Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/oerIe3XBauoH4wnjH-yQh4V4P1U.roa
File: oerIe3XBauoH4wnjH-yQh4V4P1U.roa (raw, json)
Hash identifier: auHewUAAn3a0HGRSavJta0QusST9c8r9vsoZnA0C1aY=
Subject key identifier: A1:EA:C8:7B:75:C1:6A:EA:07:E3:09:E3:1F:EC:90:87:85:78:3F:55
Certificate issuer: /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial: 01974054077BDC7445475614A7711EFC1DC3
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/oerIe3XBauoH4wnjH-yQh4V4P1U.roa
Signing time: Thu 05 Jun 2025 13:42:17 +0000
ROA not before: Thu 05 Jun 2025 13:42:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211612
IP address blocks: 37.19.204.0/24 maxlen: 24
37.19.208.0/24 maxlen: 24
37.19.219.0/24 maxlen: 24
79.127.251.0/24 maxlen: 24
2a02:6ea0:e400::/40 maxlen: 40
2a02:6ea0:e500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:54:07:7b:dc:74:45:47:56:14:a7:71:1e:fc:1d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Validity
Not Before: Jun 5 13:42:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1eac87b75c16aea07e309e31fec908785783f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:53:03:c8:77:a2:a5:37:cd:9a:78:16:82:54:
84:1f:83:24:50:a6:37:70:a1:eb:64:de:af:62:9a:
cd:a4:90:06:8c:47:30:72:4a:c6:50:b0:bd:e1:93:
ef:88:f3:da:19:34:0b:49:dc:25:59:25:c3:d5:06:
db:38:bb:5d:f2:b5:a0:35:77:69:88:b2:3f:4f:13:
95:54:2d:aa:3c:5b:85:fa:22:a9:62:2c:97:dd:3b:
4d:61:dc:22:14:e4:54:d7:6c:6c:d1:75:3f:2f:2e:
75:1a:4f:bd:64:aa:4b:ae:6b:e7:7e:c6:3b:7c:f5:
3c:46:e0:4f:50:1b:07:80:58:43:0b:44:eb:34:5a:
e5:45:01:bd:58:da:d8:99:87:55:98:a9:ef:61:42:
4a:b4:75:ed:15:4c:23:7b:f6:29:b3:c1:59:e8:c7:
0b:af:59:40:29:d9:59:5d:37:5f:4d:6f:fc:7b:09:
66:4c:90:fa:2c:2c:0a:12:62:78:dc:5e:01:db:12:
6b:e4:0a:1f:ed:f3:85:42:1c:d9:39:c5:a8:3e:52:
fb:a7:ad:71:3c:51:ba:62:23:b2:1a:ea:1b:82:a1:
d0:aa:a9:00:5b:60:d2:d5:19:68:1b:bc:7c:71:37:
d2:60:da:f0:f2:44:2f:5b:8e:78:61:7f:f9:ff:be:
b2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EA:C8:7B:75:C1:6A:EA:07:E3:09:E3:1F:EC:90:87:85:78:3F:55
X509v3 Authority Key Identifier:
keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/oerIe3XBauoH4wnjH-yQh4V4P1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.204.0/24
37.19.208.0/24
37.19.219.0/24
79.127.251.0/24
IPv6:
2a02:6ea0:e400::/39
Signature Algorithm: sha256WithRSAEncryption
9e:a9:f7:1a:d1:5a:08:61:71:61:34:08:7d:2d:2b:b3:27:ea:
22:96:2a:5b:80:b2:4e:46:8c:b6:5b:e0:2d:85:11:3d:c3:06:
8e:f8:0b:c8:39:0c:ac:29:60:0a:06:2f:67:18:a5:ae:1c:1d:
e3:6f:a6:76:88:71:e2:ab:89:ba:da:ac:18:b4:7b:47:e0:78:
e1:64:cd:63:52:0f:63:b2:e8:a8:dd:02:b8:08:8b:2c:8d:be:
76:9d:10:3f:51:0c:e1:cb:e8:f9:ef:be:44:3a:06:ef:43:98:
e4:e7:59:10:ee:5a:3e:11:de:26:f2:86:1e:17:99:8a:13:cf:
18:ad:a1:b9:72:10:12:7d:6d:54:69:3a:1e:63:bb:91:72:88:
30:db:1d:fe:be:3a:72:cd:3c:19:13:23:b5:26:56:dd:38:45:
cc:b6:7f:17:78:c1:7d:ab:b3:d9:5a:ef:28:3b:da:9d:5c:13:
a2:7d:f1:27:0f:e1:39:e9:01:d7:75:14:dd:cb:75:d7:cd:63:
7a:19:74:ea:74:5e:c0:d8:1a:ab:be:1a:a9:78:f8:d0:88:af:
6d:6e:ce:72:49:78:3a:9b:2c:b8:c5:55:a8:5f:c1:cc:2a:63:
df:8d:aa:18:9b:5a:66:3a:a6:32:06:63:b5:fd:32:8c:60:69:
d4:f8:53:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:05:19 2025 by rpki-client