Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/9MFhRH7FoTNK3XVSO_eOnSAHOG0.roa
File: 9MFhRH7FoTNK3XVSO_eOnSAHOG0.roa (raw, json)
Hash identifier: MSXxXDgf7+HZAMPJdj72hvvRR1x6qCkH3yk3g7TCLK8=
Subject key identifier: F4:C1:61:44:7E:C5:A1:33:4A:DD:75:52:3B:F7:8E:9D:20:07:38:6D
Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Certificate serial: 018CC26D3B5B51FF53A4DC7DC4ADCE52AC70
Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/9MFhRH7FoTNK3XVSO_eOnSAHOG0.roa
Signing time: Mon 01 Jan 2024 00:29:47 +0000
ROA not before: Mon 01 Jan 2024 00:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 37.77.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:3b:5b:51:ff:53:a4:dc:7d:c4:ad:ce:52:ac:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Validity
Not Before: Jan 1 00:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4c161447ec5a1334add75523bf78e9d2007386d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a3:6a:b0:2d:5c:c1:d4:9a:ed:97:e5:48:bf:
aa:58:cc:5c:b1:4e:31:e5:95:cf:36:c0:27:bd:0f:
1f:da:aa:6d:85:59:b3:f6:25:9c:9d:7c:7b:90:35:
da:c0:9f:9a:8f:14:1e:44:6b:77:0e:ad:5f:a8:2e:
e1:5f:90:42:44:20:fe:57:a0:ed:ca:fe:40:16:62:
4b:47:91:b5:cf:64:91:a4:7b:45:00:09:b4:ab:76:
6f:00:bc:ff:4e:4b:1d:34:49:f7:94:4d:bc:4a:fc:
04:1e:fe:a2:95:b8:aa:70:e1:d3:cc:54:35:8e:51:
40:26:0f:ce:5a:d8:02:3c:bc:1b:66:d1:16:a3:02:
e4:96:0d:20:d6:9b:7b:71:d9:f0:4c:4f:6d:09:90:
6b:19:23:e1:70:d4:f0:41:0d:6b:3e:ee:ca:81:b0:
0c:b4:0b:40:99:85:41:6d:a7:a3:cd:1f:a0:26:02:
fa:46:c6:7c:bb:81:19:d7:16:8a:fa:b6:2d:9d:7e:
81:58:82:f6:cf:31:09:80:dc:50:00:df:93:c4:29:
58:71:9d:78:7a:f2:63:54:71:62:01:86:32:0c:b1:
b6:fc:1b:fe:a4:27:e1:37:22:02:06:62:30:5f:fd:
07:88:d3:b9:67:08:28:ae:88:c5:d8:d7:54:19:71:
6a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C1:61:44:7E:C5:A1:33:4A:DD:75:52:3B:F7:8E:9D:20:07:38:6D
X509v3 Authority Key Identifier:
keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/9MFhRH7FoTNK3XVSO_eOnSAHOG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.201.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:08:64:b1:af:59:2b:c9:02:82:57:83:8f:08:01:72:bb:1e:
21:53:fd:f3:bd:69:d2:87:11:2f:db:18:b4:24:5c:c2:5e:5a:
f3:1e:31:99:f9:96:e1:7d:cc:14:d3:b4:b5:18:ae:b0:78:b3:
f6:f0:fc:37:82:92:3c:37:de:c1:f5:c7:5a:4b:57:0f:64:34:
9a:0c:48:bc:0a:e7:85:a2:fb:9e:a8:22:6d:c5:f0:a2:97:dc:
d1:88:4d:1e:16:7e:ed:88:1c:f6:19:88:b7:bf:7b:87:12:c8:
1b:93:9c:14:3f:93:fb:75:01:4d:fa:77:65:7d:b7:9b:fe:89:
90:c0:cf:70:77:e4:c5:28:d4:4a:bc:1d:be:39:3d:50:c0:ed:
95:78:5e:3d:7c:d1:bc:d3:5e:1e:9a:de:dd:78:0d:14:b4:5e:
34:2b:76:84:a3:c5:fe:ba:8b:81:c3:11:58:3c:ab:a5:c3:b7:
e8:b4:1d:58:06:67:6a:eb:dc:d5:03:d9:b1:7c:9e:d6:95:6c:
c2:82:a3:fd:68:ac:86:47:d2:53:ba:7a:3a:7a:43:78:e8:39:
be:5b:cb:f6:93:1f:5e:6b:c2:1f:18:72:3b:a2:5a:d9:c2:72:
90:a6:8f:b9:6a:9a:bd:6c:fa:11:37:3f:1e:5b:da:2d:43:83:
c9:f4:98:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:41:05 2024 by rpki-client on console-ams.rpki-client.org