Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/t3adbEqeVIP4Vq4fpq6kprZbrSo.roa
File: t3adbEqeVIP4Vq4fpq6kprZbrSo.roa (raw, json)
Hash identifier: E47BfDxVLPamkuKvU+hbcYyeV3Hg9I2nR6CrG43PR9E=
Subject key identifier: B7:76:9D:6C:4A:9E:54:83:F8:56:AE:1F:A6:AE:A4:A6:B6:5B:AD:2A
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 018CC50112158F6911245BF01095E2EE97E8
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/t3adbEqeVIP4Vq4fpq6kprZbrSo.roa
Signing time: Mon 01 Jan 2024 12:30:30 +0000
ROA not before: Mon 01 Jan 2024 12:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.76.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:12:15:8f:69:11:24:5b:f0:10:95:e2:ee:97:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Jan 1 12:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7769d6c4a9e5483f856ae1fa6aea4a6b65bad2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:00:43:bc:b3:9b:e4:99:16:69:d2:97:cd:44:
53:ea:2e:53:2a:12:7c:4e:73:e9:bf:f4:ce:95:db:
11:ab:59:42:25:fc:6f:b1:b5:d3:3b:00:d7:8c:70:
e6:a5:98:53:5b:83:fa:14:27:d4:ca:47:b6:6a:9a:
92:29:10:4c:38:1c:18:27:ac:dd:b6:00:5f:4f:34:
9a:b3:44:24:d1:e3:ff:05:af:29:e7:30:c9:43:db:
5a:f9:af:30:9c:27:f0:59:74:f8:89:64:f5:c5:fe:
8c:c5:e2:07:52:5e:a1:71:b7:17:b9:90:58:77:d3:
b7:bc:87:dd:c2:7c:00:d0:59:c1:ad:3b:50:b7:d8:
be:ab:2b:76:04:3c:50:94:19:97:5a:9f:b1:8c:4b:
0d:98:c7:1b:77:1b:ae:4f:43:40:cf:dc:f1:e6:8f:
92:2a:ff:c2:25:3d:40:54:5d:33:b4:22:82:65:68:
5b:8e:54:d6:56:01:e3:85:c5:42:f0:21:e4:ba:a3:
a9:ab:66:28:d1:9f:52:de:89:d9:dd:75:c6:71:43:
99:fe:a8:53:cb:96:1a:75:8f:c3:92:cf:ce:e9:47:
b4:0e:5c:63:33:fe:56:9f:b7:e9:43:52:20:6d:d8:
e2:97:e7:4f:38:9d:e7:b1:a5:aa:25:06:58:84:f6:
30:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:76:9D:6C:4A:9E:54:83:F8:56:AE:1F:A6:AE:A4:A6:B6:5B:AD:2A
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/t3adbEqeVIP4Vq4fpq6kprZbrSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.38.0/24
Signature Algorithm: sha256WithRSAEncryption
94:c1:0a:99:6f:b3:bd:9a:b5:8c:04:46:52:19:5f:6b:b6:53:
aa:a0:59:25:55:e2:ac:05:5b:a5:72:25:fc:61:ea:71:10:44:
60:9f:4a:85:b8:83:df:e2:f0:6f:62:a7:9d:b4:b8:bb:1c:69:
d8:1d:9c:f0:ed:98:92:b5:83:69:bb:0c:6d:33:e3:4e:a6:7e:
23:11:04:c5:f0:d6:13:1d:2b:de:9c:37:c5:21:4c:c8:f4:c2:
60:5d:c4:61:18:c8:ce:dc:b5:2b:f1:0a:4a:86:bd:1d:99:bd:
c4:11:8e:07:fe:83:6f:6e:d3:cc:61:12:8e:f7:0f:c9:14:30:
b7:cc:b7:6e:5c:fb:ce:47:fe:16:62:d9:b8:49:d4:4d:5d:27:
14:13:5e:99:de:d0:4c:27:ec:ec:f9:82:0d:b1:48:74:e9:88:
5b:36:0f:bd:57:bc:7c:54:e8:21:84:0e:f4:1c:11:af:0b:b8:
d1:00:1e:17:91:60:23:d6:ab:3c:9f:e7:1d:60:6f:7b:08:10:
66:e7:4e:5f:37:47:ab:71:c0:56:6b:fe:e0:6f:17:32:86:a8:
fa:c7:d8:ef:52:99:71:1c:55:29:8f:5f:15:96:fa:7e:eb:44:
1a:14:ca:b4:14:f4:0c:80:1f:d4:46:d9:15:e1:48:ed:d8:50:
24:0d:69:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:13:23 2024 by rpki-client on console-fra.rpki-client.org