Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/SLGZR5HlGlUvyxXb4J9dlFoOmHA.roa
File: SLGZR5HlGlUvyxXb4J9dlFoOmHA.roa (raw, json)
Hash identifier: ItBZnQTRFfvhdaqeW1Co9+W+Nd7SvqU9wrygJFtBPMk=
Subject key identifier: 48:B1:99:47:91:E5:1A:55:2F:CB:15:DB:E0:9F:5D:94:5A:0E:98:70
Certificate issuer: /CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Certificate serial: 019422FB6C61ED4AA5C0E30F05F4974F49D8
Authority key identifier: C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/SLGZR5HlGlUvyxXb4J9dlFoOmHA.roa
Signing time: Wed 01 Jan 2025 17:48:10 +0000
ROA not before: Wed 01 Jan 2025 17:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.36.216.0/22 maxlen: 24
194.247.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:6c:61:ed:4a:a5:c0:e3:0f:05:f4:97:4f:49:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Validity
Not Before: Jan 1 17:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48b1994791e51a552fcb15dbe09f5d945a0e9870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:71:93:11:1c:27:5d:c4:cd:b2:2b:f3:e1:3e:
36:a5:db:14:d3:a1:97:35:45:be:d7:81:4c:02:50:
84:0a:cb:71:78:8d:e0:54:f8:5e:45:9f:27:88:75:
6f:bd:34:66:9e:52:48:78:30:f9:0b:26:f4:63:ac:
ae:8e:03:ec:0b:17:45:0a:02:a5:04:b8:e3:a3:ca:
d8:75:19:41:7e:43:29:42:3a:1f:97:09:2d:f3:7b:
7b:bb:3c:b1:dd:40:59:fe:30:f2:c6:e1:0f:34:b2:
85:82:0f:5f:54:0f:08:3a:46:f0:cf:44:fa:5e:75:
4c:55:6a:66:90:bb:87:44:e5:b4:6d:03:f7:8a:76:
19:4b:f7:12:05:14:b6:9b:14:e9:43:22:60:2f:c0:
2b:f1:c2:c6:20:6a:51:4d:9e:33:df:d6:b4:09:ce:
8f:ee:15:84:8b:e5:cb:d1:9e:68:3d:fa:b4:ec:bc:
09:20:f4:0c:af:4a:9a:91:d0:80:0f:1e:00:67:1a:
9e:a2:75:21:4e:66:e2:87:21:b7:0e:e6:49:62:b2:
86:4d:01:d0:6d:c8:0b:24:8b:de:c2:05:aa:7e:ab:
05:b7:b7:32:55:58:f5:3c:d3:84:b7:f7:ab:01:6a:
b4:15:83:95:de:e1:12:82:86:32:0d:68:19:b0:c6:
fd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B1:99:47:91:E5:1A:55:2F:CB:15:DB:E0:9F:5D:94:5A:0E:98:70
X509v3 Authority Key Identifier:
keyid:C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/SLGZR5HlGlUvyxXb4J9dlFoOmHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.216.0/22
194.247.26.0/23
Signature Algorithm: sha256WithRSAEncryption
01:6d:b0:0e:23:aa:9f:82:27:fe:42:07:be:32:3a:ed:3d:0a:
a6:55:bb:22:3b:59:d0:0d:7d:08:ec:4c:84:fb:cc:ba:48:50:
89:5b:eb:6c:64:8a:c8:b0:5d:c7:da:eb:4d:c0:5d:19:7a:f5:
fe:bb:ce:d7:c7:33:b8:6c:5d:11:fc:5a:98:b0:b9:cb:7b:43:
c1:ec:f1:b9:7b:8f:8e:fa:0e:00:5e:6e:7d:ab:4f:c3:72:60:
8b:cf:b8:d1:18:75:34:8b:07:2b:e1:cf:95:55:63:7c:f4:a2:
a6:48:48:a1:54:1a:c9:23:04:46:e0:bf:a8:5b:28:fc:ec:89:
a2:26:39:95:a3:fe:7b:8f:ea:70:0e:58:f5:b1:1c:c1:76:0b:
e9:78:36:49:87:82:43:07:42:b2:f5:64:2d:92:ae:27:5f:8c:
13:ed:3c:46:22:cb:f3:5b:ce:24:4b:e0:7b:e1:51:c4:22:0b:
97:53:6f:1f:e7:0b:71:e3:36:34:bc:79:fa:3a:19:1a:2e:4c:
9e:05:ab:24:05:49:12:c0:a5:26:37:17:62:53:4a:1d:bd:57:
54:d2:93:74:5a:25:2e:64:04:80:ea:23:62:b2:41:25:c2:e8:
b9:e1:3a:5b:5d:c3:95:be:b8:41:c7:14:8a:b1:fd:31:3d:16:
07:32:75:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 10 00:50:18 2025 by rpki-client