Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SgVz4Rhh2Ype3A59WGbt5jdH2m8.roa
File: SgVz4Rhh2Ype3A59WGbt5jdH2m8.roa (raw, json)
Hash identifier: +xIisR5vxXG2z9EPwn6u9uPIg7+bwDVFkwKXElUiUts=
Subject key identifier: 4A:05:73:E1:18:61:D9:8A:5E:DC:0E:7D:58:66:ED:E6:37:47:DA:6F
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0194266BF222E50DBACA4747A9297FED8080
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SgVz4Rhh2Ype3A59WGbt5jdH2m8.roa
Signing time: Thu 02 Jan 2025 09:49:56 +0000
ROA not before: Thu 02 Jan 2025 09:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211620
IP address blocks: 2a0f:5707:abb0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f2:22:e5:0d:ba:ca:47:47:a9:29:7f:ed:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 09:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a0573e11861d98a5edc0e7d5866ede63747da6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ca:29:75:6e:22:98:6a:78:cc:6b:b7:2d:5f:
70:ef:ec:19:8f:b8:d8:71:88:50:76:7c:79:71:e0:
e6:db:42:c9:cb:47:1e:60:47:ce:54:40:92:a1:92:
a4:f8:2e:5c:06:a0:35:a9:2d:a7:e1:39:d9:bd:96:
3a:82:f8:6f:08:0e:9c:79:63:11:0b:c9:ec:15:22:
cf:82:aa:e4:3f:74:30:e5:b1:1a:e6:d4:9b:14:da:
79:df:c9:e0:72:0e:f6:39:8f:75:75:f4:6f:63:46:
91:b1:ad:df:e7:71:ed:85:8a:9c:e7:01:0a:65:09:
75:61:c4:95:f8:07:69:33:ee:8d:2c:b3:33:5b:62:
bc:2d:65:40:ff:f6:c4:86:73:34:6f:9d:09:e0:48:
f3:00:24:6e:8e:80:d9:35:54:9e:76:02:17:4b:3c:
fc:6d:ba:b3:61:22:7c:72:ed:53:b0:51:41:fd:40:
49:7b:cb:cc:79:66:81:97:b5:d2:1c:8e:8f:38:d7:
37:bc:e4:77:2e:4d:17:c9:66:e4:bb:e5:b3:c4:81:
b5:b9:3a:6d:8c:7e:40:6a:f0:a0:29:c8:71:cd:4b:
3e:c3:ed:7f:83:ae:16:dc:cf:d1:a9:fd:61:fa:56:
df:be:81:c8:43:84:64:78:ac:e7:2e:c3:c4:8c:38:
cb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:05:73:E1:18:61:D9:8A:5E:DC:0E:7D:58:66:ED:E6:37:47:DA:6F
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SgVz4Rhh2Ype3A59WGbt5jdH2m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:abb0::/44
Signature Algorithm: sha256WithRSAEncryption
08:9c:33:f8:49:61:cf:52:19:64:89:4c:bb:e6:d0:54:d6:d0:
33:80:39:34:e9:68:f7:f7:0c:16:7e:b8:e1:2c:13:36:b0:22:
e3:63:38:b3:80:19:c8:d2:5a:e7:41:8c:f7:82:73:64:f0:c7:
fa:c1:12:a6:df:6b:e7:ef:82:69:19:f0:d3:33:7f:fd:93:22:
28:d1:54:10:8d:1a:bd:40:b8:16:00:20:98:f5:5c:48:6a:f4:
f0:4d:f4:22:20:b7:f3:a9:d3:53:0b:9b:3f:d0:53:78:5b:0f:
58:a1:e6:69:06:c7:6c:38:53:68:ee:5f:c6:fe:13:4e:cc:2f:
c1:8f:9f:74:ba:1c:27:48:18:b8:c5:f6:b7:33:7c:e5:81:59:
ff:78:67:b6:08:74:1a:ea:b1:1f:2b:30:1d:9e:5c:d5:4d:3e:
0b:06:c1:1a:27:8a:3a:b0:7d:4b:e4:02:a8:00:4e:89:b1:8f:
4d:2e:ca:9c:ff:ad:17:c0:7c:90:85:38:b8:e9:e6:0e:9a:e1:
b3:1d:b9:9e:63:99:ec:61:e2:1a:25:5e:eb:9f:c9:db:92:ed:
a9:15:61:37:f3:41:3a:b3:8e:27:ef:ad:17:94:cf:f6:7a:4c:
57:6d:46:44:fd:e0:ad:a9:d8:89:1b:9f:2a:5a:b6:be:a7:8c:
31:7e:49:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:45:32 2025 by rpki-client