Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/V8g4xTmtOoneOMpocKgck3je_Z8.roa
File: V8g4xTmtOoneOMpocKgck3je_Z8.roa (raw, json)
Hash identifier: LEMAv9zQ1SlBZfcxc00vyOR1XxPe8qm3bPNE2KeYxxs=
Subject key identifier: 57:C8:38:C5:39:AD:3A:89:DE:38:CA:68:70:A8:1C:93:78:DE:FD:9F
Certificate issuer: /CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Certificate serial: 018CC64B80BEC8DDA4986F218842B8A616B5
Authority key identifier: DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/V8g4xTmtOoneOMpocKgck3je_Z8.roa
Signing time: Mon 01 Jan 2024 18:31:26 +0000
ROA not before: Mon 01 Jan 2024 18:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202193
IP address blocks: 37.200.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:80:be:c8:dd:a4:98:6f:21:88:42:b8:a6:16:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Validity
Not Before: Jan 1 18:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57c838c539ad3a89de38ca6870a81c9378defd9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b0:fc:03:f8:2f:73:e1:67:7b:d7:d5:3e:46:
c7:aa:82:f7:4d:af:5c:c4:cd:45:f0:22:82:b3:30:
6a:b7:85:91:dc:d2:01:b0:a6:b6:94:80:4d:91:0b:
84:7c:87:36:b7:bc:51:dc:d4:00:af:fd:97:3a:46:
ed:2c:22:9f:b0:54:fb:3d:87:dc:0a:75:43:5f:37:
f1:8a:65:38:cf:de:26:5b:65:1d:c1:ac:7a:df:9e:
1c:36:13:d0:44:04:d9:43:27:d1:4a:d0:ed:96:89:
eb:3f:c0:a5:d3:24:e1:54:27:ad:45:f7:25:42:ad:
c1:fc:a5:76:0f:8f:93:9c:65:30:18:1f:9e:a3:7a:
85:88:9b:61:17:51:ec:81:5d:b5:ea:8d:c0:48:f0:
83:9f:d4:95:49:1f:db:d8:a2:a0:1c:b3:6e:6e:25:
ab:3a:84:20:c1:b8:4b:d2:02:9d:92:81:9a:42:89:
94:61:73:4e:77:1f:06:fd:ae:f2:40:05:1a:9b:58:
20:7a:0a:5b:9d:a0:b4:9d:5b:97:64:d8:f6:60:69:
21:a5:59:d5:14:98:29:60:9a:cb:df:75:f3:6f:9c:
2c:24:cd:2e:38:3b:aa:a2:68:c7:3a:c1:b9:04:9e:
9c:8b:ca:b6:3b:da:c4:7b:8c:cb:f4:ac:1a:cf:14:
9b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C8:38:C5:39:AD:3A:89:DE:38:CA:68:70:A8:1C:93:78:DE:FD:9F
X509v3 Authority Key Identifier:
keyid:DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/V8g4xTmtOoneOMpocKgck3je_Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.200.80.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:06:e0:39:6c:c5:7e:34:f0:27:22:ca:27:87:9b:83:e2:b1:
f4:11:67:9e:d6:c1:64:b6:cd:85:4b:fa:19:05:54:b4:2b:9d:
c6:5f:f7:2b:4c:55:cf:22:68:4c:80:9d:6b:58:2a:95:f3:87:
4f:34:23:00:ff:b0:c4:15:c9:18:26:9e:29:e2:ad:f7:f4:52:
60:43:81:61:68:17:2b:45:ad:36:b0:28:0d:3a:77:24:85:f3:
c7:b5:4e:2d:7d:22:2e:cf:be:ff:3f:2c:52:14:36:4d:34:86:
29:9e:5c:b5:6d:ff:c5:92:44:07:46:de:bd:b9:58:5b:e9:6d:
1b:45:99:60:b4:f9:8a:d6:aa:a2:21:38:b9:09:43:b3:16:77:
84:7e:f9:43:db:cf:85:b1:29:ae:23:ee:d1:d2:8f:65:c1:bb:
16:c9:5a:f3:cd:b9:69:bb:33:f4:96:f0:c4:a8:12:7f:88:fc:
12:d5:79:3f:eb:0a:49:d5:7b:52:4d:22:8f:78:f1:df:73:9b:
0a:47:66:5a:18:9a:e7:16:4e:64:e8:55:75:59:42:c8:62:90:
a3:62:09:1c:ce:21:a2:43:3d:2e:19:cd:f6:fb:dc:6d:8b:b4:
b3:e0:b4:92:a9:44:4a:30:c8:ad:71:eb:96:a7:03:39:e1:37:
a6:9b:94:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 23:04:33 2024 by rpki-client on console-ams.rpki-client.org