Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/iJgJ4Es3F8Np7FPP0fqP5NwuzOw.roa
File: iJgJ4Es3F8Np7FPP0fqP5NwuzOw.roa (raw, json)
Hash identifier: gys7kvLj1D/72MU9cKBvrgaIeumcKqxsWfjOTzA7BiQ=
Subject key identifier: 88:98:09:E0:4B:37:17:C3:69:EC:53:CF:D1:FA:8F:E4:DC:2E:CC:EC
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 018CC7933D35FB48123066149FF20CFEC422
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/iJgJ4Es3F8Np7FPP0fqP5NwuzOw.roa
Signing time: Tue 02 Jan 2024 00:29:24 +0000
ROA not before: Tue 02 Jan 2024 00:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59627
IP address blocks: 37.252.2.0/24 maxlen: 24
37.252.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:3d:35:fb:48:12:30:66:14:9f:f2:0c:fe:c4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jan 2 00:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=889809e04b3717c369ec53cfd1fa8fe4dc2eccec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:37:7b:49:c6:7a:46:03:97:5a:06:fb:11:
83:cf:43:12:bc:d7:c0:ad:9b:2b:07:e7:cf:fb:42:
3d:1e:c5:00:b7:10:c3:d5:38:df:6a:b6:8c:ef:be:
8f:0b:40:b5:46:7b:36:b7:e7:aa:c5:14:60:bb:24:
a4:70:b0:5d:a1:16:6e:0d:cf:09:36:5c:93:f9:ac:
02:84:47:8f:e2:bf:16:36:d1:30:30:eb:c5:c7:c9:
4a:f4:c0:d1:3e:e0:4c:12:0e:e5:c7:23:79:5f:70:
95:d2:2e:e8:50:c7:ad:7c:95:47:e6:81:94:39:3a:
cf:3e:ce:d8:ad:a9:7a:17:44:da:d5:d8:e2:4a:b6:
30:57:6a:d8:f4:0c:ac:4e:89:dc:2d:4f:8a:f6:43:
b7:20:3f:26:63:67:e7:82:21:06:6f:14:7e:f9:78:
79:29:c4:ea:f7:ae:23:c6:be:26:d6:c4:40:70:fa:
fa:6e:42:4f:f8:de:22:59:bf:93:2a:ea:cf:de:1d:
f9:79:03:6b:4a:f9:c1:c8:58:c6:06:41:79:38:ad:
2f:97:44:b3:e2:41:84:ab:a0:78:b8:13:14:5c:71:
e4:1d:75:4e:2b:81:d0:2b:4c:07:85:ba:11:b2:dd:
23:14:ef:22:11:8b:ec:41:26:fc:75:c2:83:24:21:
4d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:98:09:E0:4B:37:17:C3:69:EC:53:CF:D1:FA:8F:E4:DC:2E:CC:EC
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/iJgJ4Es3F8Np7FPP0fqP5NwuzOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.2.0/24
37.252.12.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:44:af:8c:f6:22:e2:4c:ba:6c:c7:46:81:5f:e6:d7:c1:19:
ac:55:66:1c:02:14:84:d6:36:54:e0:67:b2:c2:53:ab:c5:e3:
a1:b5:2d:8d:6c:2c:c8:aa:4a:bc:78:de:d0:fa:82:ca:22:6d:
3a:bb:f6:67:43:00:35:b1:c9:3d:91:23:7d:c0:a0:00:2f:56:
b5:ca:72:e2:c9:66:07:0d:c8:a5:b7:1e:21:45:f8:65:d8:2e:
c5:92:80:74:d4:ef:95:7e:38:e8:d9:77:08:c7:30:b2:7f:84:
75:f3:e1:2d:6a:80:19:d1:f4:7a:81:50:0a:b0:0a:82:c0:4a:
80:8e:c3:9e:a4:90:80:fb:84:31:5d:bd:92:fa:fb:98:69:8e:
29:86:29:53:47:f3:54:35:47:a0:4d:22:9f:36:a3:3f:b9:4c:
aa:6e:08:24:f0:ff:15:20:e7:5e:eb:40:c7:fe:f1:5a:3a:a7:
e0:36:82:55:fe:aa:10:db:2e:5d:c0:69:ed:2f:af:f8:f7:02:
9c:ce:ee:21:e6:04:f4:ae:cf:a7:15:81:77:74:49:c1:77:51:
5e:bb:6e:1b:f5:36:70:59:c6:e9:27:5b:2b:16:4a:04:1e:db:
e2:e3:8a:ea:a6:86:c2:6b:46:26:1b:6d:2a:31:45:12:b9:6d:
24:8d:00:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:55:31 2024 by rpki-client on console-ams.rpki-client.org