Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/4ATeCpuXYO0_0kFf5t4Tti-keJI.roa
File: 4ATeCpuXYO0_0kFf5t4Tti-keJI.roa (raw, json)
Hash identifier: UBKwsNQHXObFvH+c/pXBaATBl7AAtwKTAaK4AIQ5AgA=
Subject key identifier: E0:04:DE:0A:9B:97:60:ED:3F:D2:41:5F:E6:DE:13:B6:2F:A4:78:92
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 018CC6B8A4D8B18879CCB6709A7E730A35AF
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/4ATeCpuXYO0_0kFf5t4Tti-keJI.roa
Signing time: Mon 01 Jan 2024 20:30:38 +0000
ROA not before: Mon 01 Jan 2024 20:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212443
IP address blocks: 37.202.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:a4:d8:b1:88:79:cc:b6:70:9a:7e:73:0a:35:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jan 1 20:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e004de0a9b9760ed3fd2415fe6de13b62fa47892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:94:53:3a:cf:77:18:c9:f8:24:57:7e:52:29:
41:47:71:b4:14:e0:0a:84:12:5d:05:8b:82:20:8f:
35:04:44:92:8b:46:0f:f3:13:59:8c:87:58:d8:d5:
40:f7:c4:85:13:5f:b4:3e:57:fe:33:7f:c3:3b:26:
4e:ac:87:23:cf:2e:50:15:8f:fb:24:2f:de:20:f9:
dd:42:0e:ea:88:81:2f:42:d2:94:d4:e6:ec:ed:55:
15:18:32:02:0c:41:73:9b:c2:99:9c:b2:f9:75:15:
12:b0:7b:f1:5b:ea:05:18:95:73:ca:8c:f9:9a:97:
81:14:56:a6:7a:98:e8:7f:68:7c:93:a5:c8:ee:fa:
ba:d6:4a:9c:56:d5:8c:18:9a:02:16:dd:f7:85:1c:
41:d1:e8:a3:8e:c7:b9:eb:25:8a:a4:83:d5:8c:84:
35:f4:ed:fb:46:ab:1e:d0:f1:c5:b5:a7:53:a5:aa:
bf:3a:1d:09:65:9f:ed:89:df:6d:88:77:4a:a8:82:
78:16:f2:35:79:4e:35:19:c1:91:e3:d0:d7:a7:98:
78:de:f2:8f:c4:26:3a:30:0f:85:16:c7:71:6f:2f:
0b:5d:bf:71:b4:1a:ed:79:ec:cd:0c:55:60:2d:dc:
60:32:84:94:37:71:ef:c8:4e:bc:4e:00:b1:ed:08:
04:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:04:DE:0A:9B:97:60:ED:3F:D2:41:5F:E6:DE:13:B6:2F:A4:78:92
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/4ATeCpuXYO0_0kFf5t4Tti-keJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.15.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:17:d7:a4:65:50:2a:eb:33:3e:0d:b9:c4:fd:d6:e3:03:f3:
16:ee:aa:e7:e5:30:7a:66:1a:dc:0b:65:87:94:5f:df:80:e0:
d3:7e:6c:d6:88:a5:a4:20:1c:c9:26:d1:6e:d8:e0:ff:4c:12:
9c:1c:c2:dc:4e:64:b4:3b:75:20:88:f2:fb:83:e6:b1:6b:3e:
dd:8d:20:5a:be:9f:e0:93:3a:3b:08:08:36:aa:33:3e:1f:fa:
28:f4:c7:74:44:20:ba:ee:89:4c:74:33:db:17:01:96:7a:cb:
9e:a8:88:2c:29:82:b1:ae:b0:cf:3d:86:09:12:b4:84:23:ef:
91:87:05:b2:6e:d2:09:da:b9:e2:ef:03:7f:7b:04:a1:ee:23:
b6:14:77:2c:8a:17:4b:bb:0a:96:42:2c:b5:58:37:d1:80:d3:
ee:3a:37:2d:8b:0f:a4:a8:1d:75:97:32:0b:8e:36:4f:ed:bc:
5c:54:8f:79:30:c6:33:6f:55:93:6a:96:d9:30:de:16:90:d6:
cf:02:1b:b0:1d:07:8c:50:34:b7:e7:98:f9:a3:db:54:36:f6:
30:2e:3d:85:16:32:8a:fc:95:58:83:1a:17:2d:8b:57:a1:98:
4f:40:d1:9f:31:0a:9a:d3:ab:4a:b4:68:42:d4:31:1c:04:b7:
c8:f2:90:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:02:47 2024 by rpki-client on console-fra.rpki-client.org