Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/6o0GW26vhMPpqQ44v_5x_53g-Ck.roa
File: 6o0GW26vhMPpqQ44v_5x_53g-Ck.roa (raw, json)
Hash identifier: VsSkENRhyo39ohqu2R81EBr+YB/0B3Inj+au2BbIRA8=
Subject key identifier: EA:8D:06:5B:6E:AF:84:C3:E9:A9:0E:38:BF:FE:71:FF:9D:E0:F8:29
Certificate issuer: /CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Certificate serial: 0190259BEE7EE8E7441AA8D5EDD28F36AEA6
Authority key identifier: 37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/6o0GW26vhMPpqQ44v_5x_53g-Ck.roa
Signing time: Mon 17 Jun 2024 09:51:34 +0000
ROA not before: Mon 17 Jun 2024 09:51:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49173
IP address blocks: 37.26.252.0/22 maxlen: 24
185.6.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:25:9b:ee:7e:e8:e7:44:1a:a8:d5:ed:d2:8f:36:ae:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Validity
Not Before: Jun 17 09:51:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea8d065b6eaf84c3e9a90e38bffe71ff9de0f829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:51:1d:f0:07:06:cb:73:35:b2:5c:32:5f:19:
ea:ed:e0:d4:c0:17:4b:ba:6e:e8:e8:fa:af:a7:14:
22:be:2b:60:1e:43:06:7e:91:90:06:c3:04:81:36:
89:99:19:18:dd:b8:a4:37:1f:d5:6a:ef:c3:39:40:
59:f6:f2:6f:26:fd:dd:6c:f5:8c:5d:e3:0e:18:7c:
12:aa:e6:73:cc:07:9c:9b:91:6f:d2:76:1e:0b:19:
8a:4e:ab:c4:0f:4f:5f:38:c5:4e:27:b1:b0:ef:cd:
0a:7f:6c:b5:01:f7:73:59:4c:d1:ad:02:14:a3:13:
95:77:40:40:a8:01:b0:86:55:91:59:21:a3:a8:d6:
28:d0:d8:83:6c:ac:d3:c6:4d:73:14:88:03:ab:6b:
f6:27:ca:88:d6:fa:e5:5f:bf:54:29:db:48:e6:22:
9c:6a:6b:df:e7:18:3a:03:33:0b:10:ae:ad:94:b8:
ef:95:79:d6:d6:8a:53:24:bd:94:94:5e:31:ac:09:
fe:02:ac:c6:3e:09:bf:93:2d:83:90:02:66:da:42:
92:15:bf:81:a2:c9:42:ef:b5:87:5e:00:da:4e:82:
49:cc:a4:a5:2d:6c:a9:bf:17:34:b9:7c:3f:a6:f4:
ad:15:cd:c1:b3:79:60:c3:02:ac:50:91:75:3f:4e:
03:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8D:06:5B:6E:AF:84:C3:E9:A9:0E:38:BF:FE:71:FF:9D:E0:F8:29
X509v3 Authority Key Identifier:
keyid:37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/6o0GW26vhMPpqQ44v_5x_53g-Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.252.0/22
185.6.32.0/22
Signature Algorithm: sha256WithRSAEncryption
20:1b:0a:65:e9:73:19:4c:d5:f5:00:9f:d4:43:e7:c1:f9:5d:
19:81:83:2e:1c:3f:ac:60:c2:a6:04:39:b4:63:f5:33:be:b9:
2b:d3:72:60:cc:01:94:3e:78:4c:5d:db:29:a7:91:ef:7a:4c:
51:f2:42:a8:28:05:96:3c:cf:f2:a6:67:1e:4a:64:a9:d1:3e:
b1:e9:ba:27:9b:0c:f4:d8:05:6b:2b:8c:d2:a1:6f:b7:2e:ab:
4b:a7:df:05:bc:5e:b3:85:0a:d6:8a:fc:db:65:47:b8:82:da:
bf:92:4c:17:23:00:11:10:42:27:4d:b5:b0:ec:8d:53:50:99:
cc:9e:33:69:65:22:dd:50:dd:99:d1:87:9f:e9:04:b1:d6:f1:
44:bd:89:82:0c:1f:19:a3:57:35:18:0a:f5:0b:13:10:4c:fa:
ba:ce:2a:13:07:79:d9:be:d0:1c:8b:82:31:6f:c3:10:67:10:
e9:18:20:11:60:86:fb:85:98:66:c3:35:77:a7:b9:36:f3:09:
8d:52:d9:f0:cb:14:94:9e:c5:3d:8d:94:c6:6e:40:bf:0e:2d:
18:fc:a6:e3:cf:40:30:48:48:c2:2c:fd:37:91:7a:9c:5c:0a:
2f:64:66:ca:ff:df:e5:be:a2:60:5d:3f:d9:a9:c1:ea:72:8d:
31:b0:44:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 11:38:16 2024 by rpki-client on console-ams.rpki-client.org