Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/si-C49_gCXDqHgV15BpjmdVSEiE.roa
File: si-C49_gCXDqHgV15BpjmdVSEiE.roa (raw, json)
Hash identifier: M/s+DA7HYj5VOC6CBgokuKGD9N5LSw7UMOrHEdp5Yqo=
Subject key identifier: B2:2F:82:E3:DF:E0:09:70:EA:1E:05:75:E4:1A:63:99:D5:52:12:21
Certificate issuer: /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial: 01942445A1B74EA798A345CCC22E759E9905
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/si-C49_gCXDqHgV15BpjmdVSEiE.roa
Signing time: Wed 01 Jan 2025 23:48:50 +0000
ROA not before: Wed 01 Jan 2025 23:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 185.156.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a1:b7:4e:a7:98:a3:45:cc:c2:2e:75:9e:99:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Validity
Not Before: Jan 1 23:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b22f82e3dfe00970ea1e0575e41a6399d5521221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:df:e3:b9:c6:d3:c2:c4:c1:45:dc:a1:ce:
54:3c:1a:5c:bc:3e:8b:7c:15:df:24:d8:29:51:4e:
74:4a:24:51:77:ff:0e:c0:b8:9e:cc:21:ba:7e:f8:
18:24:ee:37:77:eb:ad:aa:3e:38:62:20:89:23:94:
72:fd:b8:7d:bd:4c:9a:90:26:cf:db:1c:67:b2:f5:
dd:10:12:44:0b:10:8e:b8:dd:e4:c5:e0:ab:87:2c:
70:d2:55:43:3b:b5:a8:d8:8e:fa:55:f5:f7:96:13:
41:e2:72:a0:9f:9c:63:8e:44:aa:b1:b2:64:09:f6:
2b:19:7b:8e:b6:1c:98:be:7e:03:96:f6:fa:2d:16:
68:a0:1c:b8:78:4b:bf:c0:09:82:b1:ce:3c:b1:69:
0b:c8:75:0b:34:f5:23:ca:44:fd:22:2d:2f:ab:f3:
90:8c:8f:41:be:81:94:03:39:12:f0:a6:b4:40:ec:
df:05:ba:11:ed:e9:83:8e:40:e6:a1:05:dd:86:35:
9e:a5:21:82:5b:cd:44:d2:e5:73:a6:79:f6:67:e4:
a5:9b:f5:37:44:e2:f3:94:8b:d8:d0:2c:82:32:52:
0e:12:6f:cc:27:b0:69:67:ce:28:60:67:e2:d0:49:
4b:f7:6a:ae:58:cd:1a:11:2b:4a:8f:22:24:3b:a5:
08:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2F:82:E3:DF:E0:09:70:EA:1E:05:75:E4:1A:63:99:D5:52:12:21
X509v3 Authority Key Identifier:
keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/si-C49_gCXDqHgV15BpjmdVSEiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.8.0/22
Signature Algorithm: sha256WithRSAEncryption
28:72:6f:c5:e9:0c:d6:1d:ee:04:ab:df:2b:87:28:d8:e0:9a:
e8:d1:41:0c:0f:64:cf:0c:e9:4e:c2:71:ed:29:65:3c:26:41:
d6:c7:9d:95:7a:e2:33:73:66:2a:4c:b5:72:00:8f:49:74:9e:
58:26:63:1d:23:c2:88:78:79:3d:6a:ff:24:0e:23:7f:56:ab:
2e:48:dd:5d:3d:bc:5e:9d:19:b5:e9:63:85:4a:88:19:72:a9:
b2:b4:06:5d:06:20:d6:19:21:f8:69:4a:0c:14:a4:1d:f8:ed:
6b:86:85:dd:24:aa:ec:6d:68:2a:7f:d5:cc:f5:24:3e:d8:48:
e9:7c:fa:93:ba:f7:ab:c4:cc:d6:ea:44:46:62:7b:6a:1e:8b:
df:d8:dc:a8:43:5e:b0:67:9c:50:90:3a:7f:6e:99:3a:0a:58:
89:af:86:ee:9a:12:82:4b:2e:d0:af:90:07:e3:7b:50:37:8b:
8a:f0:25:31:5c:1d:9a:a3:d8:a7:bc:d1:ab:cb:93:b5:9e:19:
55:61:02:33:c2:93:15:1a:d9:05:42:ca:17:66:d1:f9:62:48:
94:b3:80:ea:af:83:d7:be:3a:c6:86:1a:ec:41:a8:3a:d8:a7:
31:9e:9d:83:52:43:1b:82:c0:58:21:18:eb:e4:08:b8:a4:27:
ad:31:e4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:36:39 2025 by rpki-client