Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/swurPPgvx5Mw_k7aI45OkF86THI.roa
File: swurPPgvx5Mw_k7aI45OkF86THI.roa (raw, json)
Hash identifier: dit/va7s8wsuU7O85dlDJKzD74oG/IiETxDpxdGILWM=
Subject key identifier: B3:0B:AB:3C:F8:2F:C7:93:30:FE:4E:DA:23:8E:4E:90:5F:3A:4C:72
Certificate issuer: /CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Certificate serial: 0194214464A24A3F30BDF963B724FA746F40
Authority key identifier: A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/swurPPgvx5Mw_k7aI45OkF86THI.roa
Signing time: Wed 01 Jan 2025 09:48:37 +0000
ROA not before: Wed 01 Jan 2025 09:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204203
IP address blocks: 185.217.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:64:a2:4a:3f:30:bd:f9:63:b7:24:fa:74:6f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Validity
Not Before: Jan 1 09:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b30bab3cf82fc79330fe4eda238e4e905f3a4c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:b6:34:5d:05:53:f9:6a:9e:e8:38:4a:0c:
27:82:40:6b:0b:96:32:f5:8f:7d:39:e8:99:8b:99:
f3:f2:f7:d2:f7:47:24:ab:46:89:87:7c:8e:9c:03:
d4:aa:fb:ab:e0:2e:bb:50:43:fd:37:eb:67:30:bc:
af:de:b0:40:a2:88:e0:62:53:91:d7:98:ca:8e:bc:
7f:73:85:3c:27:4a:bf:ce:c6:7a:68:41:40:d2:f2:
89:e1:58:53:5a:d6:09:db:f1:41:89:5c:73:ed:7b:
8e:a0:d6:f5:fd:12:95:8a:26:18:24:76:6e:23:9f:
89:c7:7f:8c:df:88:fc:29:4e:07:8f:e1:32:92:98:
b5:de:b9:fa:f7:50:84:e2:df:ae:95:f3:f4:4b:90:
c8:75:43:ec:5c:0d:d3:d3:dd:99:38:7b:ef:ce:db:
70:8e:13:1a:85:c9:b1:0a:2a:26:aa:ee:83:44:b1:
d5:57:d4:67:c9:48:f0:e7:1b:c8:2d:44:f1:9e:31:
90:ef:b8:26:96:36:58:0a:ce:7c:84:fa:c3:6c:48:
3e:7e:08:fb:86:17:73:ce:04:ae:16:63:ba:cc:47:
b0:c3:2f:fa:0a:f2:5d:28:a6:fd:8f:96:22:57:4f:
cc:27:5f:55:c6:d7:61:39:12:e2:c9:7b:5f:c7:7e:
85:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0B:AB:3C:F8:2F:C7:93:30:FE:4E:DA:23:8E:4E:90:5F:3A:4C:72
X509v3 Authority Key Identifier:
keyid:A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/swurPPgvx5Mw_k7aI45OkF86THI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.6.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:f5:63:13:a4:3f:fc:cd:a5:d5:51:7e:31:63:21:11:d2:e2:
15:32:a5:45:61:84:e9:25:20:9a:53:78:80:c2:05:e2:ba:e3:
95:06:59:9a:18:e7:65:10:14:71:cd:13:d4:e7:e9:76:44:f3:
85:bf:ba:56:e4:c5:83:c3:59:40:2a:d2:47:72:11:b6:28:18:
dd:29:8f:4b:42:2d:5b:91:d1:92:cf:78:f6:f5:d1:eb:10:e4:
fc:fa:c7:23:df:e6:a0:6e:d4:4a:9e:cd:7f:d5:a2:d1:a8:6e:
eb:78:7f:c2:23:e0:d8:a1:56:82:ca:2a:77:7e:69:e7:42:71:
96:d8:2e:b6:a8:cb:76:98:b5:86:ba:64:04:5c:69:d1:3a:63:
23:5f:1f:ce:b2:c5:57:c6:23:78:89:77:5f:0d:a8:2b:32:75:
e2:60:9d:5f:c0:a9:78:4f:af:26:b6:d3:36:18:87:ee:19:32:
96:6e:07:ce:6d:29:82:75:78:b3:5d:ad:30:c5:6c:06:83:2b:
d6:3b:49:ba:7c:e6:73:e9:38:19:e5:3a:b4:09:fe:da:c7:07:
6e:8a:4f:95:7f:86:04:5c:d9:52:09:35:ac:aa:8b:71:94:1d:
f8:6a:d1:1c:3d:61:43:00:79:78:62:1f:10:bf:39:70:06:93:
72:77:7e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:49 2025 by rpki-client