Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/SSnanM1-AOhB6jazpGw2Wx5qtsA.roa
File: SSnanM1-AOhB6jazpGw2Wx5qtsA.roa (raw, json)
Hash identifier: PJm2LHbdL6q86F0ojR19eAq4coi3I/A843rYXRGwOLE=
Subject key identifier: 49:29:DA:9C:CD:7E:00:E8:41:EA:36:B3:A4:6C:36:5B:1E:6A:B6:C0
Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Certificate serial: 019425203F058C4FAD9F8DCABC394C1475F2
Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/SSnanM1-AOhB6jazpGw2Wx5qtsA.roa
Signing time: Thu 02 Jan 2025 03:47:37 +0000
ROA not before: Thu 02 Jan 2025 03:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48614
IP address blocks: 185.185.56.0/22 maxlen: 22
193.106.92.0/22 maxlen: 22
195.93.180.0/23 maxlen: 23
2a0b:4880::/48 maxlen: 48
2a0b:4880:1::/48 maxlen: 48
2a0b:4880:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:3f:05:8c:4f:ad:9f:8d:ca:bc:39:4c:14:75:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Validity
Not Before: Jan 2 03:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4929da9ccd7e00e841ea36b3a46c365b1e6ab6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5a:3c:2b:50:a2:60:36:60:a4:53:6a:bf:ee:
fd:eb:9d:e1:99:ec:ad:ac:35:31:91:84:46:09:8e:
f6:4c:d7:e8:25:54:ff:4e:45:fa:e0:cb:bc:c2:ad:
a9:f3:de:64:50:c5:e6:18:77:9f:c0:44:62:2c:c1:
eb:9e:c3:77:f9:eb:44:5c:2f:15:d1:81:ca:74:41:
4c:17:64:6e:a2:32:fd:2f:6e:74:29:a4:4f:ce:01:
ff:17:7b:68:2d:d7:bf:38:4a:52:ca:81:3b:ba:58:
3c:80:a8:f5:81:02:17:b9:1c:83:1c:19:b8:da:55:
bd:7a:ff:77:c5:75:af:44:c6:4f:0b:2a:ad:fc:36:
7f:e7:fe:a9:ce:f2:20:2c:25:b7:98:41:2b:9a:0d:
cf:16:f4:ed:32:f0:e0:af:b3:2e:14:f1:16:d3:e4:
80:b3:ed:30:a4:fd:57:59:b1:4d:af:fe:5d:f7:33:
a7:83:3c:20:08:1b:97:f5:91:a8:b6:5d:5f:5f:93:
ea:6b:2a:8e:f8:4c:96:ed:8c:ec:66:54:54:ef:66:
a1:f1:9b:cb:39:b4:a4:ab:51:d4:d2:98:3f:a6:bf:
6a:6f:d7:ab:ce:33:12:f5:60:95:2d:2c:de:0f:55:
c5:2a:13:2b:7a:ea:97:85:bd:e9:10:07:85:82:c1:
1c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:29:DA:9C:CD:7E:00:E8:41:EA:36:B3:A4:6C:36:5B:1E:6A:B6:C0
X509v3 Authority Key Identifier:
keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/SSnanM1-AOhB6jazpGw2Wx5qtsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.56.0/22
193.106.92.0/22
195.93.180.0/23
IPv6:
2a0b:4880::-2a0b:4880:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3e:5f:aa:5c:11:b9:ea:ef:a3:88:cb:5b:51:56:44:e8:48:e2:
21:a6:4d:7f:c2:6f:f8:04:c1:91:67:24:02:bd:1d:80:d8:fa:
51:c4:14:1c:da:14:2b:d9:15:16:1f:8f:54:fd:dd:3f:db:38:
05:e2:fb:56:d4:0d:87:39:2c:fa:b3:a1:01:ae:08:e0:94:be:
7a:2a:86:25:bc:0c:f9:c7:7b:01:2e:2b:47:7f:8c:b7:6f:71:
a2:23:ab:9a:d6:79:49:31:f0:c3:c8:98:ee:b7:48:ea:e4:66:
3c:12:53:d5:64:83:67:45:b0:1b:6f:64:c9:8c:33:d3:67:6d:
35:2d:32:4a:53:14:b8:08:09:54:20:64:d1:4e:98:37:15:33:
b0:9d:cd:9f:52:90:c6:b8:fb:20:54:7f:65:d7:c3:6a:70:ac:
70:5f:67:97:9d:64:65:2c:40:4a:ef:21:fc:ac:a0:1f:7f:41:
5c:4c:a9:bc:31:e4:b0:c5:9b:bf:5a:af:25:dd:f8:e7:cc:e0:
5d:68:ce:8c:24:0a:49:83:75:48:35:0c:47:9b:ee:56:2f:ad:
ce:9b:63:83:b1:f8:5f:a9:5b:57:9e:52:62:ae:2b:be:68:fe:
8e:96:30:c7:67:21:cb:ed:ae:05:eb:17:dd:dd:35:f9:b6:f9:
c1:86:70:46
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZQlID8FjE+tn43KvDlMFHXyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjY2Q2ZGVjNjdiMDg4MmQxNWUzMjgyNTI2OTgwYTE2N2I0
MjA4YjcwHhcNMjUwMTAyMDM0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTI5ZGE5Y2NkN2UwMGU4NDFlYTM2YjNhNDZjMzY1YjFlNmFiNmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1o8K1CiYDZgpFNqv+79653hmeyt
rDUxkYRGCY72TNfoJVT/TkX64Mu8wq2p895kUMXmGHefwERiLMHrnsN3+etEXC8V
0YHKdEFMF2RuojL9L250KaRPzgH/F3toLde/OEpSyoE7ulg8gKj1gQIXuRyDHBm4
2lW9ev93xXWvRMZPCyqt/DZ/5/6pzvIgLCW3mEErmg3PFvTtMvDgr7MuFPEW0+SA
s+0wpP1XWbFNr/5d9zOngzwgCBuX9ZGotl1fX5PqayqO+EyW7YzsZlRU72ah8ZvL
ObSkq1HU0pg/pr9qb9erzjMS9WCVLSzeD1XFKhMreuqXhb3pEAeFgsEcFwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFEkp2pzNfgDoQeo2s6RsNlsearbAMB8GA1UdIwQY
MBaAFHzNbexnsIgtFeMoJSaYChZ7Qgi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk0xdDdHZXdpQzBWNHlnbEpwZ0tGbnRDQ0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iNGNlOWEtNDg3Ny00MTU5LWJkODAt
YmVhY2IwOTRmODBjLzEvU1NuYW5NMS1BT2hCNmphenBHdzJXeDVxdHNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9iNGNlOWEtNDg3Ny00MTU5LWJkODAtYmVhY2IwOTRmODBj
LzEvZk0xdDdHZXdpQzBWNHlnbEpwZ0tGbnRDQ0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQCubk4AwQC
wWpcAwQBw120MBgEAgACMBIwEAMFByoLSIADBwAqC0iAAAIwDQYJKoZIhvcNAQEL
BQADggEBAD5fqlwRuervo4jLW1FWROhI4iGmTX/Cb/gEwZFnJAK9HYDY+lHEFBza
FCvZFRYfj1T93T/bOAXi+1bUDYc5LPqzoQGuCOCUvnoqhiW8DPnHewEuK0d/jLdv
caIjq5rWeUkx8MPImO63SOrkZjwSU9Vkg2dFsBtvZMmMM9NnbTUtMkpTFLgICVQg
ZNFOmDcVM7CdzZ9SkMa4+yBUf2XXw2pwrHBfZ5edZGUsQErvIfysoB9/QVxMqbwx
5LDFm79aryXd+OfM4F1ozowkCkmDdUg1DEeb7lYvrc6bY4Ox+F+pW1eeUmKuK75o
/o6WMMdnIcvtrgXrF93dNfm2+cGGcEY=
-----END CERTIFICATE-----
Generated at Sun Apr 13 03:59:12 2025 by rpki-client