Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/UTfYLuIQrzc4_8Ou_tIVjVXtptU.roa
File: UTfYLuIQrzc4_8Ou_tIVjVXtptU.roa (raw, json)
Hash identifier: r21ZVEq0WMZLcKhmDTEE6RBqT116h4xlY5LUXUJSchc=
Subject key identifier: 51:37:D8:2E:E2:10:AF:37:38:FF:C3:AE:FE:D2:15:8D:55:ED:A6:D5
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A8CEC2F46139AA5549CBB7B74896C
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/UTfYLuIQrzc4_8Ou_tIVjVXtptU.roa
Signing time: Mon 01 Jan 2024 18:30:23 +0000
ROA not before: Mon 01 Jan 2024 18:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212539
IP address blocks: 37.230.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:8c:ec:2f:46:13:9a:a5:54:9c:bb:7b:74:89:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5137d82ee210af3738ffc3aefed2158d55eda6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:0b:ee:67:2e:c2:c2:00:c1:42:fd:a8:5e:
3d:cd:81:59:98:b5:95:63:11:d7:30:b4:e2:02:c7:
a3:4f:05:b6:80:69:ab:09:18:d4:11:21:38:ab:13:
c5:8c:64:72:c9:39:72:59:23:59:9e:90:f6:0e:ff:
49:be:36:4a:8c:fa:ac:71:19:25:bf:de:fa:c4:6c:
6f:57:f3:4e:ee:c7:16:91:b2:dd:a9:ff:6a:d8:51:
fb:33:2a:20:42:7e:ac:76:cf:f3:29:74:df:c6:71:
cf:d6:af:a0:73:97:72:1b:5e:51:a9:45:26:4b:02:
e4:1e:0e:2f:87:f6:77:ff:5f:e1:25:e0:e9:66:4a:
85:44:93:4e:3f:3d:f4:e8:c5:c5:06:7b:43:7b:ad:
9c:8d:09:e2:b1:d7:d9:e5:22:47:1d:ec:da:80:b8:
07:c4:ac:c1:b8:e2:d6:1a:26:bc:61:37:fd:e9:a8:
7d:e8:1a:21:86:24:ff:89:8e:1b:41:09:c1:85:5d:
1d:b2:3d:fa:fa:1c:1b:d7:26:dc:75:d3:8d:f6:c8:
3b:17:bd:da:4d:c8:05:8c:a9:f5:26:4d:63:83:7e:
cb:a6:88:00:5a:18:ca:91:7a:7f:cb:cd:0e:ee:cc:
e4:ea:d2:de:35:74:31:0d:bb:83:69:a3:fb:74:ea:
f2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:37:D8:2E:E2:10:AF:37:38:FF:C3:AE:FE:D2:15:8D:55:ED:A6:D5
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/UTfYLuIQrzc4_8Ou_tIVjVXtptU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.237.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:7f:bb:bc:12:ed:df:7c:96:0f:e5:06:fa:3d:79:c4:f9:be:
53:5c:48:45:5b:06:d7:f2:6f:fb:03:b9:fa:df:58:d3:f6:b3:
76:7d:bf:de:f9:1b:b7:f6:1d:63:3a:80:55:8e:44:59:a4:b2:
c7:6a:c3:0e:b6:3b:de:da:98:5e:d4:98:85:98:fc:61:cf:4c:
12:00:8d:d3:6c:5b:99:26:56:93:f5:17:60:70:35:c5:4f:d4:
cc:f5:df:a6:f2:c4:49:21:b6:d6:8a:08:d4:d1:04:84:72:a7:
de:8a:b1:d7:fe:4e:25:96:80:94:cf:4f:ee:22:91:32:ef:d6:
fa:ac:0f:9a:a0:1e:cc:67:fd:34:78:25:62:b0:cc:c1:e6:55:
ee:0a:bf:f4:72:d6:23:43:a1:21:7b:68:83:f4:5f:57:87:de:
22:40:9c:b4:0d:45:a8:5f:1b:02:f6:88:4d:70:a3:ba:14:e8:
b0:54:aa:18:e9:b4:19:fe:54:2f:c8:ff:66:21:75:1c:07:e7:
0e:72:84:13:bd:5d:63:02:98:6e:a1:19:dd:bf:4a:d4:e7:84:
0e:31:33:bc:85:c8:11:54:97:17:f8:c5:e1:de:a9:bb:f0:46:
ad:d5:90:d8:5d:45:3a:11:3e:8a:32:a3:11:20:e6:0a:98:b8:
f2:aa:10:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 12:48:39 2024 by rpki-client on console-ams.rpki-client.org