Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/BRdk_nhbaxS617nOjxzzJeSyKKE.roa
File: BRdk_nhbaxS617nOjxzzJeSyKKE.roa (raw, json)
Hash identifier: hoGd5pWCF31ywBI9Io3yEQs34IspTOwoLFhSO9k9bUE=
Subject key identifier: 05:17:64:FE:78:5B:6B:14:BA:D7:B9:CE:8F:1C:F3:25:E4:B2:28:A1
Certificate issuer: /CN=ad44be18ee3e0d2747670555e86b000965e8139b
Certificate serial: 018CC8017723915F5A082E25F7680C2760AE
Authority key identifier: AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/BRdk_nhbaxS617nOjxzzJeSyKKE.roa
Signing time: Tue 02 Jan 2024 02:29:48 +0000
ROA not before: Tue 02 Jan 2024 02:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43356
IP address blocks: 37.218.198.0/24 maxlen: 24
37.218.199.0/24 maxlen: 24
37.218.196.0/24 maxlen: 24
37.218.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:77:23:91:5f:5a:08:2e:25:f7:68:0c:27:60:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad44be18ee3e0d2747670555e86b000965e8139b
Validity
Not Before: Jan 2 02:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=051764fe785b6b14bad7b9ce8f1cf325e4b228a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9c:c5:cb:45:fe:7c:18:79:0f:c7:74:7a:e5:
52:c1:50:9d:83:47:32:57:5f:86:97:11:81:92:57:
b2:15:74:70:2f:c1:96:58:2e:6e:ae:fd:d5:9d:26:
d1:7e:f2:1f:2e:0b:94:02:a1:fd:a6:aa:57:e8:c2:
8b:90:9e:41:d3:4d:21:77:bf:12:dc:40:dc:0d:48:
97:9a:f8:9d:ad:6b:e3:f9:f2:a0:e6:da:8b:31:e6:
26:64:99:28:a7:79:6f:e0:ec:e7:95:1a:d9:bb:96:
3a:ac:b7:59:f2:5b:31:80:67:d3:a6:40:af:3a:ce:
fe:be:e7:9a:d2:c0:ac:f4:9d:18:40:b7:7a:52:ac:
a5:e1:02:26:8f:b3:c0:a4:7d:5b:bf:b7:7c:25:72:
63:76:fd:10:99:0f:6e:91:56:69:47:93:44:de:71:
2b:c1:a3:c2:b9:bb:77:f5:7f:df:19:c0:1f:f3:e7:
8b:cc:ce:77:7b:bb:f0:e4:21:d4:52:51:88:78:90:
61:83:d1:0d:60:96:e1:d1:18:6a:75:7a:12:0f:18:
c0:ce:e6:b1:ed:14:5e:c9:20:6a:bc:33:b3:78:34:
5a:31:8c:ad:30:bf:e8:9d:b3:da:a5:99:d9:dd:29:
94:40:e1:d4:5a:3e:9b:ba:60:89:91:af:37:71:15:
32:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:17:64:FE:78:5B:6B:14:BA:D7:B9:CE:8F:1C:F3:25:E4:B2:28:A1
X509v3 Authority Key Identifier:
keyid:AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/BRdk_nhbaxS617nOjxzzJeSyKKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.218.196.0/22
Signature Algorithm: sha256WithRSAEncryption
19:b5:83:1e:8d:6d:05:8d:bf:57:57:29:f7:e9:e4:8c:65:f0:
01:35:fe:f4:63:56:c8:b8:43:e5:dd:b1:6d:95:53:26:19:98:
34:f5:6b:69:2f:bb:9d:ca:bc:d8:d7:10:db:0d:94:d6:25:ba:
69:8f:bd:1b:9d:1d:02:32:ca:69:00:3d:35:a0:76:f0:59:c4:
95:51:00:99:73:54:83:f7:54:a3:66:37:8f:b1:e0:89:c9:41:
56:37:1b:21:7c:0e:5f:39:40:1c:2f:91:f7:95:19:0b:29:1d:
66:47:00:b5:b3:f1:af:1e:60:e3:91:d6:e0:a8:bc:f3:65:f4:
84:d6:34:5e:6e:92:9b:88:7e:50:2c:8e:fd:7a:0b:c2:9b:41:
62:90:47:ba:b1:b0:da:98:92:fa:e3:bf:2e:21:9a:3c:74:58:
bb:d7:32:78:b3:b3:e3:67:79:c3:2a:1e:95:13:92:cf:ed:1c:
3a:92:5e:c2:6f:2c:f2:2d:ae:73:7e:d5:9b:1d:85:64:c8:72:
c1:22:1b:be:ef:e5:1b:a5:4a:fa:ef:38:8b:65:a9:ad:52:5b:
23:c2:6b:31:6c:9c:aa:9b:0c:b0:6f:c3:9c:64:db:90:f1:0e:
b4:89:6b:07:61:51:90:25:54:d5:4c:0d:46:78:b2:3e:72:e4:
da:5f:9b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:51:14 2024 by rpki-client on console-fra.rpki-client.org