Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/9bAjHDc5wyEiR9lvXh50heL0R1Q.roa
File: 9bAjHDc5wyEiR9lvXh50heL0R1Q.roa (raw, json)
Hash identifier: z1hBieiSkATtPY0EhQR79LdD8796BNe3NglY7A/YYfw=
Subject key identifier: F5:B0:23:1C:37:39:C3:21:22:47:D9:6F:5E:1E:74:85:E2:F4:47:54
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018CCA2A326FC6132249BFBB1283EEBD5694
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/9bAjHDc5wyEiR9lvXh50heL0R1Q.roa
Signing time: Tue 02 Jan 2024 12:33:32 +0000
ROA not before: Tue 02 Jan 2024 12:33:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9384
IP address blocks: 37.128.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:32:6f:c6:13:22:49:bf:bb:12:83:ee:bd:56:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 2 12:33:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5b0231c3739c3212247d96f5e1e7485e2f44754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8a:b8:76:fd:07:5b:02:99:4e:5c:13:94:bc:
a1:ea:fa:4d:27:33:5c:78:32:71:12:d2:fe:32:09:
13:aa:a4:03:6c:fa:29:10:02:cc:8f:99:e0:59:05:
96:1f:89:ba:f6:aa:3f:07:cd:48:4e:bf:64:bd:98:
d3:f5:9f:4c:8c:6a:21:2f:26:2c:c1:3a:35:fa:6d:
f9:ae:34:9e:60:8e:03:93:41:93:88:c2:5d:40:1b:
ef:8b:88:d7:21:67:23:aa:42:a4:ab:fc:14:18:b1:
58:ce:5d:d8:ac:93:48:4c:4f:6f:88:d2:05:01:a2:
e4:7b:a2:10:a3:fe:ad:53:b4:19:af:a3:5d:43:06:
d3:5d:39:f7:6e:21:4d:80:4d:e5:c6:a9:ce:69:a8:
ad:94:59:9f:73:70:84:ad:32:60:75:3a:95:77:90:
1c:75:c5:4f:30:64:93:5d:65:98:f2:d6:f6:37:91:
cb:89:ef:a8:14:05:5d:25:a3:d0:b2:4d:2c:72:7c:
d7:c7:38:e9:e7:6a:80:62:7b:94:39:81:f3:2d:5b:
66:b7:03:ce:8a:f4:3e:43:fc:48:26:ed:fe:27:31:
40:b9:4f:95:df:f3:09:b2:f2:f9:e5:0b:99:2d:ef:
c2:11:08:91:bc:dd:75:d1:1f:ec:bf:60:cd:56:e4:
44:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B0:23:1C:37:39:C3:21:22:47:D9:6F:5E:1E:74:85:E2:F4:47:54
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/9bAjHDc5wyEiR9lvXh50heL0R1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.240.0/21
Signature Algorithm: sha256WithRSAEncryption
99:cb:e1:87:26:14:bd:15:66:a9:55:8c:e0:2c:13:65:74:f4:
fb:83:c7:21:67:aa:3c:8f:50:df:3f:f4:93:6a:19:ba:8c:6a:
e7:3a:4b:4e:40:fe:7f:ce:7b:58:a0:42:2d:6a:33:51:f4:72:
a6:7f:27:da:23:50:55:c0:be:c9:83:07:cc:ac:e5:08:c2:ec:
11:a4:0a:53:91:b8:1d:d0:77:da:97:a0:15:e8:37:05:20:83:
ca:70:ad:97:2a:32:4d:51:bf:0a:50:db:bf:74:93:fd:1e:75:
49:40:af:e5:9e:9e:7c:96:02:ba:fa:dd:a6:50:bf:1c:4f:75:
b8:fa:e4:b3:39:1e:12:9d:66:f0:ff:c0:84:f1:4d:ba:1f:8e:
58:f2:ad:48:19:47:a4:b0:a0:6e:c7:f8:e9:4d:b3:09:33:42:
9d:66:d6:9a:d5:b1:19:11:ed:41:0b:76:95:c4:b5:2f:d9:56:
89:41:02:39:48:00:bb:20:8b:89:9f:96:c4:34:39:06:51:bc:
0a:5c:86:4a:22:6d:0e:02:7c:57:db:16:3d:85:e7:db:24:8c:
f3:df:69:2b:96:22:69:88:29:50:ef:2e:e3:82:63:d6:ea:71:
6c:d3:e8:38:f3:a1:5b:8a:77:38:85:74:bb:12:10:cd:e2:2d:
43:46:d0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 16:39:14 2024 by rpki-client on console-ams.rpki-client.org