Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/4Pz2Po1CJtFKP-ckISZDXoLJaPs.roa
File: 4Pz2Po1CJtFKP-ckISZDXoLJaPs.roa (raw, json)
Hash identifier: VtsQKFqbYWVvkscDWfGuL6Guv96ch//LFCXPi9/tkL8=
Subject key identifier: E0:FC:F6:3E:8D:42:26:D1:4A:3F:E7:24:21:26:43:5E:82:C9:68:FB
Certificate issuer: /CN=f25fd47d836fca6f741caa3823937f4bb1f1b294
Certificate serial: 018CC7270FAD34CC4BF49D42EC0637CADE1B
Authority key identifier: F2:5F:D4:7D:83:6F:CA:6F:74:1C:AA:38:23:93:7F:4B:B1:F1:B2:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/4Pz2Po1CJtFKP-ckISZDXoLJaPs.roa
Signing time: Mon 01 Jan 2024 22:31:14 +0000
ROA not before: Mon 01 Jan 2024 22:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42525
IP address blocks: 37.25.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:0f:ad:34:cc:4b:f4:9d:42:ec:06:37:ca:de:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25fd47d836fca6f741caa3823937f4bb1f1b294
Validity
Not Before: Jan 1 22:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0fcf63e8d4226d14a3fe7242126435e82c968fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:92:c5:01:d4:04:a7:1e:0b:a9:26:77:88:ca:
12:12:b3:40:7b:c8:2d:5b:45:85:fc:75:4b:67:15:
fc:f8:57:28:9b:30:00:56:e7:56:32:2a:f7:dd:ac:
39:69:c5:cc:56:31:74:77:da:93:a3:02:93:77:d8:
0c:85:e8:97:60:22:04:f0:d4:70:c9:a2:02:90:3f:
1c:0c:fc:48:4b:b8:20:91:77:e9:0e:8b:a8:7c:18:
84:a6:ec:47:69:88:0a:e8:9b:b8:ed:3c:6c:ac:86:
3c:28:08:f5:a1:7c:a1:12:c4:31:a5:66:e1:c8:9c:
15:5c:83:17:10:4e:15:cc:9b:af:76:74:5b:8a:8b:
a4:b8:a5:fb:28:86:11:e9:2d:6c:6a:35:75:00:de:
3b:2a:b5:87:89:9c:81:d8:a8:62:38:d2:71:75:32:
bc:eb:92:fb:a2:20:7e:20:91:91:d3:af:43:6f:71:
c1:cd:b0:b2:0d:9b:84:36:7b:0b:b6:0d:7e:0e:6b:
ce:8f:80:c8:d0:2f:8a:2e:5e:a0:7d:61:3d:ce:03:
27:1e:65:5e:8c:1a:ce:32:51:07:9e:e4:fe:c5:ef:
b2:a2:75:c3:c0:ab:d6:33:2e:b9:53:1d:27:15:b2:
39:1c:d1:5b:a8:ef:0e:04:87:66:f4:2e:95:87:da:
30:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FC:F6:3E:8D:42:26:D1:4A:3F:E7:24:21:26:43:5E:82:C9:68:FB
X509v3 Authority Key Identifier:
keyid:F2:5F:D4:7D:83:6F:CA:6F:74:1C:AA:38:23:93:7F:4B:B1:F1:B2:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/4Pz2Po1CJtFKP-ckISZDXoLJaPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.64.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:d0:04:59:6c:80:b9:97:3d:f3:42:fb:7f:13:f0:e0:ea:e8:
cc:d2:05:82:e2:a1:38:1e:09:06:b1:83:4b:6b:a7:06:d5:43:
96:84:cf:0a:6f:28:95:e7:6f:5a:73:58:f3:04:91:83:f2:8a:
6f:23:92:fa:d8:12:b0:34:19:3a:01:4b:ed:35:f5:72:0a:b0:
aa:bb:2b:1b:a6:0e:8d:2e:f0:ab:95:69:1b:0f:51:26:97:70:
c9:11:1d:7a:78:b1:98:b1:16:45:d4:91:f0:ab:11:9a:3e:71:
43:20:73:42:eb:bc:aa:5b:60:22:84:51:85:50:f3:71:7b:74:
15:c0:cf:bc:07:98:9e:93:be:ed:e5:20:bc:c5:06:d0:53:fa:
87:4e:65:b1:87:9b:c4:a0:43:90:b6:d9:e4:5b:cd:48:01:bc:
3e:4b:01:b4:2f:e9:42:16:a0:2d:e3:f9:f7:f2:5a:23:71:a2:
41:32:92:08:de:2b:cd:89:03:9b:e6:f2:60:80:d1:fa:dc:e4:
6a:6c:2c:18:42:80:06:08:2f:c6:6c:2a:2c:30:18:28:ab:a0:
01:3a:b1:ba:6a:eb:e0:cf:7c:2b:0e:2a:e0:98:31:be:be:e5:
b8:8e:e7:98:c5:da:2a:61:84:6f:ab:b7:04:e0:9c:0f:48:92:
87:53:1b:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJw+tNMxL9J1C7AY3yt4bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNWZkNDdkODM2ZmNhNmY3NDFjYWEzODIzOTM3ZjRiYjFm
MWIyOTQwHhcNMjQwMTAxMjIzMTE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGZjZjYzZThkNDIyNmQxNGEzZmU3MjQyMTI2NDM1ZTgyYzk2OGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JLFAdQEpx4LqSZ3iMoSErNAe8gt
W0WF/HVLZxX8+FcomzAAVudWMir33aw5acXMVjF0d9qTowKTd9gMheiXYCIE8NRw
yaICkD8cDPxIS7ggkXfpDouofBiEpuxHaYgK6Ju47TxsrIY8KAj1oXyhEsQxpWbh
yJwVXIMXEE4VzJuvdnRbioukuKX7KIYR6S1sajV1AN47KrWHiZyB2KhiONJxdTK8
65L7oiB+IJGR069Db3HBzbCyDZuENnsLtg1+DmvOj4DI0C+KLl6gfWE9zgMnHmVe
jBrOMlEHnuT+xe+yonXDwKvWMy65Ux0nFbI5HNFbqO8OBIdm9C6Vh9owCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOD89j6NQibRSj/nJCEmQ16CyWj7MB8GA1UdIwQY
MBaAFPJf1H2Db8pvdByqOCOTf0ux8bKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGxfVWZZTnZ5bTkwSEtvNEk1Tl9TN0h4c3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8yOTZlZWMtNGYwNC00YTI1LWE4NDMt
YmI3YTQzZTU3ZjM4LzEvNFB6MlBvMUNKdEZLUC1ja0lTWkRYb0xKYVBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8yOTZlZWMtNGYwNC00YTI1LWE4NDMtYmI3YTQzZTU3ZjM4
LzEvOGxfVWZZTnZ5bTkwSEtvNEk1Tl9TN0h4c3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJRlAMA0G
CSqGSIb3DQEBCwUAA4IBAQA/0ARZbIC5lz3zQvt/E/Dg6ujM0gWC4qE4HgkGsYNL
a6cG1UOWhM8KbyiV529ac1jzBJGD8opvI5L62BKwNBk6AUvtNfVyCrCquysbpg6N
LvCrlWkbD1Eml3DJER16eLGYsRZF1JHwqxGaPnFDIHNC67yqW2AihFGFUPNxe3QV
wM+8B5iek77t5SC8xQbQU/qHTmWxh5vEoEOQttnkW81IAbw+SwG0L+lCFqAt4/n3
8lojcaJBMpII3ivNiQOb5vJggNH63ORqbCwYQoAGCC/GbCosMBgoq6ABOrG6auvg
z3wrDirgmDG+vuW4jueYxdoqYYRvq7cE4JwPSJKHUxv3
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:25:32 2024 by rpki-client on console-ams.rpki-client.org