Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/SdvawK2l2QMTxWUsBzsvDK2l55Y.roa
File: SdvawK2l2QMTxWUsBzsvDK2l55Y.roa (raw, json)
Hash identifier: 0IwztZlDbvlCLqvgLhsygToSdfiJSQpbte+efGKPWYs=
Subject key identifier: 49:DB:DA:C0:AD:A5:D9:03:13:C5:65:2C:07:3B:2F:0C:AD:A5:E7:96
Certificate issuer: /CN=0032534e8d560d73553c632bba10344a7c816614
Certificate serial: 019427B5C958191C2F3BFE3FD6F481460D0E
Authority key identifier: 00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/SdvawK2l2QMTxWUsBzsvDK2l55Y.roa
Signing time: Thu 02 Jan 2025 15:50:12 +0000
ROA not before: Thu 02 Jan 2025 15:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31035
IP address blocks: 194.246.99.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:c9:58:19:1c:2f:3b:fe:3f:d6:f4:81:46:0d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0032534e8d560d73553c632bba10344a7c816614
Validity
Not Before: Jan 2 15:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49dbdac0ada5d90313c5652c073b2f0cada5e796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:62:f4:e7:db:9d:e9:8e:19:d4:8c:74:2b:8b:
db:d9:25:89:55:1e:31:b2:a8:5f:26:2c:21:59:31:
5f:16:e6:d3:9d:27:17:b9:72:d9:0d:67:71:0c:41:
62:5e:76:30:64:ba:f4:35:f2:d7:56:38:34:76:cc:
a9:64:49:66:5d:36:5b:46:bf:53:7a:be:37:f5:7d:
3a:06:8a:0c:c2:2c:9f:14:60:89:74:2a:51:8d:71:
0e:84:e6:c2:b2:d3:ff:4b:20:32:23:4c:33:64:f5:
42:13:33:82:db:6b:47:87:ca:f4:c4:a3:71:bd:91:
5a:fd:3c:01:56:7b:f6:f6:5a:a5:76:13:f4:4e:a0:
71:b3:59:e1:5d:76:1b:e1:6d:5c:e6:0b:b7:96:0d:
0c:de:5a:a7:8d:d2:cf:29:14:7a:ec:a1:7b:45:fa:
ee:48:17:7f:a9:b2:bd:bf:e4:5a:f0:68:41:b5:94:
1f:6b:ff:b0:58:db:22:e3:19:65:b8:1f:dc:f0:d5:
85:59:69:3f:57:d0:8d:9c:eb:2e:c5:4b:29:ee:f8:
ed:9e:bd:8f:58:3e:61:cc:7d:41:0e:56:e6:71:cc:
a5:3d:63:f6:7c:75:41:4b:e1:64:c4:10:90:ba:0b:
b7:d6:f4:8f:aa:3f:4e:db:fd:35:2d:ed:ad:5e:d0:
c8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DB:DA:C0:AD:A5:D9:03:13:C5:65:2C:07:3B:2F:0C:AD:A5:E7:96
X509v3 Authority Key Identifier:
keyid:00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/SdvawK2l2QMTxWUsBzsvDK2l55Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.99.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:1e:43:ee:66:a6:ca:93:f0:dd:af:7f:f2:17:9e:5b:63:34:
4c:60:58:75:0d:0b:7c:c9:07:50:fd:98:7b:f0:3b:67:2c:59:
98:1f:a2:30:b5:b1:7d:8b:7f:4b:60:b5:f6:4d:50:05:62:61:
76:f0:1a:86:6e:e6:e8:58:da:44:29:a4:45:24:da:b7:d0:88:
20:e0:e1:81:a4:1d:22:0a:2f:48:f6:31:c9:1c:07:7e:49:3e:
6a:eb:90:b0:3a:8f:1c:a5:49:b6:be:94:3f:58:ec:00:08:70:
bb:ed:64:a3:96:a8:5b:39:7c:b2:7c:8e:76:cb:9c:9c:da:f9:
19:9a:25:87:fb:02:1d:bf:6a:3c:b4:a2:9f:fc:7d:91:c6:ed:
31:52:c8:e6:b2:40:0c:1f:0f:21:be:ad:b6:25:9e:82:df:cb:
bb:a8:45:b9:55:aa:42:a2:0a:1c:68:01:a5:17:69:55:0f:5e:
66:67:28:a1:5b:5b:44:26:bb:9e:70:14:dc:db:8f:0e:8d:52:
d8:64:ae:a9:38:b3:5c:95:a0:92:69:fb:d2:fe:cb:75:f5:69:
97:fc:01:c4:d4:06:b2:16:8a:1f:5b:8f:d3:1b:66:17:f6:6d:
65:60:ce:6e:55:8e:ba:22:3c:e2:53:65:d7:a3:9f:1e:4d:11:
de:fe:79:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:34 2025 by rpki-client