Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/SW2UHW6XXrCRSFkNV0CVmfSilT8.roa
File: SW2UHW6XXrCRSFkNV0CVmfSilT8.roa (raw, json)
Hash identifier: OU29d/hqTbWW7Cob/3TqpwPxH+8rWvDwLVXV+Khg58o=
Subject key identifier: 49:6D:94:1D:6E:97:5E:B0:91:48:59:0D:57:40:95:99:F4:A2:95:3F
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 0195AE6ACD09F3AB95F40245FF4EDACA6893
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/SW2UHW6XXrCRSFkNV0CVmfSilT8.roa
Signing time: Wed 19 Mar 2025 12:39:49 +0000
ROA not before: Wed 19 Mar 2025 12:39:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 185.255.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ae:6a:cd:09:f3:ab:95:f4:02:45:ff:4e:da:ca:68:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Mar 19 12:39:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=496d941d6e975eb09148590d57409599f4a2953f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:a6:e1:d7:84:47:cb:87:eb:8d:ea:aa:7f:
78:28:39:47:79:68:0a:bf:f9:f2:dc:92:ac:46:6e:
07:1f:5e:23:c6:97:a8:5f:dc:87:62:8b:2a:ad:4b:
16:01:0c:87:33:e5:4e:73:51:e3:4f:d9:b4:74:8c:
a6:b1:72:b9:00:4c:09:24:06:c1:5d:f8:d6:de:07:
30:fd:8a:a4:a0:3b:80:f6:bb:92:de:5a:2c:cf:48:
6c:7c:54:01:b0:19:84:9c:a0:ca:ea:06:21:31:7a:
f2:8a:2f:4b:85:5d:39:9b:df:43:15:cf:e5:1f:e7:
c5:c4:09:d4:fe:39:dc:ff:37:19:79:c4:92:6b:08:
79:1f:82:b6:1f:d4:c6:86:7b:4a:f1:17:c3:17:8b:
f5:5a:94:17:67:28:65:36:0f:d2:9f:2a:3c:e3:c2:
ea:8f:34:5b:76:96:46:f9:62:eb:f0:9a:1a:79:69:
27:33:98:62:0d:d0:6e:99:7d:df:90:2b:10:fc:f8:
d8:1a:15:c5:00:51:c8:41:98:a1:28:9e:0f:4b:56:
c6:40:98:b4:f6:d2:64:b3:2a:09:c0:81:c7:59:d2:
1e:1e:00:24:cc:44:50:77:76:f8:91:7b:f3:60:00:
87:4f:a1:c5:e5:5e:d5:8c:13:39:ce:d8:61:34:61:
3e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6D:94:1D:6E:97:5E:B0:91:48:59:0D:57:40:95:99:F4:A2:95:3F
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/SW2UHW6XXrCRSFkNV0CVmfSilT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.7.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b3:64:e7:3c:f7:fd:fe:28:1f:5e:b7:45:9e:27:13:36:20:
50:0e:99:c3:62:97:a9:72:66:ac:45:e3:90:ee:c5:95:7e:d9:
96:0c:54:ac:87:6f:0f:ae:71:7d:48:28:b3:60:f8:fd:24:0d:
43:95:ec:ba:a2:e3:0e:c5:47:29:72:90:53:67:dc:5a:44:6d:
a4:eb:58:ba:f2:4f:f2:b5:ef:8b:a2:b8:c4:ea:b8:32:30:4a:
ad:f5:fc:09:14:b0:8c:60:31:e5:e9:b1:d6:77:50:86:bb:33:
3f:5f:2a:2f:e0:e8:52:5b:5e:4d:17:17:71:fe:dd:fc:2b:da:
eb:da:7a:33:88:ac:24:da:49:b7:a6:fe:fe:e9:ea:be:27:ac:
d0:ed:71:a5:8a:b5:0e:27:06:81:7b:61:d7:11:2c:96:8d:52:
ec:89:aa:26:2e:87:ee:46:b5:fa:93:92:9d:91:ba:65:88:a5:
df:a1:a9:4b:d4:2f:c5:2b:b7:3c:4c:58:ca:c1:5c:02:4f:4d:
8c:4b:28:87:0c:f4:d0:4a:22:eb:f5:f2:61:f8:04:30:5c:b9:
8b:79:67:ce:80:1c:42:c8:29:3d:cf:0d:b9:79:df:2f:87:98:
4f:82:06:97:69:bc:91:c9:65:84:46:ac:5c:96:8a:9f:77:c6:
36:d6:fe:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:00:57 2025 by rpki-client