Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/Sl6Vo_wPwtgiIFIYMqrbSQblXKc.roa
File: Sl6Vo_wPwtgiIFIYMqrbSQblXKc.roa (raw, json)
Hash identifier: l8tp4Qke8V/squeIomyLOU/9sV5KVMqfblcX8Rj/Ujc=
Subject key identifier: 4A:5E:95:A3:FC:0F:C2:D8:22:20:52:18:32:AA:DB:49:06:E5:5C:A7
Certificate issuer: /CN=9087833e025b2320f9053a103ba61de52eab2afb
Certificate serial: 01941FFA1BDD8F378B4363F5F185D30C098B
Authority key identifier: 90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/Sl6Vo_wPwtgiIFIYMqrbSQblXKc.roa
Signing time: Wed 01 Jan 2025 03:47:52 +0000
ROA not before: Wed 01 Jan 2025 03:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49223
IP address blocks: 194.37.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1b:dd:8f:37:8b:43:63:f5:f1:85:d3:0c:09:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9087833e025b2320f9053a103ba61de52eab2afb
Validity
Not Before: Jan 1 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a5e95a3fc0fc2d82220521832aadb4906e55ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:16:97:02:f0:31:54:ed:65:36:b6:64:b8:
4d:4a:32:65:42:9f:f5:42:cf:f8:45:96:bf:a6:1b:
8f:45:20:04:c3:02:db:ff:23:e7:3d:47:05:d9:7d:
53:52:f1:8f:75:86:a8:e9:d5:0a:2e:51:f4:71:67:
ff:37:89:22:fd:25:fd:93:ed:47:ea:e9:75:8c:7f:
9d:26:86:65:19:41:35:43:3c:bf:84:80:9f:94:66:
79:e4:97:2e:ee:5c:f0:ae:5e:b1:56:ac:d3:ff:7d:
41:4e:97:46:27:eb:da:f0:ce:3b:87:a2:65:48:47:
46:e0:01:87:cd:42:c2:7d:ae:62:f2:85:12:c4:b2:
11:fe:ca:f6:a8:b8:3b:3f:ea:d8:a3:f3:a3:df:b3:
6d:d9:12:48:43:d4:d9:02:65:b5:1b:44:b2:fb:47:
d3:2a:02:78:22:a2:21:ae:82:c7:74:0e:cf:70:16:
7c:d9:61:74:06:6e:41:81:62:41:33:59:85:19:25:
c3:ec:ed:9b:33:78:03:12:76:5b:46:d2:72:b8:9f:
60:3b:20:3d:28:e7:ff:f6:11:03:b6:06:c4:17:af:
09:99:d7:37:5e:48:6d:d6:8a:57:c6:1c:71:67:b3:
7c:44:b2:ec:23:4b:89:52:70:2c:82:88:86:c4:58:
05:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5E:95:A3:FC:0F:C2:D8:22:20:52:18:32:AA:DB:49:06:E5:5C:A7
X509v3 Authority Key Identifier:
keyid:90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/Sl6Vo_wPwtgiIFIYMqrbSQblXKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.37.100.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:0c:5b:04:ff:ed:ef:b7:72:c0:b6:9c:df:71:b1:b6:f3:1e:
51:61:10:0e:f8:83:8c:5b:a7:cc:ca:5d:43:f5:41:b2:c3:b3:
f1:a8:bb:bd:fc:41:9e:1c:49:f9:02:5e:72:a0:4b:34:b3:bb:
59:7d:7f:bd:cf:ae:17:d8:46:a7:58:13:73:72:5e:d1:18:6a:
50:cf:80:14:7f:de:1b:cb:db:b1:6d:8f:f6:6d:f2:1f:bc:f5:
ae:8e:1b:ec:4b:67:35:39:33:d3:1d:99:18:71:e3:b4:a2:7a:
ac:30:fb:d1:85:a4:32:af:56:68:eb:db:66:08:41:57:be:4c:
73:f7:89:c8:46:84:f0:a5:b6:0a:c4:f9:2b:f0:10:66:f1:22:
a8:a4:8d:42:d4:c5:5b:6c:08:4c:ec:df:8c:9c:ae:f6:cb:cc:
9f:f3:39:0e:98:c8:ff:2f:db:29:88:92:54:c7:48:96:da:0d:
e8:ef:5b:1a:c3:d2:28:f7:a6:25:99:f3:20:a9:fd:7d:49:96:
37:0d:94:b1:a3:32:39:a9:f0:4a:87:00:68:cc:df:ff:86:fc:
d6:ab:b7:10:de:32:14:e5:13:f9:02:c4:a1:92:74:82:3d:98:
81:00:f0:64:14:7d:b5:38:3c:e7:14:d2:c9:71:92:18:a1:1a:
98:96:d6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:49:39 2025 by rpki-client