Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/9eJpBJ6pS1crkPmyWAA-7mjEimI.roa
File: 9eJpBJ6pS1crkPmyWAA-7mjEimI.roa (raw, json)
Hash identifier: CmgHtvz7HQ5sBx1xU5FnvI0eZy6ULURx1to3u6wdikc=
Subject key identifier: F5:E2:69:04:9E:A9:4B:57:2B:90:F9:B2:58:00:3E:EE:68:C4:8A:62
Certificate issuer: /CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Certificate serial: 018CCA2A2F565255D6D9E2EE283D5E16762C
Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/9eJpBJ6pS1crkPmyWAA-7mjEimI.roa
Signing time: Tue 02 Jan 2024 12:33:31 +0000
ROA not before: Tue 02 Jan 2024 12:33:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34529
IP address blocks: 37.34.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:2f:56:52:55:d6:d9:e2:ee:28:3d:5e:16:76:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Validity
Not Before: Jan 2 12:33:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5e269049ea94b572b90f9b258003eee68c48a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:72:4b:3b:29:79:6e:86:7c:17:05:38:8f:
d3:61:79:52:36:a9:bd:cb:90:3e:05:36:77:26:48:
8a:9d:5e:5e:f7:c8:56:d7:ca:f5:fa:63:6c:8c:cf:
8f:cb:0d:b4:1d:7e:09:f5:65:c3:b4:19:6f:e2:8c:
30:bb:53:d1:45:5c:4b:a4:20:fe:1a:43:74:54:65:
5e:bb:d7:30:ec:b4:c7:e7:b3:25:ee:02:45:c8:3a:
46:f4:7c:bb:70:ae:56:88:13:75:b1:81:82:e1:66:
a6:aa:db:5f:f6:e4:0f:26:6d:c3:27:d7:2c:44:c7:
0d:a5:69:9c:19:13:81:53:c7:9b:1d:9a:b8:43:e8:
e2:89:be:b4:8c:31:af:39:45:ed:b4:b5:ba:12:07:
3f:09:19:21:2e:fa:04:e6:9d:d0:7c:a4:0a:9e:d8:
36:21:bc:28:c0:62:8c:a9:e3:12:ef:f5:5b:a1:8b:
dc:7c:50:ab:d2:f3:53:2d:22:ca:3f:ea:15:5f:61:
36:58:fe:5b:e6:80:bd:44:dd:3e:c0:99:c2:3b:50:
b3:23:25:23:7e:f0:83:48:43:25:5a:64:4c:ee:70:
30:dc:61:63:df:6e:78:6a:57:e9:a0:fa:17:08:fb:
3b:76:12:ed:2f:0f:7c:48:85:c7:33:d5:1b:a3:63:
bb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E2:69:04:9E:A9:4B:57:2B:90:F9:B2:58:00:3E:EE:68:C4:8A:62
X509v3 Authority Key Identifier:
keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/9eJpBJ6pS1crkPmyWAA-7mjEimI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.34.104.0/24
Signature Algorithm: sha256WithRSAEncryption
85:72:6a:6a:47:31:34:a6:4c:d5:e3:ed:c9:c1:e9:3e:1b:3a:
d7:f7:8c:4f:1e:77:cc:e1:82:41:f0:e1:01:34:fe:ee:13:60:
7f:2a:1c:d4:84:86:f6:b1:9c:ed:d9:de:88:ee:89:83:bd:d5:
60:88:b7:37:81:4c:f2:b6:47:6f:a4:a2:6f:30:c3:63:db:53:
cf:b8:d3:c3:55:09:79:39:a7:91:eb:f1:93:26:c7:f6:1f:cf:
c9:6b:42:5d:59:d8:99:f4:61:7f:b8:ab:29:81:49:50:1b:72:
be:d9:ec:be:07:f6:e0:fc:ff:8b:a2:69:31:1e:92:dc:ca:6e:
ca:8a:75:b1:89:e2:d9:81:60:ce:a4:b7:fc:5a:a2:61:db:ae:
8a:24:f5:b2:d7:bf:10:6f:23:44:ff:1a:1d:19:15:f0:68:16:
4b:0c:24:57:87:ba:73:5b:0a:29:73:cb:cd:b3:fa:07:c0:a3:
2e:90:0a:1e:23:9d:89:83:51:e3:77:73:df:55:13:8f:a8:d1:
1a:ee:f3:f8:85:4e:6f:8c:86:f9:6a:c4:f8:b6:61:7b:8e:ef:
d5:77:e6:25:f5:37:61:86:8d:4a:a4:5a:32:26:fc:b0:41:6f:
55:b1:c3:75:a5:3a:c4:7f:d1:83:8e:9e:41:18:c8:9e:34:d2:
8a:55:4e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:02:24 2024 by rpki-client on console-fra.rpki-client.org