Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/srvGKqSonIvrDELx-Ebt4NSCIuI.roa
File: srvGKqSonIvrDELx-Ebt4NSCIuI.roa (raw, json)
Hash identifier: FVEx6MCQh6JsLb0PNZKLpo3GiIMiOKq1dSsD14LIkGQ=
Subject key identifier: B2:BB:C6:2A:A4:A8:9C:8B:EB:0C:42:F1:F8:46:ED:E0:D4:82:22:E2
Certificate issuer: /CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Certificate serial: 018CC56ED2CDD73E0FF24342E68082631DB6
Authority key identifier: 37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/srvGKqSonIvrDELx-Ebt4NSCIuI.roa
Signing time: Mon 01 Jan 2024 14:30:23 +0000
ROA not before: Mon 01 Jan 2024 14:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206876
IP address blocks: 185.173.136.0/24 maxlen: 24
185.173.137.0/24 maxlen: 24
185.173.138.0/24 maxlen: 24
185.173.139.0/24 maxlen: 24
2a0b:5500::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:d2:cd:d7:3e:0f:f2:43:42:e6:80:82:63:1d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Validity
Not Before: Jan 1 14:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2bbc62aa4a89c8beb0c42f1f846ede0d48222e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:56:4e:59:f9:75:31:3e:7a:15:23:0b:ff:
7f:d5:d0:f9:fa:f5:c4:b3:1e:b3:d9:7b:73:c8:e7:
1a:b2:6b:3d:ca:6c:68:3e:8b:8f:e0:a0:17:e1:5b:
aa:42:5f:71:94:da:3e:cb:d5:c6:91:8e:d1:eb:0e:
15:3f:4d:6b:38:4a:62:a2:d5:30:e0:1b:a3:a9:a8:
52:6a:ad:05:ae:cd:51:f5:ad:a5:91:6a:a6:77:d4:
58:39:3f:28:7b:5a:53:10:33:03:d3:38:d1:af:87:
8e:3c:27:69:2c:76:99:81:bc:c0:d9:f9:7c:4c:5a:
3f:d0:83:91:d4:3b:2d:1d:55:f0:c4:8a:53:a9:3d:
34:69:02:21:32:60:e8:32:12:09:fc:9b:f4:c9:64:
31:a9:02:3e:e5:a8:6e:a8:3f:26:ec:05:47:71:bd:
a7:f4:18:c5:b8:c6:c5:9b:35:e4:aa:59:71:a7:4c:
cf:f7:80:1c:3c:25:ef:98:39:25:e9:e4:a8:07:f0:
0c:c6:bd:42:fd:14:f0:bd:cc:07:45:38:b5:4a:35:
2b:02:db:6f:0c:e9:a3:00:e7:22:27:dc:aa:29:b3:
d8:a6:6a:07:e2:55:63:65:a3:76:6a:ae:03:8c:da:
31:e0:8e:80:e5:92:56:32:81:5a:65:d3:74:b3:54:
e9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BB:C6:2A:A4:A8:9C:8B:EB:0C:42:F1:F8:46:ED:E0:D4:82:22:E2
X509v3 Authority Key Identifier:
keyid:37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/srvGKqSonIvrDELx-Ebt4NSCIuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.136.0/22
IPv6:
2a0b:5500::/29
Signature Algorithm: sha256WithRSAEncryption
79:6d:5a:4c:9c:f2:42:01:ab:75:cd:42:e1:9f:01:d2:f9:12:
38:18:9f:4d:a9:1d:42:08:50:2b:58:09:29:53:b3:d9:b8:a4:
73:fe:be:3c:cf:b3:da:ef:51:5d:18:f1:2c:af:8c:eb:d7:35:
8e:51:50:61:f7:8d:e3:22:a6:02:a9:4e:6f:3e:f6:71:c5:9d:
9e:e2:b2:71:bf:1c:8a:fe:41:9d:98:ae:75:68:3f:7f:97:68:
c1:d4:7d:5e:cc:e3:b9:72:94:20:e3:40:ef:e3:b8:02:2d:6e:
64:46:95:96:cf:0c:b3:70:da:97:b4:79:65:93:59:9a:24:a5:
6a:f9:d0:af:9d:eb:5d:29:10:17:dc:d7:13:2e:ad:d2:26:f6:
f0:27:e6:f0:66:05:32:6d:fa:95:13:24:16:96:bc:b8:19:3d:
19:fa:2b:30:29:1c:da:09:2e:e6:53:27:29:e2:84:90:36:c4:
a9:0b:87:90:a2:77:29:8f:b1:26:49:df:fb:02:a6:19:d6:8b:
22:d0:01:45:c9:ae:2d:f6:7c:94:45:86:be:80:92:a4:d8:f8:
98:05:e9:b1:77:53:ad:73:0c:80:31:34:4f:13:d4:dd:76:f5:
b3:81:e5:7f:b4:d6:e8:80:66:e0:9d:d8:e9:1b:3e:10:32:4d:
b2:30:07:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:03:34 2024 by rpki-client on console-fra.rpki-client.org