Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/vSk0i_RkoeTyDOSZg1X121OKAfk.roa
File: vSk0i_RkoeTyDOSZg1X121OKAfk.roa (raw, json)
Hash identifier: U9JHJYHSuPpN8VEoctHFVSYzif1R/T4R2B91ZsCsPVM=
Subject key identifier: BD:29:34:8B:F4:64:A1:E4:F2:0C:E4:99:83:55:F5:DB:53:8A:01:F9
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 018DF4A286AB6804EEA9C443FC2B36031F6E
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/vSk0i_RkoeTyDOSZg1X121OKAfk.roa
Signing time: Thu 29 Feb 2024 11:31:48 +0000
ROA not before: Thu 29 Feb 2024 11:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210892
IP address blocks: 37.44.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f4:a2:86:ab:68:04:ee:a9:c4:43:fc:2b:36:03:1f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Feb 29 11:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd29348bf464a1e4f20ce4998355f5db538a01f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ea:e3:86:ef:a6:91:8b:ee:46:86:d1:97:19:
df:8b:a1:32:57:71:ff:e0:28:ef:e5:e1:be:7b:a0:
11:38:90:92:7a:d6:de:00:9a:c4:75:3a:f3:1d:db:
86:de:ab:21:3f:28:54:4c:0d:90:79:5b:f3:05:25:
2d:9a:b3:ad:3e:53:49:c3:c3:b4:59:c9:8d:15:3b:
ef:0c:b9:56:cb:f9:e4:31:a6:c0:73:1c:90:0f:60:
fd:f7:bd:c2:e2:ab:86:0d:43:8f:d7:6f:44:ff:a8:
0b:f0:53:8d:8e:b3:2f:f8:09:fd:be:3e:d1:55:89:
28:97:51:d9:ae:3c:d0:65:d9:d0:c1:d9:de:67:02:
9a:0e:6a:b0:55:9f:7a:d0:4c:62:f1:61:38:55:3c:
4a:60:54:eb:08:b4:27:a8:77:98:47:86:e4:99:86:
93:75:bc:48:fd:b0:2d:ef:8a:7d:a4:a8:4e:3a:d0:
ff:34:07:60:cc:c0:a8:17:be:ac:5d:83:08:d2:8d:
dd:3b:94:e5:d9:42:58:d2:95:7f:42:de:d3:fc:67:
80:8a:42:b9:67:27:17:4a:f5:28:bb:5d:8f:c4:83:
df:e8:d7:c2:a9:6d:ee:04:fc:47:4b:b8:96:4a:19:
b6:06:49:39:ab:ff:e8:a3:80:0b:c6:26:91:b3:ed:
0d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:29:34:8B:F4:64:A1:E4:F2:0C:E4:99:83:55:F5:DB:53:8A:01:F9
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/vSk0i_RkoeTyDOSZg1X121OKAfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.228.0/22
Signature Algorithm: sha256WithRSAEncryption
21:64:52:22:1e:f8:b6:22:83:c0:4a:18:20:c6:78:a7:9b:fb:
96:83:4e:56:53:50:2c:6b:50:7c:26:8a:92:10:09:a4:9e:76:
6f:45:e4:cd:77:f1:1b:71:6c:34:7d:f4:d7:66:50:d4:31:0c:
98:06:0e:2f:f8:da:f9:0a:18:2f:bf:82:a5:88:3a:2e:4f:7d:
8d:4d:8e:1b:3d:85:76:88:fb:ee:01:51:f3:dd:60:bb:06:aa:
49:02:a6:83:3c:4a:e7:eb:82:64:82:49:35:c9:73:1e:0a:d7:
f1:2f:35:75:ad:7c:6f:58:7f:0c:07:11:11:68:04:75:c5:2a:
42:b2:f4:ba:4e:48:94:b5:b0:6a:e0:4b:48:d0:4d:cb:6e:00:
c6:4a:30:a6:da:ed:91:f1:f2:6e:9a:ec:4d:0e:05:b7:d9:2e:
fc:a9:92:0f:cc:72:c1:d0:25:1d:c5:9b:42:af:bb:ee:0b:2e:
13:bc:34:ae:20:77:c3:1b:bd:68:15:11:d9:23:ef:78:d7:61:
46:18:f1:06:00:92:66:93:8c:28:b0:fc:13:4a:8d:ca:ee:c2:
27:ec:c0:05:34:1a:26:2e:47:32:e2:15:37:a1:f9:9f:fe:cc:
71:11:9a:41:11:33:80:8f:48:37:3b:2c:6c:2f:ed:60:f8:ac:
ef:2c:c7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:39:31 2024 by rpki-client on console-ams.rpki-client.org