Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/i37I4gwSvNe2Vqz9-RymSZ1Hq4s.roa
File: i37I4gwSvNe2Vqz9-RymSZ1Hq4s.roa (raw, json)
Hash identifier: HGhdFwcAzLQNNGcPyqFv14TY7Eoh4JijCZrUyUhN0KY=
Subject key identifier: 8B:7E:C8:E2:0C:12:BC:D7:B6:56:AC:FD:F9:1C:A6:49:9D:47:AB:8B
Certificate issuer: /CN=e945946be7370503beafbe40e11115b9dc953bc3
Certificate serial: 018CC8DF8C141DFF17DFF2D40278977C88F6
Authority key identifier: E9:45:94:6B:E7:37:05:03:BE:AF:BE:40:E1:11:15:B9:DC:95:3B:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/i37I4gwSvNe2Vqz9-RymSZ1Hq4s.roa
Signing time: Tue 02 Jan 2024 06:32:22 +0000
ROA not before: Tue 02 Jan 2024 06:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15404
IP address blocks: 185.140.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:8c:14:1d:ff:17:df:f2:d4:02:78:97:7c:88:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e945946be7370503beafbe40e11115b9dc953bc3
Validity
Not Before: Jan 2 06:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b7ec8e20c12bcd7b656acfdf91ca6499d47ab8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:40:63:12:fc:81:d0:3a:e9:cc:e5:76:09:b4:
92:43:be:25:f4:2c:dd:53:5d:79:fb:99:35:22:5c:
34:1f:b4:b0:d7:8f:ee:1b:1f:38:5e:14:19:aa:a3:
db:9a:99:65:0f:e5:20:6a:9b:3b:00:5f:3c:26:cf:
8b:6a:11:10:54:2a:2f:d7:3d:db:5d:a8:ee:00:f4:
7f:95:97:e3:94:1f:66:6e:85:a4:59:ff:5d:75:db:
86:d4:ba:c1:2b:a2:0a:c4:6a:c1:8d:41:fc:e8:a6:
ce:2f:44:43:28:5c:aa:0e:0a:02:85:f9:78:0f:a5:
16:ce:c1:05:ad:44:f5:c6:8e:ac:a2:0f:91:44:51:
c6:18:d1:c5:3d:13:ff:f6:c8:49:a4:2d:fa:17:07:
ee:55:f6:84:2d:b5:3f:c4:20:7a:c0:45:0b:c2:2a:
56:65:59:83:4a:94:cd:e0:7a:7a:42:da:97:4b:da:
d6:c4:5e:b8:b3:ec:cd:d8:a1:80:0b:fd:a9:29:eb:
e5:a5:db:ea:84:ef:50:97:7f:0e:5a:02:a6:49:cf:
d8:58:f1:06:61:86:55:03:23:1c:8c:e8:16:d0:3c:
bb:a1:2b:8d:bc:0c:b8:dc:c6:82:09:ff:58:31:b3:
de:d5:06:a8:aa:94:fa:a3:97:85:11:50:cc:28:72:
13:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7E:C8:E2:0C:12:BC:D7:B6:56:AC:FD:F9:1C:A6:49:9D:47:AB:8B
X509v3 Authority Key Identifier:
keyid:E9:45:94:6B:E7:37:05:03:BE:AF:BE:40:E1:11:15:B9:DC:95:3B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UWUa-c3BQO-r75A4REVudyVO8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/i37I4gwSvNe2Vqz9-RymSZ1Hq4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5ff199-daf0-4a7e-8e5d-66d3d8ba539f/1/6UWUa-c3BQO-r75A4REVudyVO8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.104.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:99:84:d4:6b:dc:d6:eb:ff:93:fc:ae:67:38:35:87:5a:b1:
5e:36:8a:a2:69:f8:31:f9:95:d6:4a:15:07:52:d8:8d:ac:8c:
52:50:2a:54:9f:e6:0d:3b:41:f5:7e:74:10:4d:a7:d3:f3:40:
09:a3:74:df:ea:c9:3f:4f:d8:d0:2b:06:de:e6:88:49:cb:a9:
19:6b:ad:25:1e:95:a5:6b:79:0d:bc:45:7d:08:6e:06:1b:ae:
36:83:d8:e2:7b:4f:30:68:25:a5:e0:51:0d:37:e6:51:f9:af:
37:d4:70:70:96:63:22:18:e0:37:ac:a7:28:24:39:64:46:0f:
d8:6c:18:25:ec:03:34:94:13:94:4f:f2:a6:e0:83:e8:33:20:
b7:35:4e:81:ac:61:c1:4c:09:8c:38:94:b6:45:c4:a7:2c:d5:
8e:5c:c1:db:93:e5:e4:9e:37:2e:3f:5d:6b:2c:9d:12:0d:5e:
ed:2e:56:ef:1d:6d:e7:18:6a:5d:2c:8d:ba:19:48:c2:42:df:
01:7a:1d:e0:16:14:f8:1e:52:57:53:76:21:00:b1:27:f1:76:
da:cf:f6:d2:27:43:18:f0:24:8b:7f:7e:9c:50:4b:17:23:a3:
fe:47:3c:ae:4c:8c:a6:20:8c:8c:c9:91:52:7b:78:aa:53:92:
59:71:c0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:25:46 2024 by rpki-client on console-fra.rpki-client.org