Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1di0SHoAl2So5qpWSQx5lv_aE8Q.roa
File: 1di0SHoAl2So5qpWSQx5lv_aE8Q.roa (raw, json)
Hash identifier: O9M0JVoOzlE04yGK0Z8G0D0nabgqZhVoWHJNLliVBos=
Subject key identifier: D5:D8:B4:48:7A:00:97:64:A8:E6:AA:56:49:0C:79:96:FF:DA:13:C4
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018CC348BFAF96E64D62FA9ED88CDFB7A2F7
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1di0SHoAl2So5qpWSQx5lv_aE8Q.roa
Signing time: Mon 01 Jan 2024 04:29:33 +0000
ROA not before: Mon 01 Jan 2024 04:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212609
IP address blocks: 46.37.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:bf:af:96:e6:4d:62:fa:9e:d8:8c:df:b7:a2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 04:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5d8b4487a009764a8e6aa56490c7996ffda13c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:05:cb:b6:db:dd:ad:34:44:b0:f1:8a:0a:
e7:0f:bf:47:66:70:f9:ab:a7:66:9c:e3:f0:4b:ad:
e8:3e:35:81:0f:04:df:0f:3f:9a:20:07:22:8e:fc:
20:48:e8:a1:9c:39:21:fa:05:4a:98:04:fe:e0:42:
33:04:3f:e2:29:58:be:c4:41:ac:e4:d2:79:cb:bc:
40:88:0c:80:af:81:dd:1b:ef:4d:a0:aa:24:e6:2c:
68:f0:6a:57:64:ee:85:d9:92:67:5c:8c:8d:ce:ad:
b7:18:77:88:15:da:1d:6b:ef:dd:17:6e:36:7a:fe:
f3:0a:ab:bc:c1:d9:f3:51:da:48:8e:4e:54:e7:35:
cf:eb:75:f2:5c:d0:a2:72:64:25:97:87:30:f3:25:
a2:fc:e8:f9:64:44:8b:05:eb:50:c9:b9:e9:36:db:
37:15:20:3f:eb:74:89:86:32:25:29:b0:49:bd:e4:
ad:64:b7:87:f0:f5:d3:3f:01:db:96:73:15:aa:c4:
e0:74:12:ef:61:d4:59:7a:23:03:6d:b1:e7:03:81:
8a:2d:14:d0:bd:3d:db:e2:fe:4d:24:d0:fb:8b:54:
21:62:0b:73:4c:73:da:f1:9d:f0:0e:7d:ac:c1:fa:
ed:dd:2b:c0:44:d1:a6:5d:22:f1:bc:ea:59:23:70:
41:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D8:B4:48:7A:00:97:64:A8:E6:AA:56:49:0C:79:96:FF:DA:13:C4
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1di0SHoAl2So5qpWSQx5lv_aE8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.114.0/24
Signature Algorithm: sha256WithRSAEncryption
47:1e:2a:7d:7a:a2:2e:0f:52:ac:de:90:b6:7e:93:e4:d2:bb:
d4:09:4c:a7:79:09:44:f0:ee:7b:e2:51:d5:c2:11:b1:21:91:
db:30:64:fd:4f:88:ac:0c:ed:fb:84:73:aa:0d:6b:e2:cd:e4:
9a:38:20:71:af:e7:d7:ce:a0:29:5e:d7:04:9f:74:84:0f:c2:
02:72:4e:8f:db:8a:91:e1:65:fe:c6:b2:9e:df:0a:fe:9a:dc:
d0:22:6b:e6:4f:5d:17:51:33:02:f7:7a:84:42:e2:a2:25:f7:
99:1a:c4:13:2c:bb:7c:25:31:b9:6b:df:28:ea:f2:24:61:4e:
aa:57:0c:78:2e:5c:04:4c:e8:e1:64:1a:30:ac:8f:d8:61:cb:
5a:e0:42:ae:de:a3:73:30:70:e0:d1:69:85:e4:6d:dd:82:cb:
14:3f:ba:52:9a:51:b7:38:d8:5b:3c:55:d8:0a:48:dd:cd:6b:
e5:16:e4:8c:df:13:96:4c:f8:cd:43:f0:a3:1e:d8:3c:22:80:
5e:46:0c:87:f0:96:21:4f:00:69:c1:8c:c5:53:c0:38:68:17:
9e:30:de:e6:45:c4:39:19:f7:76:5d:30:0b:0b:41:7e:3e:35:
a7:86:55:f4:21:cc:8a:58:2e:c9:e0:00:34:81:01:34:43:c4:
a9:af:a2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 18:25:17 2024 by rpki-client on console-fra.rpki-client.org