Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/0MVL_T1FhI1kxqk8TrPlATn1FDo.roa
File: 0MVL_T1FhI1kxqk8TrPlATn1FDo.roa (raw, json)
Hash identifier: 6aKhLYrv+uvg+vRZPWxv6svjQgOe3ddRSe83unDr7Zo=
Subject key identifier: D0:C5:4B:FD:3D:45:84:8D:64:C6:A9:3C:4E:B3:E5:01:39:F5:14:3A
Certificate issuer: /CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Certificate serial: 018CC34960B9214D42C1C99A53732DF9023B
Authority key identifier: 0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/0MVL_T1FhI1kxqk8TrPlATn1FDo.roa
Signing time: Mon 01 Jan 2024 04:30:15 +0000
ROA not before: Mon 01 Jan 2024 04:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57732
IP address blocks: 37.98.128.0/20 maxlen: 20
85.209.168.0/22 maxlen: 22
62.106.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 17:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:60:b9:21:4d:42:c1:c9:9a:53:73:2d:f9:02:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Validity
Not Before: Jan 1 04:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0c54bfd3d45848d64c6a93c4eb3e50139f5143a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:85:d2:4f:af:0b:86:28:dc:31:d9:3a:50:
23:be:25:a8:6b:84:96:61:08:6d:8d:9f:e8:23:0d:
f0:f4:87:df:5b:33:09:c3:71:5e:f1:d0:89:c3:a6:
82:9f:13:07:ef:d0:ef:18:fe:38:a4:6a:69:31:54:
29:d6:8e:e6:35:ea:38:e2:26:f2:0d:1a:a0:77:65:
0e:18:2b:25:ac:20:20:d0:03:27:89:11:58:7c:e1:
03:33:af:5e:78:8b:31:31:29:36:42:cf:16:ab:6e:
3f:a3:b1:34:31:ab:22:8f:4f:b4:6e:6a:d4:f6:b1:
1a:c7:55:7f:ea:a9:ea:2f:2d:6f:18:d4:7b:96:26:
bb:e4:43:e4:bd:ab:ce:9c:1a:d8:23:a9:1d:67:5d:
8c:bd:cc:7b:d7:96:36:d9:60:59:1d:75:89:df:2e:
57:d6:d4:9c:d3:21:2a:b8:9e:6c:29:c5:1d:5e:9c:
6e:ac:4c:d4:a7:b8:05:df:e1:f6:9a:4f:84:83:98:
8d:f2:e9:ab:fc:d8:1a:33:14:a7:8f:b8:33:4a:2c:
45:c5:eb:4f:e8:31:0b:84:9f:90:8f:b9:b2:29:9f:
31:1b:85:00:90:3d:94:50:72:89:08:61:3b:7c:c8:
d5:fe:3f:d0:dc:b2:a8:2f:df:58:cd:2d:cd:47:ea:
5f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C5:4B:FD:3D:45:84:8D:64:C6:A9:3C:4E:B3:E5:01:39:F5:14:3A
X509v3 Authority Key Identifier:
keyid:0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/0MVL_T1FhI1kxqk8TrPlATn1FDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.128.0/20
62.106.48.0/20
85.209.168.0/22
Signature Algorithm: sha256WithRSAEncryption
e0:0e:d1:43:c5:13:8f:1d:c9:bf:e4:41:19:a3:f1:86:5a:7d:
c5:1c:75:7f:38:20:0d:c2:9d:af:21:cc:1d:45:86:f2:ba:4b:
c2:a4:3a:0e:1c:64:99:ab:02:4d:f0:fc:28:67:b0:06:db:ba:
d7:62:a1:f9:cf:df:92:9b:37:4c:73:7c:69:07:36:37:03:e1:
d1:83:c7:bd:06:38:5e:4f:e3:dd:df:69:64:dd:c1:14:5d:d5:
e7:1a:89:3d:f9:3c:3c:8c:54:5f:40:fc:9b:48:4a:69:25:f2:
96:ae:d7:5d:ac:55:12:57:d1:e8:92:8f:f0:87:c4:b0:a6:c2:
4c:90:fb:ed:86:d2:cc:10:9a:df:88:bf:4e:a9:9d:05:64:4f:
af:d5:4f:55:50:d2:d4:b4:e3:3c:f7:1a:f3:11:0f:ba:3c:50:
0e:f7:a3:04:54:00:99:29:e9:9c:df:ba:8c:ae:68:01:66:e8:
0e:26:5c:6d:96:00:91:00:6e:fb:e1:51:66:6d:ae:6c:a5:93:
27:f7:19:a0:4e:a2:ae:6b:fc:47:3e:0d:f8:6b:ae:1f:75:ba:
92:13:a0:cb:69:f5:3b:d9:23:7e:23:84:f6:31:b9:40:a2:ba:
6d:55:8f:df:51:60:49:80:5b:ff:3b:b0:6e:bf:78:7e:d7:e1:
25:64:f6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 23:51:15 2024 by rpki-client on console-ams.rpki-client.org