Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/gY3e8AyvbFhlJMtpI-aOOzz8b4A.roa
File: gY3e8AyvbFhlJMtpI-aOOzz8b4A.roa (raw, json)
Hash identifier: Ml+aWzL0rZFKEiGOy8b6RWBQdyVACK0CU4TMGDAm+Q4=
Subject key identifier: 81:8D:DE:F0:0C:AF:6C:58:65:24:CB:69:23:E6:8E:3B:3C:FC:6F:80
Certificate issuer: /CN=d44de659759b0274124a7b481d0976840b7ade06
Certificate serial: 018CC9BC4F1CBE775A6063E05C31DA65C4A9
Authority key identifier: D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/gY3e8AyvbFhlJMtpI-aOOzz8b4A.roa
Signing time: Tue 02 Jan 2024 10:33:30 +0000
ROA not before: Tue 02 Jan 2024 10:33:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39211
IP address blocks: 37.143.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:4f:1c:be:77:5a:60:63:e0:5c:31:da:65:c4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44de659759b0274124a7b481d0976840b7ade06
Validity
Not Before: Jan 2 10:33:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=818ddef00caf6c586524cb6923e68e3b3cfc6f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:30:a9:ff:dd:54:16:d9:03:af:95:a4:7b:
da:ce:c4:f5:96:40:d8:4c:1d:1e:95:82:c1:1c:1c:
03:91:14:59:30:63:1f:a4:5e:da:1f:dc:a8:9b:7e:
0f:60:d0:b7:2b:02:ae:ef:dc:55:a4:7e:47:b6:d0:
90:5b:d6:46:24:1b:8c:06:3d:00:47:ad:04:d2:1a:
57:87:19:98:b2:65:03:9b:ae:44:f3:f9:0e:fe:99:
1f:df:8c:b7:a4:51:b0:3c:f6:f9:39:ab:7d:21:b0:
23:a1:af:db:95:9a:4c:68:b6:b6:10:42:b7:36:e5:
a5:c4:21:bf:12:92:53:8c:07:bc:b8:db:10:a0:c1:
09:5b:f8:60:bb:86:11:96:e0:7b:1a:db:2c:4f:ba:
21:7c:f5:28:36:81:be:e5:a9:70:e3:46:bc:75:c8:
78:ea:27:56:9c:7e:b9:4a:1c:b7:42:14:57:4d:fa:
f7:69:cd:b2:2a:0b:95:d0:be:c3:d1:2a:6c:1c:65:
ca:12:76:db:49:cb:1a:72:c9:25:30:b0:2d:10:71:
44:fd:c5:ce:3e:38:32:0b:d4:88:e8:47:59:40:9e:
dd:f3:91:35:43:88:60:1d:eb:e9:c7:f0:0c:58:d2:
b7:d3:20:76:d7:fb:84:29:ae:14:99:2e:ae:94:e0:
c3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8D:DE:F0:0C:AF:6C:58:65:24:CB:69:23:E6:8E:3B:3C:FC:6F:80
X509v3 Authority Key Identifier:
keyid:D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/gY3e8AyvbFhlJMtpI-aOOzz8b4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.174.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:78:06:b2:69:e4:2a:2c:54:2d:72:ff:bb:a9:8c:91:07:09:
30:cd:16:32:9f:05:53:00:83:5a:bb:1c:90:74:8a:17:ec:df:
6a:85:f7:7e:8f:3a:d5:15:90:ed:a8:7d:c7:10:a7:11:2e:62:
85:8d:5e:2a:9d:48:5c:16:be:04:2e:8e:63:37:0c:d6:8d:e1:
2f:ee:ad:3b:b6:97:26:ab:6c:53:11:bd:9a:12:b7:32:07:c5:
e7:5c:fa:30:20:0e:1b:2a:c2:c3:0a:32:fe:83:6c:19:27:68:
43:f4:e5:07:c9:0d:e6:3c:d0:ae:e2:da:e6:c9:fa:e2:ff:6d:
09:d9:9e:1b:b4:76:ce:89:08:27:74:42:13:e9:eb:55:7c:44:
20:b2:66:2f:38:ec:5f:69:ad:b0:dc:12:03:ae:86:86:ba:c5:
6e:4a:29:63:d6:e6:9f:0e:8e:5d:76:4c:bf:b9:53:c6:1f:a0:
24:bb:c0:bb:69:fa:34:62:a4:35:f9:8d:a1:b2:73:e0:7f:98:
12:0e:d8:98:62:e5:ba:fe:97:45:f5:1a:ef:ee:ba:63:aa:15:
6e:00:c1:29:0a:82:dd:59:30:ec:be:17:e7:45:30:cc:6f:b1:
24:83:64:d3:1c:f5:d4:73:1d:77:5f:06:12:74:8c:27:43:a9:
79:87:fd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:19:47 2024 by rpki-client on console-ams.rpki-client.org