Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/c5EjGc0SbgQlsTBqZ4VyqO7wjIo.roa
File: c5EjGc0SbgQlsTBqZ4VyqO7wjIo.roa (raw, json)
Hash identifier: BMyUQQV4W7o9R77eamHf23fsimyiUxoWifzylDNwShg=
Subject key identifier: 73:91:23:19:CD:12:6E:04:25:B1:30:6A:67:85:72:A8:EE:F0:8C:8A
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 018CCA999DC759E44EEF9158ECA714EC5C23
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/c5EjGc0SbgQlsTBqZ4VyqO7wjIo.roa
Signing time: Tue 02 Jan 2024 14:35:14 +0000
ROA not before: Tue 02 Jan 2024 14:35:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12357
IP address blocks: 37.222.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:9d:c7:59:e4:4e:ef:91:58:ec:a7:14:ec:5c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 2 14:35:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73912319cd126e0425b1306a678572a8eef08c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cb:a1:96:30:2f:b2:2b:b9:a1:54:ca:96:5b:
0b:4f:0f:64:8b:f3:9d:79:ac:20:a9:c0:30:3e:2b:
8b:03:4e:0b:83:55:7c:43:96:d8:9e:77:ca:f3:e3:
1d:39:6b:55:41:4d:81:19:eb:2e:08:26:85:64:6e:
12:00:8b:ad:8f:46:cb:8d:79:21:d5:22:92:4b:fa:
94:75:a1:95:3d:69:d9:47:7c:d3:bf:e7:c4:f5:c8:
35:da:6c:e5:f5:d5:07:80:e1:97:2b:44:be:9e:7f:
9d:41:aa:24:3b:01:73:2b:87:79:a5:d5:cb:54:71:
e4:da:ac:21:73:1f:29:0b:53:39:56:a2:09:d5:39:
51:fa:97:03:1a:ec:1f:3c:56:52:c8:63:c7:26:ab:
fa:0e:50:04:37:06:58:a8:7b:68:e1:29:7b:f8:81:
2a:d6:df:d9:9d:72:dc:4a:c0:18:21:9b:76:64:19:
97:a4:ca:7e:93:2d:73:7f:b4:c2:54:82:47:1d:c7:
0d:73:62:ea:87:31:c5:5c:4d:78:e0:3d:0b:f5:f1:
1d:87:fc:86:e1:89:3c:4a:df:48:79:6d:42:ca:70:
a1:e9:24:a5:24:e1:e5:14:87:4e:3b:10:b9:da:59:
80:2b:75:86:2a:3e:15:92:dd:07:85:a0:f6:16:d0:
5e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:91:23:19:CD:12:6E:04:25:B1:30:6A:67:85:72:A8:EE:F0:8C:8A
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/c5EjGc0SbgQlsTBqZ4VyqO7wjIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.222.0.0/15
Signature Algorithm: sha256WithRSAEncryption
bd:14:e2:dc:69:d2:ce:18:bf:78:6a:aa:d6:4b:1b:ce:eb:a9:
51:7d:a3:48:ba:77:0f:b9:e3:da:19:b5:99:9d:64:1e:5e:20:
bf:6a:12:cb:f1:57:a5:f4:f6:6c:cf:18:46:e4:db:bf:ca:b2:
67:d2:00:45:07:6a:01:17:fc:ba:22:4a:3e:55:ad:ee:57:3e:
a9:08:c9:6d:82:f6:14:4f:61:2c:91:9f:52:77:5e:fa:4d:b4:
7d:91:5f:0d:bf:48:c5:2d:6a:d4:d8:9d:be:42:27:7c:c1:d0:
e2:23:ab:6d:29:35:0e:de:08:c7:08:1b:7f:1c:be:95:98:22:
93:a3:f6:45:cf:b1:a8:5c:cc:69:f8:5e:d5:9a:be:91:64:4a:
ff:2b:22:25:b6:3f:ba:98:18:1e:e5:45:d1:9f:79:e4:74:8a:
be:b3:d3:8b:2f:33:e1:6c:e1:a6:77:31:f3:95:5e:68:05:2d:
f9:5c:7e:e0:3f:ba:ca:91:1c:d8:17:ea:02:f6:80:40:50:cd:
e7:fc:5d:65:cb:2a:91:44:a5:44:76:f4:f7:1d:36:da:cb:f1:
6d:8b:c9:19:7b:5f:72:66:6b:23:0e:bc:36:67:1e:17:73:06:
b0:9b:50:1a:10:c8:f1:be:7a:01:c0:c1:a0:2b:f0:6c:67:06:
65:ca:22:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:45:31 2024 by rpki-client on console-fra.rpki-client.org