Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/OTeSGDvy30ag83BDxmnIjfIrKns.roa
File: OTeSGDvy30ag83BDxmnIjfIrKns.roa (raw, json)
Hash identifier: xkyUd77WygfbbzqamRZFRpRzb6QC+rjro6IfY1rUZu8=
Subject key identifier: 39:37:92:18:3B:F2:DF:46:A0:F3:70:43:C6:69:C8:8D:F2:2B:2A:7B
Certificate issuer: /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Certificate serial: 01942220238CC3647722F3411D06EC6EAFF6
Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/OTeSGDvy30ag83BDxmnIjfIrKns.roa
Signing time: Wed 01 Jan 2025 13:48:39 +0000
ROA not before: Wed 01 Jan 2025 13:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198965
IP address blocks: 37.221.224.0/21 maxlen: 21
185.116.120.0/22 maxlen: 22
2a13:ea40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:23:8c:c3:64:77:22:f3:41:1d:06:ec:6e:af:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Validity
Not Before: Jan 1 13:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=393792183bf2df46a0f37043c669c88df22b2a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:a8:0b:e5:4e:07:40:61:3f:bc:d3:54:98:
9b:1e:bc:6d:28:42:01:a8:95:b6:62:d7:8f:d5:f0:
fd:5e:f3:f9:22:ce:09:de:58:19:9d:fb:5e:00:c7:
79:b6:f3:0f:93:6c:92:96:2a:41:2a:07:8f:59:9f:
9b:db:5b:f2:75:0d:2c:aa:e1:7a:d7:87:78:ba:85:
00:4b:b9:96:0d:f0:6c:64:c9:90:cb:e5:13:5e:42:
15:06:38:cf:3c:51:d4:ad:5d:1c:1d:b0:4d:a6:ee:
d6:f4:4f:ce:0c:81:dc:d8:63:75:63:44:25:17:ec:
64:ad:99:57:20:e9:23:55:bd:cf:08:9c:51:9e:c2:
ff:9c:fb:22:a1:07:f4:ff:4f:4b:19:a1:39:dd:76:
9f:e3:f8:91:e4:93:60:4d:87:a7:8f:c9:cc:6a:cd:
9a:0a:46:f9:4a:44:c3:57:7b:34:c0:60:7c:bd:fe:
41:a1:84:24:74:72:61:20:96:50:64:d2:05:8b:49:
aa:6f:7d:4a:44:f8:07:87:0a:05:a9:2c:41:81:a0:
69:a1:12:55:64:bb:b9:77:f3:f1:b7:0b:dd:c7:4c:
b1:39:9f:4e:f2:48:a2:aa:1d:4a:f8:c6:34:25:d6:
4f:56:d4:c2:52:2d:d8:7d:38:b7:9c:aa:fe:47:85:
53:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:37:92:18:3B:F2:DF:46:A0:F3:70:43:C6:69:C8:8D:F2:2B:2A:7B
X509v3 Authority Key Identifier:
keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/OTeSGDvy30ag83BDxmnIjfIrKns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.224.0/21
185.116.120.0/22
IPv6:
2a13:ea40::/29
Signature Algorithm: sha256WithRSAEncryption
1d:48:d8:2a:a8:19:08:c3:f1:df:c9:b5:32:f7:86:03:1e:0c:
28:98:ea:f6:fb:5f:a2:7a:87:0b:d4:80:6c:8c:97:1b:fa:0e:
85:27:77:fa:57:c6:0c:db:9e:53:1f:11:58:ee:95:10:13:94:
15:62:b2:bd:53:c5:de:93:0c:b8:95:a8:7f:05:29:8f:59:14:
f4:19:ee:38:65:6e:d2:0e:bd:a7:83:2b:83:51:29:cd:8b:86:
28:c8:17:dc:46:0f:20:4d:b7:ca:33:ad:18:92:34:e4:e7:98:
5d:3b:d5:1c:f0:31:93:87:b8:2b:ea:a3:21:c9:03:ba:4f:56:
d2:31:c8:21:dd:9c:85:a5:dc:d3:02:ed:57:fd:20:15:13:7b:
12:a3:f8:21:53:2a:9b:16:83:a7:d3:86:5e:c0:c0:34:33:60:
78:a7:26:b7:c1:3a:b5:b0:8e:52:a9:66:fe:c9:8a:50:e9:bf:
c9:b7:69:e1:8d:b1:e9:df:98:20:e8:be:7f:72:0c:f4:3c:01:
e3:bd:44:e9:76:1c:85:6a:56:dd:ab:74:d3:2b:50:39:74:2e:
c2:90:54:a4:2b:9c:1c:4b:78:a2:4e:c4:99:1c:c9:9d:9e:99:
f1:e1:83:b9:13:8e:6c:31:ca:63:c2:cf:ec:76:62:47:fe:c0:
02:0f:fd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:33:23 2025 by rpki-client