Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SS9Li1Wqcz6BchcFcrlQFTpkcME.roa
File: SS9Li1Wqcz6BchcFcrlQFTpkcME.roa (raw, json)
Hash identifier: 0hAS7OclxtTcGsPbYPPt1SAzzVwlOGSDAgFEWKolKaE=
Subject key identifier: 49:2F:4B:8B:55:AA:73:3E:81:72:17:05:72:B9:50:15:3A:64:70:C1
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196487C0BDA0E79C6DC412B3660812DB749
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SS9Li1Wqcz6BchcFcrlQFTpkcME.roa
Signing time: Fri 18 Apr 2025 10:40:10 +0000
ROA not before: Fri 18 Apr 2025 10:40:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 45.94.47.0/24 maxlen: 24
2a11:3500::/29 maxlen: 29
2a13:8c86:120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:7c:0b:da:0e:79:c6:dc:41:2b:36:60:81:2d:b7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 18 10:40:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=492f4b8b55aa733e8172170572b950153a6470c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:9c:90:94:54:94:22:dc:b1:ad:ae:b8:fa:27:
7f:5c:58:21:1d:33:c6:38:d4:70:74:db:c7:e6:01:
ab:3a:f1:4a:a6:7c:a9:7b:4a:a2:8f:e2:84:4b:60:
89:4c:7d:b4:ea:64:fd:5f:ad:c2:3f:9c:d3:3d:0b:
cc:a2:a6:eb:48:ea:fc:0c:7c:e4:1d:46:3d:d6:04:
fc:8c:b1:9b:e5:89:f4:05:3b:00:87:27:dd:2c:fb:
d9:7a:bf:7e:44:35:00:d3:22:6d:8a:d2:78:4a:5f:
42:ef:c4:82:a2:2d:2f:61:3b:df:25:d1:b0:6a:4c:
14:bc:ef:ea:1f:19:a7:a2:14:4b:16:56:7c:cb:d1:
c8:3e:b9:4a:2e:5c:7d:24:b2:43:b9:de:b3:a9:65:
2d:c5:2b:fb:30:d2:ca:d7:82:ee:a0:7c:16:7e:ff:
85:e4:93:9e:ca:44:c5:8d:fc:4a:f9:77:a8:57:91:
83:a1:a8:b4:d9:20:73:95:15:6a:ca:5e:b6:a8:b0:
d2:fa:7f:60:ca:49:58:94:14:3d:25:8d:e8:c3:22:
2d:62:e8:5d:5d:14:55:c7:62:72:c0:40:b2:f3:a9:
a7:66:c4:c9:77:6d:f6:ca:24:68:42:50:97:b9:5f:
c7:1d:6d:68:1a:e0:5d:84:1f:1f:89:e3:a9:5c:da:
55:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2F:4B:8B:55:AA:73:3E:81:72:17:05:72:B9:50:15:3A:64:70:C1
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SS9Li1Wqcz6BchcFcrlQFTpkcME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.47.0/24
IPv6:
2a11:3500::/29
2a13:8c86:120::/48
Signature Algorithm: sha256WithRSAEncryption
aa:43:79:95:9f:8a:dd:32:51:d9:43:e5:1b:5d:ea:49:9f:f0:
55:63:8f:cf:00:c6:a5:3a:3b:96:bb:26:0f:3f:af:13:08:5d:
1f:b5:e2:a4:1b:33:a8:cb:00:4a:a8:2e:c8:d7:83:a0:37:dc:
b1:59:08:7a:8e:d6:84:7d:ff:39:31:ad:ce:e0:2a:76:c8:a1:
7c:85:2d:45:27:19:c7:8a:fc:c2:20:7c:70:1f:9a:0a:08:77:
91:56:f3:48:b8:e2:60:4e:2c:82:df:7c:cd:8a:22:f6:f0:5c:
37:b6:54:ef:2a:37:b4:c8:6c:e3:f2:06:f6:47:43:22:c3:77:
e9:a0:a2:33:aa:1b:67:6e:90:9b:f9:17:b8:f2:4a:63:07:ef:
64:98:a9:6d:16:90:b9:2f:80:8e:32:2d:aa:35:7d:67:f7:5a:
03:49:e8:87:65:84:b4:3a:f4:38:61:8e:b0:fb:c5:f3:5e:fd:
f3:8e:4a:ec:be:d9:da:5f:16:c3:bf:e3:4e:82:ab:76:c7:65:
43:95:84:ca:72:0c:3f:d7:72:2f:fd:6e:37:5d:0a:86:9f:3f:
00:fd:00:38:fb:c5:fc:5c:c3:d7:68:a7:97:6f:7b:70:86:73:
10:21:c9:03:9a:bd:30:4f:a9:34:e1:b2:1a:d2:4f:8d:52:b9:
ac:6d:55:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:24:00 2025 by rpki-client