Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_jloQRzTTAZKkDgoYPFHJKkK6-I.roa
File: _jloQRzTTAZKkDgoYPFHJKkK6-I.roa (raw, json)
Hash identifier: XAwMYXTmP2VdGJNn1rEuJvEpquAUfX0z6BqorDW3xYM=
Subject key identifier: FE:39:68:41:1C:D3:4C:06:4A:90:38:28:60:F1:47:24:A9:0A:EB:E2
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CC56E0E808493EBFB684A134C162F7FCA
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_jloQRzTTAZKkDgoYPFHJKkK6-I.roa
Signing time: Mon 01 Jan 2024 14:29:33 +0000
ROA not before: Mon 01 Jan 2024 14:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203196
IP address blocks: 37.139.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0e:80:84:93:eb:fb:68:4a:13:4c:16:2f:7f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 14:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe3968411cd34c064a90382860f14724a90aebe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:65:38:f1:e4:1d:42:0b:24:87:59:08:39:2f:
36:71:36:4d:b9:ea:93:cf:51:49:43:67:94:c4:b9:
83:7d:69:72:58:12:30:e4:80:d5:11:a1:59:ed:6c:
96:9e:73:4d:b6:19:df:e2:cc:15:57:44:fa:87:d6:
5f:4c:ab:c7:a6:09:02:ff:d1:d9:fb:0f:fc:fa:81:
6e:04:f0:21:db:4b:8c:91:82:85:43:58:0d:eb:7a:
24:39:99:58:75:34:c9:6b:51:db:60:4e:79:c7:34:
aa:e8:b7:55:0d:52:10:fd:5c:10:60:45:33:f9:79:
7c:7d:99:80:ac:ee:0a:61:e7:89:99:91:94:3c:8b:
8e:a0:75:86:f7:92:8d:83:fa:9c:cc:04:2c:b9:18:
aa:e6:84:d7:03:8f:85:d6:81:95:07:ac:ab:d4:30:
e4:64:b9:82:d3:e7:c1:e2:ed:f6:50:97:9d:24:b9:
ca:5b:72:bb:0b:63:80:3f:33:19:3b:b4:d9:15:ca:
fc:05:b9:44:f2:58:cb:45:7c:b3:63:77:20:fa:72:
9b:75:d6:b9:fb:a6:79:fd:cc:21:cc:b3:41:5f:78:
e2:d1:06:48:68:78:92:5a:0a:4e:c8:28:98:66:c3:
35:b5:36:94:69:83:9d:f9:21:06:5e:bb:d2:2e:ee:
3e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:39:68:41:1C:D3:4C:06:4A:90:38:28:60:F1:47:24:A9:0A:EB:E2
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_jloQRzTTAZKkDgoYPFHJKkK6-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.38.0/24
Signature Algorithm: sha256WithRSAEncryption
45:9c:59:f0:c0:6f:d6:ef:5e:8d:a7:a9:df:3f:8b:7c:8d:a9:
21:b6:49:2a:51:af:79:d3:52:d5:df:73:94:a9:e2:7e:66:d5:
91:63:de:08:9b:7f:c3:ea:73:38:1d:60:9c:86:cd:ac:f5:09:
7d:e1:2a:df:9f:0d:3b:e5:c1:42:54:9f:4b:b0:af:54:2a:1f:
24:52:ef:2c:54:ab:2b:f0:8f:c8:41:17:ef:8e:df:77:26:93:
1d:cb:78:d2:52:84:83:a2:53:46:b5:8b:4b:0f:4b:0b:3d:7e:
6c:39:05:cb:c5:8e:9a:87:2e:c1:f8:bd:c6:ae:fe:19:ae:ec:
84:e7:53:6f:23:fd:88:3e:b3:ea:39:7e:c1:eb:bb:d2:28:5e:
f5:9d:75:e5:e3:28:7b:e1:32:80:7c:1e:40:83:33:8c:26:3a:
68:78:da:cb:39:14:35:44:2d:af:ca:83:8b:e2:da:3b:ab:8d:
ab:1e:93:b4:b5:0c:c4:9e:6f:e8:25:ff:dd:de:b6:d9:fe:9a:
20:ef:ac:28:3b:be:d0:93:d7:ce:4b:3c:3d:ad:34:6b:b2:d8:
0c:5d:46:d4:f0:2e:21:9e:b5:b8:6b:2b:68:e9:3e:cb:b4:fd:
c5:05:62:e0:42:60:c3:f7:a4:8c:15:38:ab:98:7d:e3:68:ed:
80:c4:07:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 20:35:36 2024 by rpki-client on console-ams.rpki-client.org