Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sroIO_qxBBqG3lZGfMEt1s7-luc.roa
File: sroIO_qxBBqG3lZGfMEt1s7-luc.roa (raw, json)
Hash identifier: bXUQbVH71bHXJ6p8+SL4LdyP/YAEgd+cvreZlX6ie8Q=
Subject key identifier: B2:BA:08:3B:FA:B1:04:1A:86:DE:56:46:7C:C1:2D:D6:CE:FE:96:E7
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019422200432FD692110907CF4DC9236B2B7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sroIO_qxBBqG3lZGfMEt1s7-luc.roa
Signing time: Wed 01 Jan 2025 13:48:31 +0000
ROA not before: Wed 01 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59580
IP address blocks: 85.93.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:04:32:fd:69:21:10:90:7c:f4:dc:92:36:b2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2ba083bfab1041a86de56467cc12dd6cefe96e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:a5:28:d7:37:ff:69:2e:9d:60:a4:ca:bb:
e5:2a:4d:3a:f3:95:00:28:ff:3a:b2:52:c8:7c:07:
5e:0b:14:c4:55:d7:8b:99:aa:7c:f5:8f:53:71:43:
70:21:a0:86:d0:37:e2:f7:f5:d5:93:72:2a:84:0f:
0d:e8:f5:fc:1f:d2:60:ce:59:0b:41:b5:ae:86:d1:
ca:ec:e8:86:8c:9c:09:4a:b2:c1:f5:3f:9d:13:1f:
9c:04:c9:49:31:52:d4:b9:f0:ac:53:17:05:93:a5:
20:37:a2:8a:5f:f1:fc:21:c2:b1:5e:e7:cc:a0:69:
50:ca:f7:5f:ee:dc:02:73:f4:75:b3:08:6e:03:2b:
37:bf:d9:a3:fb:a8:5b:c5:06:0d:7a:e2:b7:e3:60:
7f:20:5d:d1:48:a7:7f:58:7f:13:e0:69:13:d9:28:
34:ec:fa:19:6e:87:f5:b4:cf:93:96:27:13:34:e0:
d9:a0:be:ef:05:37:5f:ff:41:61:5c:27:cc:6d:f9:
17:db:ef:19:5a:10:ae:43:e5:f7:57:d0:c9:09:e6:
f0:bd:c6:74:a2:c4:8b:8a:95:bf:26:0f:85:bf:56:
68:5a:f5:dd:5c:30:82:bd:6e:56:23:54:64:fa:d8:
55:2a:c2:03:18:33:69:88:65:9d:e0:fc:1f:1c:cb:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BA:08:3B:FA:B1:04:1A:86:DE:56:46:7C:C1:2D:D6:CE:FE:96:E7
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sroIO_qxBBqG3lZGfMEt1s7-luc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.2.0/24
Signature Algorithm: sha256WithRSAEncryption
90:20:a0:51:a8:e4:39:f3:a3:3a:41:6b:82:2f:66:0b:cf:4b:
f8:3a:b2:b6:33:fb:0e:39:17:f1:f7:99:60:d3:57:a6:2b:6b:
e9:81:e8:a7:4d:da:5d:9a:52:26:07:3d:f4:1b:71:ca:e9:21:
f9:70:6c:02:63:f9:63:ba:41:27:31:18:be:f0:e6:fd:78:5f:
47:e3:fa:bb:68:af:66:ba:27:06:7a:5e:fa:78:9a:ba:d3:d9:
20:1a:f3:ed:f9:e1:f8:1d:20:c3:2c:e2:84:2b:c8:9d:9b:64:
c4:a0:8f:44:2b:83:3c:7d:75:d2:fc:b4:f1:5c:d8:00:9d:9a:
76:87:9c:48:ef:68:57:3a:89:bf:be:bc:76:19:9e:44:1f:12:
86:87:32:36:9b:c4:fc:39:37:b6:8a:21:9c:fa:36:b5:ba:34:
89:18:26:ae:c2:c7:60:77:5b:22:c2:fb:77:cf:7a:6e:62:60:
6c:62:6e:1f:5e:88:ca:86:19:95:24:02:ee:42:9f:25:cd:29:
2c:30:90:3b:28:ab:77:11:c8:e4:13:7b:03:85:1b:19:1e:5d:
de:b3:1c:8b:67:c0:ec:0d:1c:14:1f:e1:b4:fa:34:c1:6b:02:
f1:11:69:01:04:c2:db:92:9d:77:b9:10:48:2c:5d:80:ec:12:
d2:15:c8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:36:39 2025 by rpki-client