Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/SErRHgSbJegvTKQp5_vKPuL-I0M.roa
File: SErRHgSbJegvTKQp5_vKPuL-I0M.roa (raw, json)
Hash identifier: 5izdqURGD+Gcq0q1le3LSPtQmkAtZ+szcc8AfWWlrxM=
Subject key identifier: 48:4A:D1:1E:04:9B:25:E8:2F:4C:A4:29:E7:FB:CA:3E:E2:FE:23:43
Certificate issuer: /CN=36574be6ae76cd523b33787cfbdb69264263d074
Certificate serial: 019427B5D1036789A94EBA49591A12B5B0E7
Authority key identifier: 36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/SErRHgSbJegvTKQp5_vKPuL-I0M.roa
Signing time: Thu 02 Jan 2025 15:50:14 +0000
ROA not before: Thu 02 Jan 2025 15:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200873
IP address blocks: 37.221.99.0/24 maxlen: 24
185.67.236.0/23 maxlen: 23
185.67.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:d1:03:67:89:a9:4e:ba:49:59:1a:12:b5:b0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36574be6ae76cd523b33787cfbdb69264263d074
Validity
Not Before: Jan 2 15:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=484ad11e049b25e82f4ca429e7fbca3ee2fe2343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:15:6c:19:90:61:b6:6c:89:bb:80:cd:a7:aa:
9e:1e:48:b0:1d:c4:e7:7f:86:16:04:95:97:9e:2a:
ca:08:94:40:4b:9a:c3:e3:0b:41:49:72:3c:78:a9:
4a:81:0a:fe:d0:11:94:04:c3:e4:9b:3d:17:f6:51:
39:9c:db:e0:91:86:46:9f:63:3a:84:75:b8:2a:13:
bd:97:8d:d7:2a:a4:18:2f:a9:c3:f6:2d:6a:a4:2f:
72:b7:4d:f6:96:5f:52:b8:75:49:cb:f6:ed:66:e0:
c1:ae:bc:4f:59:cd:3d:ee:b8:3f:b9:a1:2e:e6:9c:
f3:4d:3b:04:27:f9:f5:38:3d:fa:fe:2f:5b:bf:6e:
47:7c:a7:e1:97:bf:9c:9d:f6:4b:01:52:85:fc:98:
bc:4f:76:38:af:57:7a:66:5f:58:02:a0:e4:2c:66:
aa:93:77:94:44:fa:76:b3:29:4c:c8:ef:7a:17:05:
1f:91:34:f7:9e:bf:5a:f7:6e:2e:87:df:cf:6b:0d:
1f:a5:20:d1:b2:65:67:16:f4:9e:fd:51:af:93:c6:
0f:da:72:b1:7f:46:6b:f2:2d:f7:7b:78:4a:f6:38:
c1:b9:b2:e7:90:87:e4:18:72:df:42:9a:db:ef:00:
6c:d0:5f:9b:1d:c5:83:73:e7:ad:10:13:db:b0:c9:
23:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4A:D1:1E:04:9B:25:E8:2F:4C:A4:29:E7:FB:CA:3E:E2:FE:23:43
X509v3 Authority Key Identifier:
keyid:36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/SErRHgSbJegvTKQp5_vKPuL-I0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.99.0/24
185.67.236.0-185.67.238.255
Signature Algorithm: sha256WithRSAEncryption
c7:03:45:c5:6b:c7:8e:0e:2c:04:f7:c4:9b:7f:89:1f:2e:a4:
89:e4:a6:cc:3d:fd:2a:a1:12:e3:3a:64:e5:39:3a:37:8d:d4:
9d:34:d0:04:3f:58:23:38:28:06:9b:26:da:6d:47:79:3f:58:
c2:6d:79:e6:88:da:ef:bb:f0:9d:5b:e0:f8:b4:4e:50:c1:d2:
bb:88:32:c1:ad:4f:14:52:cc:cc:c2:39:91:d5:96:3d:46:a7:
2d:3d:4c:cf:72:62:0e:e4:55:33:3d:8e:41:65:42:e4:57:ab:
83:89:d5:51:11:f3:8b:13:f4:9b:c9:b1:a0:26:ad:62:97:48:
86:c2:43:fe:99:5f:3e:dd:5b:25:39:0c:54:14:18:18:f1:00:
b0:09:37:da:04:6f:86:cb:c3:ed:62:20:b4:77:c8:27:34:16:
eb:d1:04:54:81:c1:78:9a:5f:66:cd:3e:72:18:4a:9f:ad:31:
31:a5:10:49:3c:75:83:32:71:3b:46:80:9f:27:47:23:32:08:
9c:f5:fc:76:94:e8:18:0d:59:ce:b3:42:b3:e8:39:2a:a3:78:
f5:12:c2:08:a4:de:74:74:02:ad:aa:61:eb:43:7c:be:86:fe:
49:72:d3:15:0f:33:d6:0a:25:fc:fd:33:7d:99:00:5b:71:76:
b3:d5:35:49
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:27:09 2025 by rpki-client