Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/5IHOBQcS3HLEt5vEfOr0O41roPQ.roa
File: 5IHOBQcS3HLEt5vEfOr0O41roPQ.roa (raw, json)
Hash identifier: 8sydbDg37EY7vZKLaJZYt5oeZoFNIWC8vBncOE4yZO4=
Subject key identifier: E4:81:CE:05:07:12:DC:72:C4:B7:9B:C4:7C:EA:F4:3B:8D:6B:A0:F4
Certificate issuer: /CN=2efb9e6d7566dfef9d5cb98d929cb70323d389f2
Certificate serial: 018CC3B72C970E7A8C4548C5279993CEA152
Authority key identifier: 2E:FB:9E:6D:75:66:DF:EF:9D:5C:B9:8D:92:9C:B7:03:23:D3:89:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/5IHOBQcS3HLEt5vEfOr0O41roPQ.roa
Signing time: Mon 01 Jan 2024 06:30:10 +0000
ROA not before: Mon 01 Jan 2024 06:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49354
IP address blocks: 37.18.128.0/22 maxlen: 26
2a05:280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2c:97:0e:7a:8c:45:48:c5:27:99:93:ce:a1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2efb9e6d7566dfef9d5cb98d929cb70323d389f2
Validity
Not Before: Jan 1 06:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e481ce050712dc72c4b79bc47ceaf43b8d6ba0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:76:32:b6:e0:c0:cc:5c:7e:67:d2:f1:d8:
db:de:81:38:ef:c1:47:5e:91:03:a9:12:b5:8d:09:
c3:0b:07:47:18:79:25:ff:e4:f4:db:ec:52:1a:5b:
2a:88:70:0e:3b:cb:fe:11:74:8f:65:71:a2:a9:c4:
de:36:fa:83:d6:80:db:c1:ef:ea:68:89:20:a3:7a:
52:4d:72:e2:02:95:41:d6:06:8b:00:ec:89:ac:76:
bb:5d:15:6d:f5:d2:83:b8:b4:3b:20:5b:18:23:1b:
28:80:50:03:de:42:da:9f:ac:d8:f8:77:da:e3:4c:
ea:90:88:d1:0b:08:cb:75:19:84:f0:d6:d3:2b:c7:
bf:c8:dc:08:51:49:bb:b6:f6:03:b5:e7:b9:db:10:
17:f3:5b:23:73:20:dd:ae:e7:cc:6c:ba:22:07:8f:
d9:04:0a:b4:14:bf:cc:6b:ce:fb:eb:35:72:8e:a7:
25:6a:79:14:23:c6:54:bd:5a:b4:60:93:04:6e:e1:
4a:07:b5:f6:66:b6:8e:8f:99:7f:70:1c:d1:08:89:
81:82:20:34:a7:f5:33:6a:3c:3d:e2:d3:d9:c6:7f:
c1:f7:52:f7:30:4f:da:7d:80:b5:03:f7:35:74:11:
f8:15:61:17:d0:b4:d5:e7:92:17:74:3e:4f:c2:43:
b9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:81:CE:05:07:12:DC:72:C4:B7:9B:C4:7C:EA:F4:3B:8D:6B:A0:F4
X509v3 Authority Key Identifier:
keyid:2E:FB:9E:6D:75:66:DF:EF:9D:5C:B9:8D:92:9C:B7:03:23:D3:89:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/5IHOBQcS3HLEt5vEfOr0O41roPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.128.0/22
IPv6:
2a05:280::/29
Signature Algorithm: sha256WithRSAEncryption
83:b8:74:4f:8c:45:95:86:de:d3:36:0f:b4:23:5e:5c:80:e2:
49:60:dc:e4:5a:dc:34:7f:27:d5:e4:b2:4e:9a:8b:9b:b1:27:
e3:4c:41:3b:34:8f:f9:66:19:33:05:34:8a:d4:7e:5f:17:5b:
c9:94:5d:6a:d4:11:aa:a3:4f:a2:fb:b8:84:d1:33:03:89:39:
64:c2:71:45:87:3d:fd:04:53:86:06:1a:f6:82:4f:a0:25:eb:
ea:38:04:76:b3:4d:f0:32:02:57:6c:0c:d4:0b:9e:bd:93:5a:
b3:e1:87:b1:60:ca:9e:71:c2:e5:35:90:a9:9b:d2:5d:44:83:
17:7e:a4:42:ac:2a:23:99:33:f5:bf:1b:9b:53:8d:12:82:96:
af:da:61:74:ef:42:fe:19:e7:ff:8f:aa:2e:c7:ad:52:3c:83:
2c:28:37:48:49:18:63:c5:6d:24:db:73:48:d5:73:37:61:4c:
a3:a3:83:9d:66:13:65:4f:07:42:30:80:c5:c6:85:d6:0e:44:
23:33:a4:25:00:d9:60:29:80:1b:df:c5:5c:62:95:c2:e8:34:
05:00:6f:87:f1:67:51:90:ff:4d:c3:41:40:3b:02:97:25:7d:
bf:d3:39:49:2b:94:31:1e:fb:ea:1b:6c:be:d4:98:a4:ab:e3:
77:cf:91:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:32:00 2024 by rpki-client on console-ams.rpki-client.org