Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SM7IhaAEsmGDuZlqZRpqw-w85LY.roa
File: SM7IhaAEsmGDuZlqZRpqw-w85LY.roa (raw, json)
Hash identifier: /+5Lzb4i3irljEq7HlV5I6aQL6bwOiyhOurXz6ixdIM=
Subject key identifier: 48:CE:C8:85:A0:04:B2:61:83:B9:99:6A:65:1A:6A:C3:EC:3C:E4:B6
Certificate issuer: /CN=48559018adff16eadf5551b2cb74d8f6860cd044
Certificate serial: 019422FC05A3B1A6C67F9CC6364E73052D8B
Authority key identifier: 48:55:90:18:AD:FF:16:EA:DF:55:51:B2:CB:74:D8:F6:86:0C:D0:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SM7IhaAEsmGDuZlqZRpqw-w85LY.roa
Signing time: Wed 01 Jan 2025 17:48:49 +0000
ROA not before: Wed 01 Jan 2025 17:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 45.10.4.0/22 maxlen: 24
45.141.64.0/22 maxlen: 24
91.202.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:05:a3:b1:a6:c6:7f:9c:c6:36:4e:73:05:2d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48559018adff16eadf5551b2cb74d8f6860cd044
Validity
Not Before: Jan 1 17:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48cec885a004b26183b9996a651a6ac3ec3ce4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3c:2a:ab:46:01:c3:42:c8:fe:91:fb:66:e2:
8e:2d:f9:c0:e7:97:f0:ac:88:c2:96:d0:ff:40:a6:
4f:87:ab:19:7e:15:07:4c:14:d3:9c:4f:9f:4e:64:
b3:95:88:46:46:7c:a4:c9:0f:12:87:98:8a:0c:c2:
a4:32:22:cf:73:64:1f:c2:3b:42:f1:49:62:83:9c:
4d:37:c3:70:14:76:64:59:61:1a:43:b9:1f:e2:5d:
57:81:69:17:10:3d:1b:c9:3f:0d:67:7b:2e:79:19:
ec:86:93:74:49:8a:92:6b:4b:86:44:2f:b1:65:47:
c9:8d:46:95:6a:4d:9e:47:84:38:fd:1f:9c:40:c9:
ab:e1:6c:f9:3f:15:f2:89:87:89:97:fd:2a:49:d5:
51:42:6e:43:cb:0b:c1:ed:c1:19:8a:8f:18:3e:59:
db:20:4f:b2:46:02:68:01:53:06:7e:70:10:fc:05:
65:dc:99:23:10:d3:e7:7f:01:e3:35:9d:48:1f:3e:
f0:6b:d5:ac:f9:f4:f7:1b:85:45:28:d1:c5:30:d2:
c6:af:d9:93:7a:e5:71:c8:98:28:82:0f:0a:c6:70:
f1:d0:2e:fb:df:60:9d:37:ee:ea:05:4e:bb:42:c2:
d8:03:a0:09:01:ec:c1:b0:19:ee:d9:70:dc:ac:cb:
35:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CE:C8:85:A0:04:B2:61:83:B9:99:6A:65:1A:6A:C3:EC:3C:E4:B6
X509v3 Authority Key Identifier:
keyid:48:55:90:18:AD:FF:16:EA:DF:55:51:B2:CB:74:D8:F6:86:0C:D0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SM7IhaAEsmGDuZlqZRpqw-w85LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.4.0/22
45.141.64.0/22
91.202.188.0/22
Signature Algorithm: sha256WithRSAEncryption
40:4f:84:cf:08:07:ae:b0:6e:e4:17:1c:52:ab:56:01:46:27:
6f:2e:00:27:d8:f5:18:cc:a9:27:33:bf:2f:76:52:8d:f1:b8:
77:62:a9:84:7d:30:a5:fb:e5:a4:60:1a:17:92:bb:fb:3c:44:
2a:da:b7:bb:c8:fb:4b:7c:ea:c2:35:3a:d7:d5:22:5d:23:56:
6f:e8:23:c2:32:86:13:28:90:59:f8:32:db:34:84:ab:56:9b:
84:4a:33:e1:51:a0:ee:18:43:32:3c:6f:76:b6:4e:49:d7:65:
a9:bb:14:9a:86:7d:0c:26:36:09:25:dc:cd:84:b1:8c:2b:31:
41:29:83:c3:7e:56:4c:38:bd:dd:fa:11:88:a3:5b:4b:76:1e:
26:d0:92:e0:89:e5:52:a8:ef:ee:bf:86:ad:e4:3b:03:d1:d4:
66:45:ce:5b:78:da:c1:e9:9b:fb:61:8b:92:4a:03:e9:cd:f8:
d4:1c:b1:ab:38:63:b6:e4:d9:fd:f4:1b:d8:0a:39:f7:a6:a2:
e2:5c:83:c5:88:9a:39:b2:cb:3d:ca:ce:6f:f6:b2:eb:3b:65:
18:c5:f4:f4:2e:0e:42:fb:f9:f4:0d:32:f8:dc:66:58:ef:4c:
24:6a:bd:cb:b0:b6:9d:c4:0f:9b:a8:1c:88:46:b5:4a:39:e5:
4c:5c:1b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:48:15 2025 by rpki-client