Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/1l3aKspHXU6XVOit6PHQFD8-CEY.roa
File: 1l3aKspHXU6XVOit6PHQFD8-CEY.roa (raw, json)
Hash identifier: DyU8uYzLhiWcOgTJ4GAumGWUAiiWRecLjkhpgn/3IIM=
Subject key identifier: D6:5D:DA:2A:CA:47:5D:4E:97:54:E8:AD:E8:F1:D0:14:3F:3E:08:46
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 018CC94E0EC5EBB1E8AC72075FDAAF611DBE
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/1l3aKspHXU6XVOit6PHQFD8-CEY.roa
Signing time: Tue 02 Jan 2024 08:33:05 +0000
ROA not before: Tue 02 Jan 2024 08:33:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 37.114.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:0e:c5:eb:b1:e8:ac:72:07:5f:da:af:61:1d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 2 08:33:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d65dda2aca475d4e9754e8ade8f1d0143f3e0846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:82:f9:62:ea:18:6b:6a:0b:ab:a9:e5:b3:60:
26:9f:30:0f:b3:80:bf:64:ad:ad:7c:fa:2c:65:81:
0f:e5:b2:82:64:4f:63:b3:ff:db:8a:98:fa:36:44:
cc:5e:ec:dd:95:f7:73:4a:a1:49:57:7e:b2:74:46:
0f:32:00:27:35:be:23:e3:90:db:36:fa:71:fc:13:
41:d5:d0:0e:a4:62:35:e7:e7:80:cb:fd:61:0f:7f:
3c:24:a6:24:20:4d:b2:78:58:38:71:d3:93:f9:c3:
f6:bc:fb:d7:2e:45:71:40:d6:15:03:d2:bd:3e:ed:
00:53:4c:4d:1a:8a:d4:b4:9f:3e:e9:7c:b3:6a:58:
90:b7:65:66:9a:9d:53:30:06:9c:81:d2:50:24:fa:
06:89:bc:4d:ba:c3:a0:c8:98:3f:2d:73:ab:bc:20:
55:1e:b9:32:06:87:eb:5c:5a:da:4f:bc:04:7e:d8:
19:7f:70:b1:ed:2b:0d:be:b7:48:b6:62:4e:81:6e:
de:ed:1e:fb:e9:2c:c4:c7:34:2a:49:f3:04:7a:d6:
34:12:e5:4a:b2:ab:89:3e:55:06:a4:9f:77:9f:5b:
dc:d1:61:11:25:41:ba:30:70:a1:4b:8d:48:fd:be:
f6:bd:5d:92:61:5b:10:6d:99:31:55:f4:50:45:bf:
86:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5D:DA:2A:CA:47:5D:4E:97:54:E8:AD:E8:F1:D0:14:3F:3E:08:46
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/1l3aKspHXU6XVOit6PHQFD8-CEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.57.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e7:1f:47:b4:8e:59:94:fb:b7:fb:45:ed:de:9d:c3:20:b4:
41:41:d4:55:04:ce:31:8d:a4:b6:9b:e5:18:35:aa:fb:a0:c5:
c4:74:e3:35:21:35:a8:c3:8e:22:2a:02:82:bf:e2:81:05:e5:
f3:93:0e:86:ab:56:19:6b:62:4a:28:a9:b5:ce:82:8b:0d:d5:
1f:90:ac:4f:ec:0f:4f:a6:89:74:62:75:2c:c3:c3:d1:c0:c1:
97:6a:e9:2d:c4:14:57:a0:e9:fe:fb:57:c7:62:58:5f:5c:58:
ab:55:2a:7d:f8:14:ca:fb:e3:18:ae:84:db:d9:0e:6d:6b:a2:
8a:d4:d8:7e:c4:99:23:7b:30:c6:2b:53:e6:2c:ff:7a:8b:c8:
39:e9:16:ff:d5:48:22:39:58:de:32:38:e2:62:90:e5:a7:e2:
28:18:07:c1:13:6b:05:86:a3:27:71:8b:1f:b1:ba:11:9b:cd:
08:66:db:d8:0b:24:c9:82:61:d9:29:8d:0d:fa:31:71:22:02:
8b:ee:7e:e4:c2:d1:7b:63:95:ba:69:ef:b8:88:bc:97:0f:6e:
27:72:38:bb:ed:52:86:1c:97:16:40:dd:df:6c:50:06:d1:43:
03:72:80:86:07:07:64:6a:43:ac:36:44:54:4d:f6:d1:81:fb:
36:6e:e9:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTg7F67HorHIHX9qvYR2+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj
YmU3ZWMwHhcNMjQwMTAyMDgzMzA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjVkZGEyYWNhNDc1ZDRlOTc1NGU4YWRlOGYxZDAxNDNmM2UwODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioL5YuoYa2oLq6nls2AmnzAPs4C/
ZK2tfPosZYEP5bKCZE9js//bipj6NkTMXuzdlfdzSqFJV36ydEYPMgAnNb4j45Db
Nvpx/BNB1dAOpGI15+eAy/1hD388JKYkIE2yeFg4cdOT+cP2vPvXLkVxQNYVA9K9
Pu0AU0xNGorUtJ8+6XyzaliQt2Vmmp1TMAacgdJQJPoGibxNusOgyJg/LXOrvCBV
HrkyBofrXFraT7wEftgZf3Cx7SsNvrdItmJOgW7e7R776SzExzQqSfMEetY0EuVK
squJPlUGpJ93n1vc0WERJUG6MHChS41I/b72vV2SYVsQbZkxVfRQRb+GYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNZd2irKR11Ol1Torejx0BQ/PghGMB8GA1UdIwQY
MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt
MWI3Y2JiMDhkNzNmLzEvMWwzYUtzcEhYVTZYVk9pdDZQSFFGRDgtQ0VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMtMWI3Y2JiMDhkNzNm
LzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJXI5MA0G
CSqGSIb3DQEBCwUAA4IBAQBi5x9HtI5ZlPu3+0Xt3p3DILRBQdRVBM4xjaS2m+UY
Nar7oMXEdOM1ITWow44iKgKCv+KBBeXzkw6Gq1YZa2JKKKm1zoKLDdUfkKxP7A9P
pol0YnUsw8PRwMGXauktxBRXoOn++1fHYlhfXFirVSp9+BTK++MYroTb2Q5ta6KK
1Nh+xJkjezDGK1PmLP96i8g56Rb/1UgiOVjeMjjiYpDlp+IoGAfBE2sFhqMncYsf
sboRm80IZtvYCyTJgmHZKY0N+jFxIgKL7n7kwtF7Y5W6ae+4iLyXD24ncji77VKG
HJcWQN3fbFAG0UMDcoCGBwdkakOsNkRUTfbRgfs2bumn
-----END CERTIFICATE-----
Generated at Fri Jun 21 05:34:41 2024 by rpki-client on console-fra.rpki-client.org