Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/xBYMGrty3FkS3a_5GEFT-tn6cC8.roa
File: xBYMGrty3FkS3a_5GEFT-tn6cC8.roa (raw, json)
Hash identifier: WoEIXROURY3HZgmxO8WuE8QNmla09r+7Bc9aSCqISr0=
Subject key identifier: C4:16:0C:1A:BB:72:DC:59:12:DD:AF:F9:18:41:53:FA:D9:FA:70:2F
Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial: 018CCA2BC5E63A2AE0434BC1068B4EC01018
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/xBYMGrty3FkS3a_5GEFT-tn6cC8.roa
Signing time: Tue 02 Jan 2024 12:35:15 +0000
ROA not before: Tue 02 Jan 2024 12:35:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212477
IP address blocks: 37.16.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:c5:e6:3a:2a:e0:43:4b:c1:06:8b:4e:c0:10:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Validity
Not Before: Jan 2 12:35:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4160c1abb72dc5912ddaff9184153fad9fa702f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:77:fb:fe:9b:ce:ea:23:09:c8:6c:08:da:57:
7b:46:25:90:a5:ef:f6:e7:e9:fa:62:bc:95:1c:7e:
f7:08:75:7d:28:47:63:19:22:aa:c0:66:d8:0f:e5:
e9:77:ef:8b:b5:ff:2a:e0:ad:cf:b2:a9:e9:b2:89:
4e:e1:32:35:5b:f5:45:55:be:cd:88:e8:57:64:c6:
dd:38:f4:80:2f:26:47:d5:dd:48:52:3f:ef:40:63:
ef:c4:6b:0c:47:ab:48:08:c8:b9:31:9e:ee:1e:bb:
26:11:ed:dd:c1:a9:ed:38:67:4a:e8:e2:6b:e2:e8:
66:b4:d5:ab:dc:6e:e5:e2:41:ab:f6:26:cb:d2:e7:
e7:36:62:a2:f5:87:9f:3d:20:88:c2:67:31:08:2e:
47:65:85:a2:a9:11:81:a7:1b:43:24:c4:f2:9a:b4:
dd:ca:f6:f4:c7:7c:31:0c:da:09:02:82:ca:74:c4:
c4:ef:6b:ad:28:40:e2:6e:73:c0:8f:73:fc:23:d0:
c8:5d:38:26:82:5f:4a:1d:02:15:47:a7:f3:4a:31:
55:65:6e:c3:0d:07:43:6d:2e:cc:fa:97:8a:d0:03:
04:81:9d:7f:3b:78:c2:d4:d1:04:68:59:99:68:4d:
f0:b2:2b:03:53:22:60:af:1f:cd:aa:9b:e3:0b:32:
ea:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:16:0C:1A:BB:72:DC:59:12:DD:AF:F9:18:41:53:FA:D9:FA:70:2F
X509v3 Authority Key Identifier:
keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/xBYMGrty3FkS3a_5GEFT-tn6cC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.74.0/24
Signature Algorithm: sha256WithRSAEncryption
99:68:75:9e:98:54:e0:40:a4:58:b3:d8:44:91:a2:00:07:c9:
77:ed:09:a9:5c:6f:a3:7c:29:e8:36:20:e5:32:8a:5b:4e:c6:
49:ce:65:cb:d9:6c:a5:36:16:dc:a2:73:97:69:8b:a3:ee:9b:
ec:d1:c4:a9:61:c0:9f:c1:d8:84:f2:66:6b:67:a5:7e:04:5d:
46:06:8e:ce:13:68:3b:e0:91:5a:dc:ee:d6:4e:62:f7:a6:50:
4a:fb:e7:01:a9:7c:17:7d:68:7c:a1:86:07:d3:22:0d:90:51:
0c:d0:1e:e4:d0:ca:fc:17:1b:01:cf:0c:90:86:c8:dc:ba:2b:
6a:41:d5:36:ad:f4:0f:61:06:ba:b6:e0:62:b0:60:b5:cc:6c:
2d:31:ee:22:a1:7f:0b:0c:ff:e2:54:2b:5a:6e:90:8d:b9:ff:
84:94:2b:1c:9e:de:bb:8a:81:2b:e1:f8:34:29:1b:9e:3f:31:
58:5d:13:e9:3b:02:76:8d:31:f9:5d:f9:b9:38:f1:6c:7b:5d:
c5:dc:f5:8d:4f:9f:b7:6c:fd:93:be:95:9a:06:21:a0:f7:0d:
20:9b:24:9e:cb:48:3a:a3:0e:ef:94:5a:9b:6e:7e:b5:ab:28:
4b:b9:70:d4:ed:44:5d:5b:3a:81:53:7f:9a:37:8c:05:63:eb:
1f:89:b1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:06:17 2024 by rpki-client on console-ams.rpki-client.org