Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/SMwI-Rnmis2eePW_F_GRyzsQVwc.roa
File: SMwI-Rnmis2eePW_F_GRyzsQVwc.roa (raw, json)
Hash identifier: tdRLxodAQZWX8dKW9xJOxhOQI+ocU2apdjVD9eeaSWc=
Subject key identifier: 48:CC:08:F9:19:E6:8A:CD:9E:78:F5:BF:17:F1:91:CB:3B:10:57:07
Certificate issuer: /CN=a633725cd5dd91cf190ab3a99526e898357856ef
Certificate serial: 019427478D15676AA5333765024A7C07BF90
Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/SMwI-Rnmis2eePW_F_GRyzsQVwc.roa
Signing time: Thu 02 Jan 2025 13:49:48 +0000
ROA not before: Thu 02 Jan 2025 13:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209781
IP address blocks: 128.246.0.0/16 maxlen: 24
141.6.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:8d:15:67:6a:a5:33:37:65:02:4a:7c:07:bf:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef
Validity
Not Before: Jan 2 13:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48cc08f919e68acd9e78f5bf17f191cb3b105707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:b6:0c:c9:56:5e:17:bd:04:6e:65:ce:e3:
a2:a7:5f:c0:c7:30:9c:e7:23:55:c2:0d:9d:cd:23:
de:ab:a9:b7:af:41:7b:97:a2:ca:3f:8c:43:4d:b3:
1c:a5:cd:26:7b:c6:0b:48:cb:26:4f:7f:f0:f4:6d:
99:e1:ec:44:06:95:ae:ba:3e:75:45:3e:f3:79:86:
71:ca:85:ca:e0:f6:fe:e3:7a:b8:f4:a4:70:e5:7b:
dc:2b:d3:f9:4f:37:8f:3f:71:ba:c4:a0:b6:d0:c4:
18:d3:02:02:1e:8d:a7:b5:06:b8:2c:24:39:fd:c0:
26:17:77:c9:40:d3:ea:86:35:3d:84:0d:09:26:f1:
9c:df:d2:da:f8:d1:cb:3d:af:9d:a4:23:52:91:33:
40:49:3f:7f:ec:e4:7f:a2:7c:5e:ea:50:b4:70:a0:
c9:d9:3b:d3:6c:81:16:c5:a1:f4:d1:26:13:f6:65:
d4:be:2d:65:7e:5c:a4:c1:4d:72:aa:91:1f:72:49:
e8:8a:77:7f:44:90:22:de:ee:31:a5:5f:d5:c6:88:
a1:7e:5b:d8:14:d0:fe:9d:32:c6:6a:03:39:2d:05:
2d:f6:c5:71:02:ed:91:02:2f:29:fd:4e:59:40:c1:
e3:0c:72:d9:7c:6e:6f:27:09:59:4b:c2:90:4e:4e:
83:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CC:08:F9:19:E6:8A:CD:9E:78:F5:BF:17:F1:91:CB:3B:10:57:07
X509v3 Authority Key Identifier:
keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/SMwI-Rnmis2eePW_F_GRyzsQVwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.246.0.0/16
141.6.0.0/16
Signature Algorithm: sha256WithRSAEncryption
30:79:34:d7:b1:04:fc:95:18:c4:2b:39:6f:59:5a:d4:09:03:
94:f2:bf:a6:fe:23:6a:58:17:09:d6:92:a1:e1:ca:0a:38:a8:
42:5b:03:5f:05:7f:c6:06:e4:de:46:21:ff:4a:dc:35:4a:82:
86:aa:8f:66:37:ff:dd:95:64:24:9f:52:73:15:cb:91:4b:65:
6e:66:67:db:c3:85:ba:55:51:bc:2b:8b:9c:0a:30:aa:49:e1:
3e:2d:19:59:8e:02:47:d0:b0:6e:2a:9c:f5:ee:05:75:8c:16:
e9:d1:16:27:2e:7c:f4:c3:7b:ca:14:a4:1f:71:07:73:7e:b0:
ba:10:62:54:fa:dc:c1:e4:bc:3d:7b:e0:0c:a8:40:6d:64:42:
fc:15:5d:b2:4a:9a:5a:ac:b1:14:fa:5e:36:d8:e3:29:01:b8:
2d:52:c6:f7:27:45:d4:4e:f3:70:81:6e:04:4a:ed:77:5f:86:
dc:12:84:c9:a7:ed:a8:a0:bf:96:b7:59:98:15:9e:b1:07:5c:
1b:95:2c:84:dd:f0:05:f1:a1:d5:57:06:6a:da:7e:4e:f5:2d:
7b:b6:76:4d:0d:a4:09:bd:f1:53:fd:e0:6b:fb:91:91:80:00:
04:b0:5f:85:82:f0:2c:f4:51:83:ef:3c:08:02:57:3b:f1:c7:
53:8e:5d:e4
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAZQnR40VZ2qlMzdlAkp8B7+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MzM3MjVjZDVkZDkxY2YxOTBhYjNhOTk1MjZlODk4MzU3
ODU2ZWYwHhcNMjUwMTAyMTM0OTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGNjMDhmOTE5ZTY4YWNkOWU3OGY1YmYxN2YxOTFjYjNiMTA1NzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1G2DMlWXhe9BG5lzuOip1/AxzCc
5yNVwg2dzSPeq6m3r0F7l6LKP4xDTbMcpc0me8YLSMsmT3/w9G2Z4exEBpWuuj51
RT7zeYZxyoXK4Pb+43q49KRw5XvcK9P5TzePP3G6xKC20MQY0wICHo2ntQa4LCQ5
/cAmF3fJQNPqhjU9hA0JJvGc39La+NHLPa+dpCNSkTNAST9/7OR/onxe6lC0cKDJ
2TvTbIEWxaH00SYT9mXUvi1lflykwU1yqpEfcknoind/RJAi3u4xpV/VxoihflvY
FND+nTLGagM5LQUt9sVxAu2RAi8p/U5ZQMHjDHLZfG5vJwlZS8KQTk6DDwIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFEjMCPkZ5orNnnj1vxfxkcs7EFcHMB8GA1UdIwQY
MBaAFKYzclzV3ZHPGQqzqZUm6Jg1eFbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81Yjg1NmEtYTkwZC00NzkxLTljMTAt
YzBiODEzYjRlYzdlLzEvU013SS1Sbm1pczJlZVBXX0ZfR1J5enNRVndjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC81Yjg1NmEtYTkwZC00NzkxLTljMTAtYzBiODEzYjRlYzdl
LzEvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAgPYDAwCN
BjANBgkqhkiG9w0BAQsFAAOCAQEAMHk017EE/JUYxCs5b1la1AkDlPK/pv4jalgX
CdaSoeHKCjioQlsDXwV/xgbk3kYh/0rcNUqChqqPZjf/3ZVkJJ9ScxXLkUtlbmZn
28OFulVRvCuLnAowqknhPi0ZWY4CR9Cwbiqc9e4FdYwW6dEWJy589MN7yhSkH3EH
c36wuhBiVPrcweS8PXvgDKhAbWRC/BVdskqaWqyxFPpeNtjjKQG4LVLG9ydF1E7z
cIFuBErtd1+G3BKEyaftqKC/lrdZmBWesQdcG5UshN3wBfGh1VcGatp+TvUte7Z2
TQ2kCb3xU/3ga/uRkYAABLBfhYLwLPRRg+88CAJXO/HHU45d5A==
-----END CERTIFICATE-----
Generated at Sun Apr 13 10:20:37 2025 by rpki-client