Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/ooiM7emZOeiTk4S4FJzTM6gtlAE.roa
File: ooiM7emZOeiTk4S4FJzTM6gtlAE.roa (raw, json)
Hash identifier: c8x4Xz32nnKuxVdcwk2pQTBYe9nqM0x9iOxbfG6v6t4=
Subject key identifier: A2:88:8C:ED:E9:99:39:E8:93:93:84:B8:14:9C:D3:33:A8:2D:94:01
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 0190070398804B97DA45257172F0CF31839A
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/ooiM7emZOeiTk4S4FJzTM6gtlAE.roa
Signing time: Tue 11 Jun 2024 11:16:34 +0000
ROA not before: Tue 11 Jun 2024 11:16:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207252
IP address blocks: 37.114.40.0/24 maxlen: 24
37.114.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:07:03:98:80:4b:97:da:45:25:71:72:f0:cf:31:83:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jun 11 11:16:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2888cede99939e8939384b8149cd333a82d9401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:d9:92:25:14:18:67:1b:e4:97:68:3e:09:
94:b7:98:c3:0d:7b:db:1c:18:0c:86:99:48:6b:3b:
60:65:3e:3d:27:31:52:62:9d:1d:e5:ba:37:85:da:
73:1f:74:cf:fd:d9:63:7f:8c:31:c1:bc:ad:7f:63:
51:8f:13:40:6f:b9:85:24:88:f7:1b:0f:c9:c1:99:
72:87:90:d9:4f:12:bf:80:82:b0:8e:ee:ff:18:f7:
29:9a:ba:42:eb:92:25:8d:65:42:0a:bd:d5:a6:cc:
68:9b:30:a1:80:2c:d7:2c:3c:b9:63:da:43:8e:d7:
34:2d:93:57:2a:a4:f2:d3:b8:98:d8:3e:d1:2c:a6:
88:48:3a:d4:85:5c:32:b2:db:7d:3b:74:74:60:21:
f9:8e:4d:58:24:bb:4e:c2:9b:8d:e7:a6:3e:06:01:
20:da:b0:96:35:53:85:0f:d4:8a:79:8b:13:04:5e:
08:8b:32:64:14:2c:39:c3:76:04:28:ad:f2:7c:00:
1d:e9:92:53:dd:cb:37:ab:41:9f:ee:b6:a2:16:4f:
cb:bd:39:49:48:2a:a3:87:47:cb:24:6b:a2:ff:03:
d4:6c:e1:2e:64:c2:d2:b2:47:8b:24:80:93:36:d0:
c5:d0:5a:3f:60:fb:05:29:dc:8e:23:ae:de:4b:f1:
a3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:88:8C:ED:E9:99:39:E8:93:93:84:B8:14:9C:D3:33:A8:2D:94:01
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/ooiM7emZOeiTk4S4FJzTM6gtlAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.40.0/24
37.114.58.0/24
Signature Algorithm: sha256WithRSAEncryption
55:6c:ac:d3:5f:0f:b2:ee:4a:8f:03:a0:a3:5b:ff:b0:6c:73:
50:d3:5e:78:ff:8d:86:e7:c5:87:07:e5:06:9b:26:58:95:19:
3b:eb:01:6e:39:f0:0f:3d:86:1e:4e:91:47:45:1a:e5:f5:ab:
f8:a9:38:1e:8c:71:7b:df:64:df:23:7c:a2:6c:b8:17:f5:a4:
2f:d5:c6:9e:91:f3:45:5d:00:bc:29:0b:cc:73:98:da:44:28:
96:9e:49:05:2a:f1:5f:78:f9:f7:de:d2:01:83:4f:d0:86:ee:
8c:cf:af:17:6f:57:ba:f5:6f:f0:9c:26:ac:3f:6b:39:15:29:
d7:ee:9f:03:77:9a:06:96:e0:aa:f6:85:93:46:bb:e1:f3:a7:
ba:c0:c2:46:33:5a:e7:26:a8:60:a9:a8:d7:82:b4:41:ce:eb:
3d:08:e3:7b:52:ba:5d:8c:c1:39:b8:6c:91:7e:4e:c2:bd:bc:
80:b8:69:49:00:db:7f:8f:c0:5a:d6:6a:32:ad:88:3b:99:45:
4c:f8:99:57:d7:dc:80:8f:09:90:6a:d8:04:fb:69:cb:89:ab:
bf:48:4f:7a:c3:97:01:bd:6c:18:ee:93:1a:95:2b:a3:b2:b6:
85:48:6e:3f:29:aa:22:ca:b1:1d:fb:b3:36:89:84:3c:65:6b:
97:79:e9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:32:46 2024 by rpki-client on console-ams.rpki-client.org