Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SZgE9NeLeQqZkEoT-z72yIABPjA.roa
File: SZgE9NeLeQqZkEoT-z72yIABPjA.roa (raw, json)
Hash identifier: dkv62XqDAhYvbnZG9xlYaeLjfC9W4CZU6J3TAHkSO5U=
Subject key identifier: 49:98:04:F4:D7:8B:79:0A:99:90:4A:13:FB:3E:F6:C8:80:01:3E:30
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019642B0E3641F0850A4B599E8081C798D8D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SZgE9NeLeQqZkEoT-z72yIABPjA.roa
Signing time: Thu 17 Apr 2025 07:40:10 +0000
ROA not before: Thu 17 Apr 2025 07:40:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201814
IP address blocks: 194.180.48.0/24 maxlen: 24
194.180.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:b0:e3:64:1f:08:50:a4:b5:99:e8:08:1c:79:8d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 17 07:40:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=499804f4d78b790a99904a13fb3ef6c880013e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:72:9e:9f:c2:91:25:87:30:8a:b4:20:f1:63:
0f:ec:a4:3d:ea:55:a6:98:40:c4:30:89:ff:51:b9:
30:78:20:e3:f1:be:f0:e6:33:e9:63:f5:1b:69:34:
d0:ef:21:a7:19:f5:1c:6f:81:87:dc:2d:2f:4e:56:
af:b3:0c:21:f4:e7:5f:94:22:24:79:f8:9d:08:e5:
4b:90:81:e0:50:87:4c:ef:59:c9:cd:bc:18:d9:f0:
b6:ff:3b:7e:65:6e:38:84:80:97:6a:62:9d:90:58:
63:9c:39:84:b3:8d:d5:03:0a:86:20:4a:ec:59:28:
ed:1b:80:84:d0:dc:99:11:22:18:38:63:48:8d:35:
66:f3:7c:18:3b:7f:3c:9f:f1:b6:80:8e:a9:51:73:
0e:30:98:a9:23:b6:cb:43:d3:1d:10:7d:5a:da:75:
c9:80:55:92:7b:fc:c5:3c:35:fd:9c:06:0f:18:d3:
65:ea:6d:85:e7:17:96:23:2b:94:de:c8:38:f4:7f:
5a:0e:6c:ad:cd:45:25:5d:28:19:e1:19:bf:fc:5f:
d8:2c:75:ef:0c:ea:1e:f7:8a:20:87:b0:ee:fb:92:
97:97:a1:ec:87:ef:34:53:cd:b9:37:d5:88:20:18:
3f:40:a6:5e:b0:2c:3c:22:82:a3:e7:84:f8:1a:fe:
7a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:98:04:F4:D7:8B:79:0A:99:90:4A:13:FB:3E:F6:C8:80:01:3E:30
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SZgE9NeLeQqZkEoT-z72yIABPjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.48.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:90:8e:5c:e8:e2:58:79:3d:eb:d5:f0:b6:ef:fd:98:ea:91:
45:94:fa:33:23:3e:1f:76:22:b3:6f:9b:6f:ed:3b:a9:f8:44:
00:6b:2c:84:a8:68:d6:18:92:1b:f2:69:77:28:f9:21:07:69:
06:1b:83:6e:c1:0b:03:38:7c:1c:59:ba:95:37:61:16:f0:30:
a9:ab:3b:b3:00:75:c1:c8:88:da:ed:19:93:80:73:4b:7c:3b:
42:13:07:54:0e:c1:cc:f2:f0:63:6b:de:66:16:06:8e:40:0e:
cb:96:6b:54:0a:64:d3:38:b1:51:d8:c5:43:c3:a1:4d:01:6f:
3e:85:44:19:7d:4b:bc:a6:03:11:48:a2:20:fd:f4:2f:54:57:
cd:45:d6:9c:dc:9a:bd:6d:9c:61:7f:b6:6d:3a:29:63:a3:ad:
ff:7a:6a:e9:bb:26:bb:a4:c8:39:e7:3a:f9:31:65:72:d1:a3:
6c:94:67:38:11:c2:f8:cf:5a:7d:b8:39:bc:e5:60:7b:75:af:
36:db:16:4f:7a:12:c2:aa:37:0b:f7:e1:60:f4:46:1d:b9:98:
b8:39:c8:16:d2:53:81:5f:a7:d7:ce:02:61:f6:0b:54:19:fb:
d7:15:42:91:85:57:ca:47:eb:12:0a:7c:6a:3b:ea:a6:5a:c4:
a6:c2:f8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:54:25 2025 by rpki-client