Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/AmWRWvxP0YG0--PvULDbDKGPJUA.roa
File: AmWRWvxP0YG0--PvULDbDKGPJUA.roa (raw, json)
Hash identifier: syctv7iaZ8/tIfiLbWGV/E5YMTTJrpOMnJgNGcUtAkg=
Subject key identifier: 02:65:91:5A:FC:4F:D1:81:B4:FB:E3:EF:50:B0:DB:0C:A1:8F:25:40
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 019173743A6F76FB73E960A36B2334F2A823
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/AmWRWvxP0YG0--PvULDbDKGPJUA.roa
Signing time: Wed 21 Aug 2024 05:41:22 +0000
ROA not before: Wed 21 Aug 2024 05:41:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215783
IP address blocks: 37.114.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:73:74:3a:6f:76:fb:73:e9:60:a3:6b:23:34:f2:a8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Aug 21 05:41:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0265915afc4fd181b4fbe3ef50b0db0ca18f2540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:03:92:4f:bc:76:46:0e:0d:98:79:8e:ad:
6c:3c:61:89:52:44:6e:9b:4d:ff:e8:f2:0d:84:68:
c6:66:ea:93:67:51:ef:b3:4d:dd:33:ba:f9:92:e0:
1e:9c:1b:ea:53:a1:79:6d:11:e0:53:57:e5:51:40:
58:42:80:2b:3e:a7:4c:c6:5a:ce:21:42:6a:21:7d:
53:6b:0a:c5:65:fe:28:9e:ee:94:99:2b:a6:18:33:
ff:06:33:54:84:3d:22:92:a6:bc:78:f6:9d:a9:01:
91:54:e8:b7:a7:98:98:e4:b1:02:67:b1:96:6b:70:
40:0a:e3:bb:03:e0:fb:9a:df:50:14:3a:6a:fa:30:
c1:df:b6:57:3d:33:a6:c5:80:51:1b:f8:c8:2f:35:
0e:e5:b4:e8:6d:c5:c2:d7:36:34:fc:e7:1c:54:5d:
c6:66:d1:28:a1:8c:d1:6f:83:f9:1f:9e:c5:fb:86:
3e:23:2b:7f:25:6a:06:9f:8e:3e:23:c6:5a:fa:e3:
a4:9c:0d:60:89:08:47:e5:3f:9a:4c:e2:d3:5f:28:
1a:59:31:45:11:0d:a3:be:7f:10:ee:2e:cc:57:c5:
34:75:9c:6b:ee:79:6d:55:9f:52:4a:34:e2:00:2d:
da:c2:86:95:b7:1a:31:e3:ba:e2:79:0a:9d:f1:b4:
49:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:65:91:5A:FC:4F:D1:81:B4:FB:E3:EF:50:B0:DB:0C:A1:8F:25:40
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/AmWRWvxP0YG0--PvULDbDKGPJUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.36.0/24
Signature Algorithm: sha256WithRSAEncryption
98:2e:aa:dc:62:60:50:fc:b7:d8:7f:a2:dc:a6:f2:8c:6c:7a:
52:8d:d2:d2:41:82:7c:90:97:bd:ca:d9:ec:2c:02:d2:82:2d:
94:3b:fd:d1:8d:63:32:5b:a8:75:1b:db:0c:e7:4b:d0:33:0f:
68:80:33:07:3e:17:44:c3:6f:66:60:6f:ff:2c:3f:c9:e9:ce:
cf:5d:45:74:88:5c:d6:a5:62:2f:1f:85:6c:48:99:37:6b:f1:
78:66:7b:c8:47:3a:c8:bf:d7:68:cb:73:79:4a:f6:12:81:20:
6e:83:88:77:06:2b:1b:d4:28:46:97:30:37:c2:1e:b0:78:54:
60:0a:7f:e5:d1:fb:eb:10:07:34:88:f2:f8:8c:2a:dd:1b:78:
64:7b:3f:74:d3:ca:96:ed:95:fa:41:8a:17:ae:ed:54:79:c4:
05:49:69:66:e3:bb:fd:23:85:fd:75:2f:97:14:b9:12:a3:6c:
2f:f1:7e:d9:87:81:05:bf:b0:a0:be:25:af:1e:a0:cc:67:b3:
09:15:ed:fb:5d:90:82:b5:cd:02:1e:be:56:2f:67:a7:cf:07:
be:97:c8:b8:bf:ef:91:9c:8c:0d:b2:58:2d:fd:94:07:c8:22:
ff:24:1c:6c:ca:53:37:53:19:39:56:e0:b8:41:4e:7a:67:f6:
64:d4:00:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 14:03:29 2024 by rpki-client on console-ams.rpki-client.org