Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/SMQ9QVGYhC0I8pIMSi7pgpsFW1c.roa
File: SMQ9QVGYhC0I8pIMSi7pgpsFW1c.roa (raw, json)
Hash identifier: P/Liu3FMs1RtZp34UhptoqasRnmxQc/4vGzdeX20sw8=
Subject key identifier: 48:C4:3D:41:51:98:84:2D:08:F2:92:0C:4A:2E:E9:82:9B:05:5B:57
Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial: 019422201D10272158BCA5D199A59773C901
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/SMQ9QVGYhC0I8pIMSi7pgpsFW1c.roa
Signing time: Wed 01 Jan 2025 13:48:37 +0000
ROA not before: Wed 01 Jan 2025 13:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31034
IP address blocks: 185.5.92.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1d:10:27:21:58:bc:a5:d1:99:a5:97:73:c9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Validity
Not Before: Jan 1 13:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48c43d415198842d08f2920c4a2ee9829b055b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:a3:9c:d6:08:35:c9:31:75:1c:a6:10:fd:
45:f7:59:4a:3b:69:a0:f5:15:f5:d1:1d:82:02:e8:
24:6a:9b:1d:3b:b8:0a:57:fc:37:f3:90:54:e2:4a:
c6:9d:f4:22:10:48:0b:f2:cc:35:1c:39:6e:d6:47:
f1:0e:7f:4f:f4:c9:74:8f:37:6f:67:07:05:cb:eb:
e0:d6:50:3b:29:97:3f:dd:6f:a4:54:8c:fb:f6:9c:
b3:f8:de:f6:48:41:ff:7c:c2:66:b0:af:3f:82:b2:
2a:d0:f3:18:dc:26:d0:e1:b7:47:21:12:d8:d5:2a:
97:de:60:45:9a:d6:b6:e2:5a:12:50:3e:5f:4b:e8:
7e:dd:2a:ff:be:35:61:2b:6b:0d:ea:2d:0f:6a:40:
ac:bf:e4:b4:b5:da:fc:f3:7c:b0:e0:71:12:ec:d4:
5e:f6:9c:26:fe:54:55:52:47:99:a8:24:79:e7:d2:
f2:32:25:c7:48:f1:2a:ba:78:f9:d4:4f:32:a9:46:
7f:a2:a8:33:74:94:d2:98:67:4d:f0:75:fd:5e:b3:
a5:93:4f:4b:0e:f1:3a:8b:8c:a4:96:2c:66:89:af:
9b:2b:3a:8b:a8:c4:73:d7:da:52:71:ac:33:c5:d2:
ef:fa:1b:af:89:d2:2b:f1:d8:ae:a4:48:81:a0:94:
e8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C4:3D:41:51:98:84:2D:08:F2:92:0C:4A:2E:E9:82:9B:05:5B:57
X509v3 Authority Key Identifier:
keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/SMQ9QVGYhC0I8pIMSi7pgpsFW1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.92.0/23
Signature Algorithm: sha256WithRSAEncryption
41:f3:76:74:7b:70:4d:bf:ca:86:ec:c4:41:b3:9c:91:d5:53:
2b:81:b5:0d:37:0d:ca:13:85:12:2c:49:12:f8:4f:39:75:a0:
c5:bd:cd:f0:8b:53:e6:5b:e1:e9:bc:b3:95:4a:cf:19:a5:29:
bb:52:20:24:c4:6c:ce:3c:3f:39:c2:3a:99:53:f3:65:71:8c:
99:cd:d0:0c:4a:f9:65:1c:fb:3c:84:4b:b1:35:07:b5:55:5c:
fc:9d:65:a4:39:69:d0:25:62:a4:75:5d:a2:c8:ea:62:00:c6:
e3:65:e1:e6:11:86:c5:31:2f:c3:38:66:57:d0:79:a8:e8:f0:
1f:96:22:83:dd:24:9a:28:26:c4:f8:70:ce:c4:28:0d:67:31:
d5:94:2f:ef:0f:1e:86:61:83:d3:e9:0c:7a:2c:0b:c6:22:2b:
ec:22:72:5f:d1:f5:9f:76:35:f3:0c:83:fa:57:03:9c:d2:c7:
63:8c:15:92:90:85:0b:8f:4f:68:f5:eb:96:2a:12:9e:e5:6d:
71:d7:6b:57:ae:21:d4:b7:b9:6a:b8:70:1d:3b:9f:89:a0:c6:
df:a7:64:40:56:dc:31:a8:5e:1a:bd:d8:e7:1e:b1:ee:95:b3:
ba:50:36:f9:41:e7:97:a1:90:3f:17:71:d3:b6:58:27:66:27:
84:80:36:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:22:26 2025 by rpki-client