Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/SbU6Wu3VYL_xJUdthJTMBSanghY.roa
File: SbU6Wu3VYL_xJUdthJTMBSanghY.roa (raw, json)
Hash identifier: 0SfBRTqaFb3y7K9XYOO4Yq/M+ASPHTLlHQOS0a7mCG8=
Subject key identifier: 49:B5:3A:5A:ED:D5:60:BF:F1:25:47:6D:84:94:CC:05:26:A7:82:16
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01942747A12F12C0E86B88B3712808C84F46
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/SbU6Wu3VYL_xJUdthJTMBSanghY.roa
Signing time: Thu 02 Jan 2025 13:49:53 +0000
ROA not before: Thu 02 Jan 2025 13:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62196
IP address blocks: 2.189.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a1:2f:12:c0:e8:6b:88:b3:71:28:08:c8:4f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 2 13:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49b53a5aedd560bff125476d8494cc0526a78216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:30:de:f9:20:56:1f:50:79:55:26:cc:40:
c0:6e:5b:af:1a:90:6d:56:dd:49:43:3d:ba:66:ec:
f5:7c:f9:d0:d7:a5:4d:c9:1d:76:b5:91:3d:66:d2:
bf:22:e7:24:6e:05:ab:a8:27:88:7b:40:20:df:e0:
60:c9:2c:d8:3c:6d:3a:ab:62:46:9e:18:43:00:a1:
28:8c:70:e9:bb:e9:cf:dd:3d:c1:7c:34:58:84:4c:
ca:87:68:e9:81:37:84:de:4b:52:0e:00:1b:32:ff:
72:76:c5:19:cf:ce:c3:c3:2b:4f:1e:9a:08:8d:94:
7b:60:4f:41:c7:3c:98:7f:2b:1c:dd:30:55:52:c5:
b5:f1:d7:e0:87:c1:7e:1c:4e:55:c0:28:8f:f2:66:
51:62:4a:7d:75:1a:73:d8:4b:9a:60:fe:42:2a:6b:
fc:e1:90:78:5b:92:c4:f4:c3:b2:52:25:7a:34:5f:
57:b8:0f:8f:60:14:44:e8:04:c0:01:5e:16:8c:f5:
68:4a:df:5c:c2:d9:5f:98:8b:ae:2e:db:d5:f0:d4:
30:f3:39:2a:ae:db:76:5d:6b:16:25:e6:b3:ee:e8:
7e:93:db:32:d8:15:d1:7c:6e:e6:46:ff:26:54:fb:
e3:a1:53:cf:14:4f:ce:3a:fd:e4:ae:bb:21:12:fb:
2d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B5:3A:5A:ED:D5:60:BF:F1:25:47:6D:84:94:CC:05:26:A7:82:16
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/SbU6Wu3VYL_xJUdthJTMBSanghY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.189.176.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:c4:26:0e:91:9f:57:5c:7c:6f:1d:c1:ad:55:64:cf:63:a0:
d0:04:48:80:35:53:ca:53:1a:7b:96:4c:ac:8d:c1:24:8d:96:
db:6b:9e:f2:c2:c4:35:28:81:27:3d:d1:d4:ac:38:f6:45:be:
f9:41:59:67:dc:f7:11:ba:3b:7d:5d:9f:36:fd:d1:11:9d:df:
a9:e3:f6:7b:ef:54:ae:84:67:a9:e5:f8:8b:81:e6:9a:20:e4:
69:36:53:9c:86:37:9f:13:d7:7b:1f:4d:7d:0e:83:bd:85:28:
90:39:3c:a0:83:82:32:75:cb:3b:c0:d7:ab:82:78:dd:47:4b:
f8:b3:89:ea:f6:f5:e8:0a:11:ec:dd:db:5c:f5:9f:4c:21:ed:
4a:e0:89:bb:a7:fb:66:2b:47:20:a0:99:b3:9d:de:ac:23:b4:
81:b9:84:82:67:7c:c4:f8:e1:39:40:60:61:87:26:82:bc:b6:
99:40:c3:91:e0:30:84:95:e0:ed:bd:90:90:24:a6:22:5e:7d:
8c:79:82:d7:be:84:cc:59:89:4a:95:ec:62:ef:6c:91:c3:10:
4a:37:09:ea:00:48:40:44:4e:f0:d6:f1:4c:ca:ca:e6:97:63:
47:58:18:ff:ff:f0:97:e9:4d:a4:97:e0:c7:27:cc:76:ff:d1:
80:65:c7:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR6EvEsDoa4izcSgIyE9GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy
NjBhZTUwHhcNMjUwMTAyMTM0OTUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWI1M2E1YWVkZDU2MGJmZjEyNTQ3NmQ4NDk0Y2MwNTI2YTc4MjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq54w3vkgVh9QeVUmzEDAbluvGpBt
Vt1JQz26Zuz1fPnQ16VNyR12tZE9ZtK/IuckbgWrqCeIe0Ag3+BgySzYPG06q2JG
nhhDAKEojHDpu+nP3T3BfDRYhEzKh2jpgTeE3ktSDgAbMv9ydsUZz87DwytPHpoI
jZR7YE9BxzyYfysc3TBVUsW18dfgh8F+HE5VwCiP8mZRYkp9dRpz2EuaYP5CKmv8
4ZB4W5LE9MOyUiV6NF9XuA+PYBRE6ATAAV4WjPVoSt9cwtlfmIuuLtvV8NQw8zkq
rtt2XWsWJeaz7uh+k9sy2BXRfG7mRv8mVPvjoVPPFE/OOv3krrshEvstzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEm1Olrt1WC/8SVHbYSUzAUmp4IWMB8GA1UdIwQY
MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt
Zjc0ZDk1MTg1NzZjLzEvU2JVNld1M1ZZTF94SlVkdGhKVE1CU2FuZ2hZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj
LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDAr2wMA0G
CSqGSIb3DQEBCwUAA4IBAQANxCYOkZ9XXHxvHcGtVWTPY6DQBEiANVPKUxp7lkys
jcEkjZbba57ywsQ1KIEnPdHUrDj2Rb75QVln3PcRujt9XZ82/dERnd+p4/Z771Su
hGep5fiLgeaaIORpNlOchjefE9d7H019DoO9hSiQOTygg4Iydcs7wNergnjdR0v4
s4nq9vXoChHs3dtc9Z9MIe1K4Im7p/tmK0cgoJmznd6sI7SBuYSCZ3zE+OE5QGBh
hyaCvLaZQMOR4DCEleDtvZCQJKYiXn2MeYLXvoTMWYlKlexi72yRwxBKNwnqAEhA
RE7w1vFMysrml2NHWBj///CX6U2kl+DHJ8x2/9GAZceF
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:31:06 2025 by rpki-client