Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/3VTCsRlWwy7HN5fY-lirjDzKV-w.roa
File: 3VTCsRlWwy7HN5fY-lirjDzKV-w.roa (raw, json)
Hash identifier: KKrIQOTQ5K5YTjaRkoqHwc7KNVm40hHUsainwrZGbAA=
Subject key identifier: DD:54:C2:B1:19:56:C3:2E:C7:37:97:D8:FA:58:AB:8C:3C:CA:57:EC
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 018CC7933A91C5E61E1880F7F9C98DD28F21
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/3VTCsRlWwy7HN5fY-lirjDzKV-w.roa
Signing time: Tue 02 Jan 2024 00:29:23 +0000
ROA not before: Tue 02 Jan 2024 00:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28753
IP address blocks: 37.1.192.0/21 maxlen: 21
5.61.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:3a:91:c5:e6:1e:18:80:f7:f9:c9:8d:d2:8f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jan 2 00:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd54c2b11956c32ec73797d8fa58ab8c3cca57ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:30:78:fe:23:88:74:4d:53:7e:51:17:38:96:
a0:0f:59:f1:4d:e8:67:8e:4a:74:6e:0e:92:03:6f:
ca:f4:73:b5:b9:88:54:fb:ad:31:70:3a:0e:32:57:
3b:19:42:82:eb:7e:91:98:dd:8d:a5:4b:a1:b8:41:
bb:7c:8d:20:b7:24:67:60:5c:a7:8e:f3:05:3b:02:
96:31:40:e8:be:46:00:ea:34:d1:b1:7f:33:35:9b:
97:e6:4f:75:21:e7:9a:3b:9a:ae:ac:04:9b:e1:08:
cb:4b:07:a8:2c:de:eb:7a:96:1e:d9:23:bd:f7:d0:
46:62:be:ba:fb:21:1e:53:e1:ac:e0:f9:22:cb:71:
d8:fc:cf:16:02:a6:b1:d4:5e:99:76:23:8e:c6:84:
46:81:40:b0:99:f6:e2:83:a2:59:c4:e1:a8:31:54:
4d:ed:0d:ca:68:f9:48:67:ed:38:70:4f:60:20:cd:
aa:8e:b6:67:16:4f:f1:3b:5d:6d:51:22:5e:8c:51:
9f:83:5c:71:c2:6a:ac:8c:8a:02:e1:b1:e2:7f:3b:
44:42:95:7c:36:3d:99:9c:f2:48:62:f8:ff:cb:05:
03:95:5c:19:0b:2c:25:53:60:e6:ca:4c:93:0d:af:
3c:4f:fa:13:c2:a7:bb:b6:fb:52:56:3f:8b:b3:1e:
2d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:54:C2:B1:19:56:C3:2E:C7:37:97:D8:FA:58:AB:8C:3C:CA:57:EC
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/3VTCsRlWwy7HN5fY-lirjDzKV-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.32.0/20
37.1.192.0/21
Signature Algorithm: sha256WithRSAEncryption
08:f2:59:36:bc:07:60:da:a0:b6:2b:27:e9:7e:34:29:15:e4:
84:88:0f:33:73:bd:e8:6e:a6:47:d0:b3:bf:69:24:84:c5:71:
99:b5:00:ce:f5:87:1b:f5:b1:2e:59:05:73:fc:55:0f:e8:db:
c5:d4:94:e8:4c:46:c5:34:8b:1d:64:54:e1:30:5c:4a:cb:dd:
60:88:fb:9b:a3:db:e0:25:b7:05:0c:69:72:1a:1a:aa:13:ff:
5b:75:cc:62:4c:a5:36:86:67:9b:f0:06:eb:e6:34:46:1f:ae:
7d:d8:21:5e:65:b8:76:61:e3:24:27:65:7e:20:9b:73:50:7c:
4c:37:b4:2b:0a:6c:c5:e9:72:44:3a:79:da:1d:ba:d1:b7:72:
9f:8e:a2:7f:2d:c3:31:63:06:a9:06:33:db:e1:52:c0:ef:40:
de:5d:61:1e:27:df:c8:7f:f4:a8:18:8b:3e:fa:f9:69:2a:54:
d0:a4:79:e8:1b:21:d7:50:be:98:ab:23:c5:2e:80:41:95:2c:
fa:2a:76:d5:84:ca:34:7a:68:ec:7c:ba:75:68:ed:5f:ac:65:
8b:ad:22:b7:4c:75:23:37:60:7c:2d:b6:83:81:48:41:f5:d1:
3e:52:d8:2c:81:bd:16:4f:8c:39:fb:c8:f5:56:db:0e:b8:8c:
43:52:d7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:36:03 2024 by rpki-client on console-fra.rpki-client.org