Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/SgwPvwknub36baQ9KcDiF10XVjg.roa
File: SgwPvwknub36baQ9KcDiF10XVjg.roa (raw, json)
Hash identifier: AqBX/OOtLCRwId7Bx3Diq3oyJG6vd4oLaGxEgTaatfA=
Subject key identifier: 4A:0C:0F:BF:09:27:B9:BD:FA:6D:A4:3D:29:C0:E2:17:5D:17:56:38
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 019425FDC4FF6194714DD4B2AA66E71F751E
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/SgwPvwknub36baQ9KcDiF10XVjg.roa
Signing time: Thu 02 Jan 2025 07:49:35 +0000
ROA not before: Thu 02 Jan 2025 07:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212573
IP address blocks: 93.187.32.0/21 maxlen: 21
185.52.116.0/22 maxlen: 22
185.52.117.0/24 maxlen: 24
2a00:dd00::/32 maxlen: 32
2a00:dd00:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c4:ff:61:94:71:4d:d4:b2:aa:66:e7:1f:75:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Jan 2 07:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a0c0fbf0927b9bdfa6da43d29c0e2175d175638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:14:d9:b3:cd:f6:08:61:d4:6b:87:c1:0c:37:
1b:1f:9a:0c:39:fd:fa:a4:38:1f:69:e2:1a:62:6a:
36:0f:d6:ce:b3:54:49:fa:97:d4:2a:e0:bd:23:61:
1f:aa:00:bd:fb:36:45:d3:82:61:76:ad:36:2d:b4:
e1:00:22:2a:13:31:9f:91:22:c7:49:6b:17:a2:56:
7c:05:89:47:ae:19:0d:af:35:cf:ca:a9:e9:43:68:
02:b9:a6:d6:b8:90:00:40:4a:51:79:e8:76:b2:0e:
af:be:69:df:3b:de:1d:90:70:3b:87:bc:3f:8f:8e:
8f:8c:eb:44:dc:80:4a:d5:b3:07:67:15:5b:9a:f4:
5f:35:f8:26:ec:6e:78:ca:44:6a:1d:0a:7a:18:05:
d9:32:35:17:99:3e:c8:7c:8a:6b:94:c4:12:6f:45:
7f:6d:2e:e0:41:2d:55:f4:13:35:ea:0b:c7:b1:3e:
c3:9f:b3:c2:9d:4d:dc:ae:0d:c3:1b:a4:e1:1e:d6:
25:6f:c6:15:01:6f:2f:d0:e2:71:40:aa:f5:f6:b0:
47:c3:d4:1d:1a:4e:f2:69:65:6e:a4:f3:20:35:96:
52:ce:84:1c:8d:17:07:d0:e8:3c:98:7b:45:37:35:
1a:d3:43:f4:dd:e5:aa:e5:fd:92:c2:9b:7c:94:50:
38:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0C:0F:BF:09:27:B9:BD:FA:6D:A4:3D:29:C0:E2:17:5D:17:56:38
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/SgwPvwknub36baQ9KcDiF10XVjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.32.0/21
185.52.116.0/22
IPv6:
2a00:dd00::/32
Signature Algorithm: sha256WithRSAEncryption
0c:a8:a9:bc:f2:47:9b:45:51:d3:da:20:f4:92:80:07:76:fb:
20:97:80:e2:b2:a3:10:d9:79:1b:3d:a8:c5:4e:e3:cc:06:0e:
22:a8:ec:cf:a7:78:27:92:17:d5:02:f4:4e:ed:05:ef:77:15:
b9:cf:60:c6:cb:1c:6d:d3:3a:24:d6:e3:74:61:4a:0b:32:8b:
12:91:ed:b5:16:c0:c7:8f:ed:ef:d7:eb:7f:24:f2:89:82:c0:
fd:16:7d:2c:74:d8:d4:f4:9b:75:20:e2:42:1d:c4:ee:92:dc:
22:a6:fe:a4:f3:33:81:57:33:c2:f3:2c:b6:d0:78:81:90:24:
a5:98:e7:c9:e3:30:14:cd:cb:b5:3f:6f:eb:38:c9:69:1e:52:
d9:6f:78:34:cf:e3:79:02:64:8b:3e:87:45:d2:9d:bf:e9:a0:
3d:d5:a2:a5:1f:51:ab:13:84:bc:e2:96:70:5a:b1:21:9b:56:
e1:75:e7:b7:7a:e6:26:92:e2:69:d0:4d:56:0d:b4:fd:f3:80:
e9:58:6b:d8:34:a8:34:11:92:42:e9:93:63:13:3f:53:b8:d2:
08:8a:b4:91:40:0d:a7:7b:e3:32:bb:b0:b7:22:e8:31:72:c4:
5a:6b:02:7d:79:1d:fb:28:27:cb:58:7d:ca:61:59:f5:f7:c4:
a1:dd:42:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:17:28 2025 by rpki-client