Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/0XRMropDD_mE-GeCZDkYVgZPOPg.roa
File: 0XRMropDD_mE-GeCZDkYVgZPOPg.roa (raw, json)
Hash identifier: Yh7UDDis8+VRPY3YURU7TDaAgM9ASzvTSTmDSXV9D9g=
Subject key identifier: D1:74:4C:AE:8A:43:0F:F9:84:F8:67:82:64:39:18:56:06:4F:38:F8
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 018D44891D32101980253C2937A0304BF685
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/0XRMropDD_mE-GeCZDkYVgZPOPg.roa
Signing time: Fri 26 Jan 2024 06:50:52 +0000
ROA not before: Fri 26 Jan 2024 06:50:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215738
IP address blocks: 37.114.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:44:89:1d:32:10:19:80:25:3c:29:37:a0:30:4b:f6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 26 06:50:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1744cae8a430ff984f8678264391856064f38f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:69:b9:2c:c4:a4:54:61:2f:ac:78:59:42:77:
d7:f0:5a:c1:96:85:c9:71:e7:e3:02:51:98:1a:78:
94:5a:fb:7a:16:84:68:b5:7b:f5:46:4f:e2:18:81:
3e:a3:b9:62:d3:2c:bf:a5:7e:62:da:87:d8:81:a3:
dd:51:80:d3:92:e5:e3:32:ec:fd:b8:68:26:de:80:
0a:4d:04:4a:01:da:dd:4a:eb:c4:4c:7f:23:e3:77:
2e:63:32:34:4f:1c:be:9f:fc:24:cf:52:8a:b4:29:
ff:c8:4f:22:a4:29:8a:a6:c2:1e:ff:01:7a:80:cb:
0a:29:16:81:14:00:94:90:42:30:5f:09:5c:a3:a7:
33:bf:e5:fa:35:5b:2c:84:34:55:0c:62:e5:ef:bc:
06:8e:4f:2f:20:4c:9e:e7:e3:aa:bb:34:95:0d:07:
62:ca:7c:b7:ed:7e:96:e7:6c:a5:6f:54:64:c6:9f:
c7:f1:ca:18:af:84:0d:81:59:94:30:08:05:b4:de:
eb:f6:3f:17:fc:7d:57:72:96:eb:94:9d:6a:df:2a:
01:66:97:f7:e5:7c:58:11:18:2e:57:df:29:6a:54:
7b:00:95:35:88:a2:66:fd:66:74:1a:a5:17:85:33:
94:e3:70:f6:43:b7:3c:f8:41:9f:c6:34:b6:80:a0:
61:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:74:4C:AE:8A:43:0F:F9:84:F8:67:82:64:39:18:56:06:4F:38:F8
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/0XRMropDD_mE-GeCZDkYVgZPOPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.36.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:fd:12:20:b7:85:e7:41:d2:fe:0c:01:89:8b:ca:64:14:99:
9f:3c:b0:e6:6a:27:cb:18:73:26:19:f1:d5:77:ef:ee:4a:ab:
b0:68:7b:22:7b:cd:12:ba:ab:e7:ec:2e:73:dd:d2:55:30:5b:
dc:f4:b6:b2:a3:e1:ae:d7:58:6f:f5:37:0d:0b:e9:d0:f8:9b:
57:87:f8:0c:01:5f:7d:dd:4b:d6:66:b1:12:f9:ac:5e:df:97:
ca:92:87:56:0d:67:d2:56:a0:5a:aa:94:26:42:b4:74:47:b2:
06:c0:95:75:f9:c9:06:ec:1d:27:e5:e2:4d:c0:50:7d:5c:13:
6c:1d:1c:e9:60:83:50:78:fb:1e:88:9d:72:58:82:77:9e:9d:
64:34:01:2b:9f:9b:4f:c0:b5:e8:f9:d6:09:1c:ec:cc:eb:9f:
6c:75:29:7e:49:09:1e:ae:53:0f:e5:1e:3d:eb:ee:26:fe:e1:
fb:92:be:4e:f6:13:ea:3a:58:25:54:cd:17:14:a3:db:26:e3:
30:dd:b7:6d:39:3b:b5:c8:34:38:37:2f:0a:da:d1:b0:88:59:
07:1f:85:3c:d1:a6:45:53:1d:b8:b3:b5:bf:d0:ac:bb:29:41:
04:1b:d8:0b:08:20:67:0f:78:7b:c5:e3:14:b4:bc:8f:f5:5f:
67:36:b1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:53:09 2024 by rpki-client on console-fra.rpki-client.org