Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/SoiexIpu4U3JVP79mSHr8ClhAYQ.roa
File: SoiexIpu4U3JVP79mSHr8ClhAYQ.roa (raw, json)
Hash identifier: atXReCSxIhkR/Owa8V5Bk/3T/QMPBkWH2dUCQh6evOM=
Subject key identifier: 4A:88:9E:C4:8A:6E:E1:4D:C9:54:FE:FD:99:21:EB:F0:29:61:01:84
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194274879916CC60ED0BE4EAFAC2E2A6B4E
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/SoiexIpu4U3JVP79mSHr8ClhAYQ.roa
Signing time: Thu 02 Jan 2025 13:50:48 +0000
ROA not before: Thu 02 Jan 2025 13:50:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208001
IP address blocks: 194.71.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:79:91:6c:c6:0e:d0:be:4e:af:ac:2e:2a:6b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a889ec48a6ee14dc954fefd9921ebf029610184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e2:46:27:f1:e5:c7:f7:d6:43:8f:91:2a:da:
2b:82:d3:06:70:97:b4:2d:2b:fe:ec:01:33:40:51:
4b:51:10:3b:d9:b9:1e:2a:e9:45:12:5d:95:ee:40:
8f:7c:36:51:18:a7:84:11:b3:76:40:ab:dd:ea:5a:
12:92:b6:14:3b:a9:bd:7b:8e:b3:53:4b:b1:66:c3:
0c:0d:b0:93:c1:65:4f:3c:ae:d6:e6:9e:99:d1:e9:
a4:51:30:cf:8f:88:0c:dd:07:1c:8e:96:8a:84:b1:
13:82:6c:f7:40:68:19:6a:95:c3:b0:ce:b7:b9:35:
a1:08:ac:cb:7c:5e:07:59:28:a0:47:64:fd:12:97:
c5:b6:d0:7e:1a:18:bc:9f:51:c6:2a:e2:37:11:8c:
e3:67:73:00:ee:28:8a:00:4e:45:01:90:4c:9e:e0:
41:4b:80:79:0e:38:6b:1b:25:80:88:70:0a:99:57:
2f:01:33:b7:9b:44:31:79:85:60:40:15:1e:88:23:
62:b4:f1:38:b9:63:43:3a:c6:8b:fa:57:57:f9:60:
de:1b:63:cf:73:2b:ea:b9:16:fc:52:a5:73:89:9c:
18:0b:e9:e5:43:cf:bd:0c:17:1b:f6:0f:13:6f:6d:
12:79:f3:f8:3b:7b:f3:79:e5:53:38:0d:5a:7e:21:
b0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:88:9E:C4:8A:6E:E1:4D:C9:54:FE:FD:99:21:EB:F0:29:61:01:84
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/SoiexIpu4U3JVP79mSHr8ClhAYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.71.122.0/24
Signature Algorithm: sha256WithRSAEncryption
19:5a:dc:d6:43:fa:b9:2d:29:4a:46:f3:b3:16:1a:4c:7b:c7:
75:70:5c:86:26:17:a7:93:b4:00:d4:b5:15:eb:2a:e2:82:8b:
9f:91:1b:4a:8c:93:76:dc:67:66:6a:75:6e:42:d8:8e:44:ed:
a3:5a:59:a7:e2:89:c4:59:fa:a6:de:59:9d:ce:93:a3:12:10:
89:d6:2b:ab:94:f1:66:cc:ea:b6:19:53:26:5a:eb:d1:e7:76:
43:f1:4d:ef:67:4c:3c:7e:33:e1:37:03:e2:7f:51:50:ac:23:
b9:7a:cf:e6:dd:ce:03:04:aa:81:8d:5e:00:82:9e:d9:a5:fb:
8c:7b:12:fc:c4:83:54:d6:b2:fc:1f:9b:33:da:e0:c4:bd:07:
bd:4e:37:9e:7a:99:62:2f:b1:c5:8c:d1:4d:91:e1:61:82:40:
f9:ac:93:05:f0:1f:c9:30:b3:0d:6b:0b:b2:4e:ca:c1:c9:6f:
c0:94:10:9c:2c:04:0d:89:d5:05:c2:56:db:d6:35:2a:69:59:
ca:ea:64:81:ff:5e:bc:54:a7:b5:64:64:3e:e6:3b:49:49:f3:
63:dd:e7:ac:72:82:c9:e3:b0:d8:ff:a7:29:6b:71:9f:75:31:
81:4a:da:c9:49:95:86:30:4c:1a:b5:99:38:bf:0e:23:f5:a4:
ee:7e:73:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:38 2025 by rpki-client