:11:10 +0000
ROA not before: Fri 16 May 2025 17:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139646
IP address blocks: 46.8.120.0/21 maxlen: 24
109.248.16.0/21 maxlen: 24
109.248.24.0/22 maxlen: 24
109.248.28.0/22 maxlen: 24
188.130.228.0/22 maxlen: 24
188.130.228.0/23 maxlen: 24
188.130.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:14:12:58:bf:a3:a1:8e:3d:74:27:e9:a0:1c:1a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: May 16 17:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b264974a33aa9129bcca1bbc92ccac73c1918734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ef:aa:9e:6c:5b:c2:45:c3:92:13:b5:ec:cf:
85:56:8e:e1:45:da:12:3e:32:02:ba:89:cf:9d:1b:
77:2e:0f:d2:32:72:a6:a4:4f:13:8a:8b:20:6f:47:
09:6e:e8:c1:f8:90:2a:2c:a9:e0:d9:17:5d:8e:a3:
63:36:50:de:b5:a7:e4:00:3a:cd:c2:17:07:d1:93:
b6:78:65:88:7b:64:18:1d:13:69:a1:d8:f0:4c:e0:
f6:b1:cc:c1:c6:b0:8a:d0:e8:78:8b:cd:e1:01:81:
73:2f:9a:78:c7:da:be:56:58:1a:e0:1a:43:02:52:
98:f2:08:a8:07:ec:61:92:16:79:83:66:5e:23:1d:
df:93:69:19:d7:6b:a9:a4:de:9e:53:08:6f:b9:02:
13:3f:48:b4:c9:62:f9:96:96:45:63:5f:c9:09:2c:
ae:e0:41:2d:7a:b5:51:a1:71:be:cb:6f:e5:60:9d:
5d:2d:78:6a:ba:c0:44:66:81:18:86:4e:e4:89:9a:
01:df:4c:c9:01:2b:f6:10:96:9e:3f:a3:e4:9a:81:
4a:54:32:01:22:b5:56:0f:60:58:1f:4f:2c:1c:e3:
de:f2:08:15:99:b1:c3:6a:40:7c:c1:1d:53:61:bb:
fd:76:ea:e3:b7:8e:f9:b0:b1:1c:cd:dc:1b:b2:c7:
50:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:64:97:4A:33:AA:91:29:BC:CA:1B:BC:92:CC:AC:73:C1:91:87:34
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/smSXSjOqkSm8yhu8ksysc8GRhzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.120.0/21
109.248.16.0/20
188.130.228.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:71:44:ae:cf:81:1c:7c:2a:96:cf:58:44:a6:02:cc:2b:09:
00:d0:9c:db:f0:df:7b:6e:55:c9:92:e7:96:27:dd:28:82:35:
2b:63:3c:b0:13:b6:5d:b0:dc:22:44:3c:ad:35:e0:01:69:a2:
47:71:d2:46:6c:ed:23:77:a3:32:85:d0:ba:c3:0b:f8:a9:dd:
66:e3:be:af:9d:f4:2e:0a:22:57:4d:80:2b:4f:ee:ce:49:6c:
75:98:40:5a:f7:d3:69:a9:2f:93:4f:13:01:c5:fc:6d:ee:0f:
2e:c7:57:5b:62:ae:35:5c:6c:9d:a5:b2:5d:13:3b:2b:67:6f:
47:53:fa:ca:52:00:17:6b:8f:13:02:bc:f3:0b:97:57:8e:57:
5a:e6:3f:df:69:ce:ab:e0:02:f0:dc:47:78:5b:9e:dd:2e:8d:
ec:e0:a8:21:72:e5:3b:88:a6:4f:8f:bc:b4:1f:1e:ae:ef:95:
1f:c0:89:c1:c6:68:71:13:0e:ae:d2:cc:de:6f:54:40:19:dc:
ab:8f:4d:c0:62:48:01:f5:8f:12:d6:75:3e:66:1b:06:ad:1c:
48:b8:e2:25:03:cb:9e:ec:56:58:31:7a:c6:77:ad:44:29:31:
35:47:82:7d:73:c7:30:5f:a5:1c:e2:76:81:1c:1a:8e:d6:56:
4d:07:74:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:22:11 2025 by rpki-client