Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/I6ov3z-OG7CNLwf8_JG-ovBNYuY.roa
File: I6ov3z-OG7CNLwf8_JG-ovBNYuY.roa (raw, json)
Hash identifier: 7B1ROOgLqOc7X18IMg7qeXzSeHsw+yKu2exZIG5k1sk=
Subject key identifier: 23:AA:2F:DF:3F:8E:1B:B0:8D:2F:07:FC:FC:91:BE:A2:F0:4D:62:E6
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 018CC7933BC550A430AC139B5D953A550BEB
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/I6ov3z-OG7CNLwf8_JG-ovBNYuY.roa
Signing time: Tue 02 Jan 2024 00:29:24 +0000
ROA not before: Tue 02 Jan 2024 00:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43333
IP address blocks: 37.252.6.0/23 maxlen: 23
37.252.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:3b:c5:50:a4:30:ac:13:9b:5d:95:3a:55:0b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jan 2 00:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23aa2fdf3f8e1bb08d2f07fcfc91bea2f04d62e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ea:9e:fa:10:9a:89:2b:fa:1d:df:66:20:12:
4b:9f:74:d6:ab:a0:20:c9:77:75:dd:58:92:15:99:
ea:22:37:6f:cf:f4:fb:10:8c:f0:8c:45:16:05:34:
68:fe:a7:9a:46:a6:83:14:6e:63:93:da:6e:45:d3:
c5:1a:ce:f4:40:06:a1:5b:b3:47:bb:22:15:de:d8:
4d:50:94:f1:92:5f:bf:9c:9c:f0:c6:65:c6:4a:18:
76:39:e6:f7:fc:c1:34:06:27:0d:e1:7f:58:e0:4f:
cb:e3:14:ac:6a:21:25:45:0b:de:98:78:25:fc:b0:
5c:5e:f8:15:de:07:7b:65:18:39:0b:55:15:41:5a:
d8:39:e5:83:ce:52:11:81:ce:8f:8b:fc:da:e1:44:
10:a0:9d:6b:35:ac:63:69:cd:03:43:f0:11:6b:c6:
09:06:0e:20:11:45:0a:eb:69:42:87:16:f3:07:75:
29:98:10:a2:33:ee:d5:e7:57:fd:34:08:53:d7:0a:
28:a5:cb:e2:73:1b:79:2f:22:2e:88:de:3d:c5:08:
19:70:bd:f7:76:9e:e3:8b:45:c9:71:ca:a6:c6:c0:
7c:dd:69:ab:eb:92:45:13:0b:7f:e9:a7:44:a1:bb:
9c:7d:97:55:28:bb:6b:5a:b0:03:d3:58:0c:af:bf:
0b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AA:2F:DF:3F:8E:1B:B0:8D:2F:07:FC:FC:91:BE:A2:F0:4D:62:E6
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/I6ov3z-OG7CNLwf8_JG-ovBNYuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.6.0/23
37.252.10.0/23
Signature Algorithm: sha256WithRSAEncryption
39:f3:94:04:11:0a:a9:d4:ce:5d:42:a0:82:b2:8a:de:a2:e2:
1e:80:71:e5:60:62:b2:6c:8d:70:cb:57:b6:40:0e:84:54:16:
bc:30:66:08:c1:28:0e:04:bc:97:48:3a:7d:21:1a:25:8a:71:
a7:c9:5e:da:01:d7:75:db:6d:a1:83:db:1b:28:f1:e3:0d:3c:
aa:b0:7f:c7:8d:5f:ad:ff:61:12:a1:51:02:78:86:bd:76:a1:
f2:d1:eb:3c:72:cf:03:c8:32:5d:11:d8:e6:41:c7:79:7e:07:
c6:4a:11:10:53:8f:a1:55:b7:28:ea:2f:38:49:b2:83:5d:8c:
6b:24:4c:b9:f5:62:a4:75:5c:4a:40:39:e6:80:e0:91:8a:45:
67:1a:32:c8:a2:5d:70:99:c2:10:9f:41:c8:7e:c6:89:8f:7b:
3d:35:f4:5b:e3:8a:68:77:5c:b8:8f:4d:ff:63:cf:1a:12:7c:
90:6f:49:2e:d2:b7:66:20:64:c6:a0:0b:cd:ea:8d:be:fc:bb:
0a:0d:78:95:76:c7:3e:eb:d5:75:a5:7d:64:1c:3c:62:f4:6c:
27:a5:51:2a:7b:7d:74:e5:d4:d5:5c:b1:e5:e8:81:e0:31:b6:
2d:7c:7f:90:c0:13:3f:f9:9c:d1:80:ea:bb:5c:6a:76:b6:4c:
84:f0:63:e3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzHkzvFUKQwrBObXZU6VQvrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0
NGY0NDQwHhcNMjQwMTAyMDAyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2FhMmZkZjNmOGUxYmIwOGQyZjA3ZmNmYzkxYmVhMmYwNGQ2MmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOqe+hCaiSv6Hd9mIBJLn3TWq6Ag
yXd13ViSFZnqIjdvz/T7EIzwjEUWBTRo/qeaRqaDFG5jk9puRdPFGs70QAahW7NH
uyIV3thNUJTxkl+/nJzwxmXGShh2Oeb3/ME0BicN4X9Y4E/L4xSsaiElRQvemHgl
/LBcXvgV3gd7ZRg5C1UVQVrYOeWDzlIRgc6Pi/za4UQQoJ1rNaxjac0DQ/ARa8YJ
Bg4gEUUK62lChxbzB3UpmBCiM+7V51f9NAhT1woopcvicxt5LyIuiN49xQgZcL33
dp7ji0XJccqmxsB83Wmr65JFEwt/6adEobucfZdVKLtrWrAD01gMr78LmQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCOqL98/jhuwjS8H/PyRvqLwTWLmMB8GA1UdIwQY
MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt
ZWU0MzVkM2NkNTg1LzEvSTZvdjN6LU9HN0NOTHdmOF9KRy1vdkJOWXVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1
LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBJfwGAwQB
JfwKMA0GCSqGSIb3DQEBCwUAA4IBAQA585QEEQqp1M5dQqCCsoreouIegHHlYGKy
bI1wy1e2QA6EVBa8MGYIwSgOBLyXSDp9IRolinGnyV7aAdd1222hg9sbKPHjDTyq
sH/HjV+t/2ESoVECeIa9dqHy0es8cs8DyDJdEdjmQcd5fgfGShEQU4+hVbco6i84
SbKDXYxrJEy59WKkdVxKQDnmgOCRikVnGjLIol1wmcIQn0HIfsaJj3s9NfRb44po
d1y4j03/Y88aEnyQb0ku0rdmIGTGoAvN6o2+/LsKDXiVdsc+69V1pX1kHDxi9Gwn
pVEqe3105dTVXLHl6IHgMbYtfH+QwBM/+ZzRgOq7XGp2tkyE8GPj
-----END CERTIFICATE-----
Generated at Mon May 20 17:55:31 2024 by rpki-client on console-ams.rpki-client.org