Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/sWXWz9KHFQhAxmDZ0n63KNEzRYA.roa
File: sWXWz9KHFQhAxmDZ0n63KNEzRYA.roa (raw, json)
Hash identifier: VInHBflevKh8uKrJkW73psQEtmEHrPxva/qTjQRvp1o=
Subject key identifier: B1:65:D6:CF:D2:87:15:08:40:C6:60:D9:D2:7E:B7:28:D1:33:45:80
Certificate issuer: /CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Certificate serial: 019421B1A6B60A65A45507760D64D3248BBF
Authority key identifier: 35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/sWXWz9KHFQhAxmDZ0n63KNEzRYA.roa
Signing time: Wed 01 Jan 2025 11:47:58 +0000
ROA not before: Wed 01 Jan 2025 11:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210007
IP address blocks: 195.69.252.0/22 maxlen: 22
195.69.252.0/23 maxlen: 23
195.69.254.0/23 maxlen: 23
195.69.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a6:b6:0a:65:a4:55:07:76:0d:64:d3:24:8b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Validity
Not Before: Jan 1 11:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b165d6cfd287150840c660d9d27eb728d1334580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:28:7b:4d:3b:82:6e:0b:64:35:59:f8:dd:c4:
09:b5:4e:fe:76:cd:9d:b9:7d:40:d1:dd:77:bd:54:
9a:47:62:2b:c8:2c:a4:66:4b:fe:29:e8:41:13:10:
b3:d0:a1:50:d4:15:13:bc:5b:32:e7:f7:1d:8e:e8:
29:2c:bf:cf:28:2c:55:23:d7:2a:b2:5a:ec:84:5c:
6c:59:e3:a3:65:4d:1d:ec:32:a4:78:f8:23:b1:3a:
99:5a:a1:39:24:de:bd:fc:49:e6:b1:1a:84:84:79:
c3:07:2c:ae:9b:ae:6d:e8:f6:b3:47:83:8c:18:a2:
b7:2f:2a:67:7b:e9:49:af:f5:57:ea:b2:ba:a1:e0:
15:8a:50:e5:b8:76:dc:5e:ca:32:41:74:c7:bc:29:
2f:86:43:4c:77:f8:73:e3:cc:96:ee:2c:1e:f8:aa:
89:77:d0:bf:39:3f:32:e4:ef:9f:0f:58:f6:47:60:
a5:00:5f:33:d5:92:1b:28:70:b9:42:f9:a2:ed:cd:
54:83:3e:e2:8e:3f:cf:af:05:b5:ce:5f:08:96:1e:
87:9f:38:67:ec:e9:f5:99:90:a8:eb:fa:e3:f7:98:
6c:58:d2:6b:ea:2d:cf:35:51:95:38:83:c2:26:d9:
b8:ac:ea:58:e8:9a:95:55:15:ba:3b:24:46:df:ae:
fd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:65:D6:CF:D2:87:15:08:40:C6:60:D9:D2:7E:B7:28:D1:33:45:80
X509v3 Authority Key Identifier:
keyid:35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/sWXWz9KHFQhAxmDZ0n63KNEzRYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.252.0/22
Signature Algorithm: sha256WithRSAEncryption
05:c2:a2:ac:06:14:d5:18:6e:2e:f6:ab:53:09:e6:8a:5e:84:
1d:3e:0c:14:35:61:6f:1a:35:0e:c5:9c:f5:af:36:be:55:89:
6a:87:9b:fd:61:21:dd:45:81:a2:ee:21:f3:36:12:12:51:f1:
80:38:ed:47:b6:fd:12:0b:f8:bd:ef:82:f8:cf:ae:09:9e:fe:
da:5c:72:ac:da:80:ae:3a:52:0d:16:de:53:d8:3e:e0:44:b9:
af:9d:d6:82:fa:f4:f3:da:fa:e3:8b:a7:da:93:a2:33:a9:56:
ee:9c:10:f5:a0:5e:61:50:d6:6d:f9:15:da:ca:64:b7:68:cc:
b5:bd:ed:e8:e7:04:e7:46:6e:92:2c:3c:b3:da:9a:e5:d2:23:
8a:90:80:5a:57:24:52:a2:ee:f6:d9:54:6a:80:08:33:bf:62:
e9:76:4c:95:44:ad:13:c7:59:19:30:19:cf:4b:51:9c:cb:eb:
fd:9b:cb:08:87:ad:21:8a:63:7f:18:dd:51:88:e6:f1:94:f5:
74:fd:33:4c:5f:39:72:c5:a6:85:2d:02:e9:75:1f:27:c7:1e:
69:be:95:f8:c2:21:c9:f0:71:ca:f8:2e:e5:5e:6e:51:09:ca:
0b:60:84:f4:ed:df:de:e8:20:de:04:c3:88:9a:12:7e:80:c1:
f2:37:90:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:54:03 2025 by rpki-client