Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/ObtlGayrPGhbC0NJB3cANhdfN9g.roa
File: ObtlGayrPGhbC0NJB3cANhdfN9g.roa (raw, json)
Hash identifier: IXODRFBoDBQAcQ/y7+mqgK85yVkykmHrcIsLk/+rl+k=
Subject key identifier: 39:BB:65:19:AC:AB:3C:68:5B:0B:43:49:07:77:00:36:17:5F:37:D8
Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial: 019427482262717E385BCF5BB3EE4C68F8DB
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/ObtlGayrPGhbC0NJB3cANhdfN9g.roa
Signing time: Thu 02 Jan 2025 13:50:26 +0000
ROA not before: Thu 02 Jan 2025 13:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216231
IP address blocks: 37.32.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:22:62:71:7e:38:5b:cf:5b:b3:ee:4c:68:f8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Validity
Not Before: Jan 2 13:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39bb6519acab3c685b0b434907770036175f37d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:93:eb:c1:14:d8:5d:fa:e8:15:bb:3a:c1:
e6:63:0f:c1:67:08:25:9e:5a:64:73:99:76:99:67:
78:3e:55:c6:a3:7f:24:86:37:b6:03:16:46:d1:b3:
99:03:65:11:8e:03:3d:8b:c8:2e:47:3c:3c:d3:e4:
7b:10:21:2e:94:a0:c6:68:26:35:17:2f:f3:53:1c:
34:fa:de:29:82:77:67:fd:c8:55:f0:bb:08:2d:35:
11:fa:aa:ff:93:77:64:3f:ff:dd:e9:5a:b6:31:cd:
3d:16:67:e2:fc:95:ea:37:48:2f:50:98:f4:26:7f:
e9:9c:af:09:f6:d1:48:b2:7e:ed:34:5c:99:00:c6:
f6:b2:76:31:e1:21:92:f2:a4:e5:ef:38:e4:11:71:
07:10:91:ea:24:1c:78:57:da:79:c5:63:28:6e:d4:
73:17:d6:27:ed:b8:8c:0a:ee:e8:e9:1e:5c:dc:eb:
23:5c:3f:f3:94:d1:55:bf:5e:b2:c9:3b:aa:15:6c:
6d:59:0a:0c:bd:70:c3:54:2b:85:09:78:3e:2e:54:
64:92:ee:87:27:5c:47:3a:f2:d0:9a:79:88:94:f4:
96:79:2c:9e:c7:24:9d:65:94:c1:04:c8:96:14:a2:
e9:cc:c3:ae:15:60:57:11:3e:eb:0f:60:9b:d6:77:
50:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BB:65:19:AC:AB:3C:68:5B:0B:43:49:07:77:00:36:17:5F:37:D8
X509v3 Authority Key Identifier:
keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/ObtlGayrPGhbC0NJB3cANhdfN9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.76.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:04:29:5e:01:c0:ab:9d:d0:cd:f5:78:7a:85:11:37:2f:b1:
2a:95:3a:28:05:5a:1a:c6:b9:6f:7d:a8:0b:79:7c:14:32:b3:
c2:17:01:59:1f:17:cf:90:50:0a:38:c0:24:25:a2:9a:a2:06:
b6:c7:1b:f0:36:6f:04:b5:c8:d1:31:dd:1b:e3:50:d7:56:98:
5d:18:4e:5e:d4:74:63:a4:f9:16:57:1a:21:1d:01:8c:d7:72:
98:b8:e8:ae:7a:eb:9c:ad:5d:1f:70:50:45:47:76:1f:4f:ab:
74:f6:47:2c:01:c7:13:f2:2c:9c:d3:82:67:0f:2f:1b:be:59:
eb:18:da:48:f0:62:eb:c2:10:2f:e4:f2:68:17:48:aa:49:49:
46:20:35:53:9b:27:7e:94:c8:6e:a4:cd:00:29:2e:18:fa:c3:
0a:9a:98:46:44:a0:a5:98:03:52:d6:e5:5b:a7:79:8f:31:d6:
d2:eb:0c:45:d1:b4:52:e5:89:8a:a6:b3:15:8f:6e:98:47:a8:
c9:25:16:e3:44:85:d9:24:51:19:e8:0d:09:64:30:dd:eb:59:
fb:0f:56:58:68:05:6f:53:4b:b4:c4:82:17:26:43:33:af:92:
df:ce:cb:86:9e:2e:df:5a:22:30:a2:95:59:87:ed:9f:78:66:
2d:89:d1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:45 2025 by rpki-client