Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/ermgwkRJO3OG0okaCWvHpOS2v3Y.roa
File: ermgwkRJO3OG0okaCWvHpOS2v3Y.roa (raw, json)
Hash identifier: 5NP8otBs1nLDDgV6mYPY0aYpRmTgBXit3G3yB6C7xFg=
Subject key identifier: 7A:B9:A0:C2:44:49:3B:73:86:D2:89:1A:09:6B:C7:A4:E4:B6:BF:76
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 018FB88EE123BFBDFBB7955C567C06A2CD25
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/ermgwkRJO3OG0okaCWvHpOS2v3Y.roa
Signing time: Mon 27 May 2024 05:38:42 +0000
ROA not before: Mon 27 May 2024 05:38:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3758
IP address blocks: 37.0.10.0/23 maxlen: 24
85.202.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b8:8e:e1:23:bf:bd:fb:b7:95:5c:56:7c:06:a2:cd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: May 27 05:38:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ab9a0c244493b7386d2891a096bc7a4e4b6bf76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d5:0c:35:db:c3:cf:64:69:92:83:20:1e:40:
83:68:fb:14:18:41:d3:52:ed:82:fa:13:6a:45:20:
47:25:51:60:da:8d:8e:e1:af:e1:ed:e5:0e:c2:69:
a8:fb:f4:46:a0:b5:41:ae:5f:e7:8a:e5:68:e9:1a:
ab:a7:ba:7e:d0:94:e8:6c:71:bc:9f:b0:86:94:d4:
36:5a:56:e4:03:16:09:27:1e:44:c4:48:89:be:df:
fd:29:74:d9:1c:c6:10:dd:0b:be:a7:31:5e:44:44:
d1:d2:98:50:c6:d0:80:81:68:25:33:4b:d2:fc:c9:
54:9d:8c:52:1f:ea:2d:28:00:00:fa:25:34:3d:f6:
b0:c9:51:6d:35:fb:5d:7b:99:2c:6b:08:c0:84:b6:
55:00:80:fc:58:18:5a:02:da:45:41:ba:63:73:d5:
f7:f2:76:7b:b4:d0:b8:95:af:8a:dc:f5:f4:aa:37:
15:a1:88:d9:37:28:0a:cc:0c:cc:15:16:c2:01:5a:
81:25:be:a4:f9:5d:6b:0e:4c:ae:8a:42:62:d3:90:
24:4c:11:f7:b7:a5:84:08:64:ba:ff:b2:d7:d2:99:
0c:ff:c8:ed:4a:e6:a6:17:85:07:b3:74:a1:6c:c3:
8c:bd:12:46:b1:29:d9:a2:22:4f:e1:6c:85:11:e7:
0c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B9:A0:C2:44:49:3B:73:86:D2:89:1A:09:6B:C7:A4:E4:B6:BF:76
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/ermgwkRJO3OG0okaCWvHpOS2v3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.10.0/23
85.202.168.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:98:82:db:31:8f:6f:75:8b:11:ab:3f:ef:8f:9f:bd:01:b0:
13:c2:94:ca:59:79:1d:90:4a:4c:f8:07:c7:c0:d5:0c:82:cd:
01:e2:15:b9:ed:43:68:49:cb:bc:1c:60:31:3b:38:f0:c6:d6:
ac:32:d9:c5:11:25:0a:f8:1c:26:28:97:08:df:c8:5e:bc:cc:
bd:db:f4:82:87:9d:f7:80:d2:52:13:8e:20:ae:1b:81:5b:30:
44:79:da:35:40:69:02:d5:30:8d:ef:73:95:21:22:d3:92:3d:
05:b6:47:c8:ff:bf:29:3a:ea:87:74:3c:46:c2:c1:37:73:41:
04:6e:ef:43:9d:c7:58:e1:e6:a3:88:45:5f:24:9a:f5:55:e0:
66:12:9d:68:bd:c4:dc:16:69:26:d9:eb:6a:c7:2e:ea:f9:f7:
af:01:6c:79:59:a6:98:81:25:ca:62:f7:2c:23:81:df:eb:a8:
bb:96:9f:1e:05:01:89:9c:cc:02:50:79:1b:83:df:c7:60:bb:
b6:64:0b:93:c8:42:68:1d:4e:06:8e:16:e2:49:e6:c2:37:82:
a8:2c:5b:1c:b3:24:da:82:fc:5a:24:fa:2c:8f:e4:e6:fa:94:
28:1a:9c:ed:87:37:d8:0a:c4:39:db:82:68:f7:08:ce:36:f7:
39:e1:f0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 17:32:27 2024 by rpki-client on console-fra.rpki-client.org