Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/sioOqEQgSdt-Z2nuvjH-ipYeJ0U.roa
File: sioOqEQgSdt-Z2nuvjH-ipYeJ0U.roa (raw, json)
Hash identifier: e/yGVe5B1VqGg3IGxSr7CYJ11tiQj+M1xaKJk8xaUwo=
Subject key identifier: B2:2A:0E:A8:44:20:49:DB:7E:67:69:EE:BE:31:FE:8A:96:1E:27:45
Certificate issuer: /CN=f13219221cc0a21326ce006c42825bac2be31e17
Certificate serial: 01941FFA1E9C68D93C0F5D846D22D07D90AD
Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/sioOqEQgSdt-Z2nuvjH-ipYeJ0U.roa
Signing time: Wed 01 Jan 2025 03:47:53 +0000
ROA not before: Wed 01 Jan 2025 03:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44577
IP address blocks: 37.99.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1e:9c:68:d9:3c:0f:5d:84:6d:22:d0:7d:90:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17
Validity
Not Before: Jan 1 03:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b22a0ea8442049db7e6769eebe31fe8a961e2745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:48:51:60:b8:e9:0e:d8:8a:0b:3e:30:6b:b5:
08:75:6e:02:b5:f8:de:0a:25:ab:9b:eb:a2:e6:cf:
c5:31:84:3e:03:cf:75:66:65:c0:53:da:c2:66:f1:
ee:19:d5:9d:39:5b:7c:1e:b8:05:05:9d:75:57:8f:
a3:59:dc:23:50:35:93:a5:e8:03:6c:13:d2:ca:ba:
69:78:2b:3d:f2:a8:33:0e:06:50:b4:fa:6d:a9:87:
6b:17:0e:ce:28:60:79:47:a7:cf:a8:d8:b4:75:31:
f0:76:69:d1:1f:aa:e6:84:0d:02:b8:83:e8:0b:86:
1f:e3:fc:81:34:0c:b5:61:aa:46:9e:c4:90:cf:16:
13:93:6d:df:14:81:a2:02:fb:6a:c9:ba:ca:12:f6:
2a:f9:88:e4:5f:35:9f:69:1a:63:ec:db:82:5b:dc:
cd:b9:33:90:60:68:26:8e:a8:e7:af:17:fb:d9:f3:
98:a4:fb:61:e5:6c:2d:90:ae:f6:f2:1d:0d:a7:2e:
20:c9:0b:ef:70:02:9c:73:98:86:10:66:88:a2:a4:
50:2c:3b:03:b7:d1:4e:15:16:f0:eb:9d:b8:b8:0e:
04:50:f8:2a:2d:b4:f6:3f:d9:d3:26:45:b5:a3:f5:
20:d9:9a:a6:5f:0e:22:e1:7d:b6:38:f4:20:f1:8f:
ae:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2A:0E:A8:44:20:49:DB:7E:67:69:EE:BE:31:FE:8A:96:1E:27:45
X509v3 Authority Key Identifier:
keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/sioOqEQgSdt-Z2nuvjH-ipYeJ0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.99.190.0/24
Signature Algorithm: sha256WithRSAEncryption
19:6a:4c:f9:0f:83:55:35:d2:6a:5d:13:70:45:f6:b1:df:8b:
2f:9a:cd:8b:c8:f8:ec:08:68:43:ee:e8:75:b1:60:78:f3:42:
c4:09:81:2d:7c:87:df:a6:77:da:69:84:11:a1:b6:36:38:43:
85:34:dc:b7:8d:43:15:69:ab:4b:84:25:86:ab:c1:3a:08:53:
ef:b9:05:e6:08:51:a2:3a:39:8b:01:93:41:0a:4b:c5:0b:82:
7a:57:86:9e:43:c8:99:b7:32:50:7e:f6:41:0f:e8:0d:70:e9:
8f:f6:92:08:dd:2a:0a:32:c5:38:7c:d4:83:8b:94:91:59:71:
2e:c2:81:44:77:ab:c3:46:c3:38:7c:6f:6a:74:a9:85:86:ce:
aa:3f:d8:18:47:84:12:29:70:e9:b0:4a:b8:f7:30:b6:af:41:
41:47:b5:0b:ce:1f:ad:21:42:85:fe:b7:6e:42:67:74:3c:b3:
6d:dd:5a:10:a7:21:b1:95:dc:f0:78:d5:88:08:62:93:c2:7b:
52:cd:9b:ae:f4:7d:25:bd:a0:7e:35:d5:8d:d7:dc:0b:3e:23:
73:7b:84:ea:14:a2:fc:7a:23:b6:35:c7:45:95:0f:8c:55:27:
00:f6:f3:3e:78:0c:42:ac:31:62:00:44:7a:f6:d4:88:a2:a1:
4f:ab:b9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 15:21:19 2025 by rpki-client