Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/bG36YJSYjqUVwv802BmnUJ2m3Dw.roa
File: bG36YJSYjqUVwv802BmnUJ2m3Dw.roa (raw, json)
Hash identifier: 2tOCSW4Lynq8P5HSZnKeb+g2qaFDw8YsAIdz2s6OX7Q=
Subject key identifier: 6C:6D:FA:60:94:98:8E:A5:15:C2:FF:34:D8:19:A7:50:9D:A6:DC:3C
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 018CC94E16AC1EF8C419048FC00E697E79FD
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/bG36YJSYjqUVwv802BmnUJ2m3Dw.roa
Signing time: Tue 02 Jan 2024 08:33:07 +0000
ROA not before: Tue 02 Jan 2024 08:33:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212685
IP address blocks: 37.114.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:16:ac:1e:f8:c4:19:04:8f:c0:0e:69:7e:79:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 2 08:33:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c6dfa6094988ea515c2ff34d819a7509da6dc3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:61:9c:54:db:0b:87:b0:66:94:e1:be:17:51:
bf:94:93:4c:d3:e5:43:16:67:33:2e:d2:25:c6:6b:
82:2d:2e:ae:de:3b:0f:60:0f:fe:22:8e:7d:f2:30:
64:7d:94:81:d2:2b:ad:f8:c8:b5:ce:ac:71:0a:fb:
e2:f3:97:13:6c:28:87:2c:bd:8a:fd:8a:1d:a0:42:
49:28:1f:77:db:15:46:c4:11:21:51:93:73:ba:bb:
a6:c8:8f:15:bf:57:5d:9c:14:dc:26:f0:0f:09:56:
19:67:a4:71:75:53:8b:12:3d:02:33:aa:26:06:73:
55:92:6f:36:3d:f0:bc:3b:6a:37:26:06:86:98:e5:
ef:d2:ca:40:87:b8:ae:36:fd:c5:12:73:95:7e:b4:
81:7a:39:05:3d:3d:0c:a2:00:4a:73:1b:83:65:44:
e3:9e:d6:7d:91:0e:5c:d9:2e:15:11:b1:ed:6d:8e:
da:8e:49:1e:72:21:89:04:cd:82:93:0a:06:b0:70:
27:f5:41:8c:6b:33:7c:76:3c:26:8b:1e:e5:a0:a9:
b1:56:cc:3d:54:7d:3c:13:95:69:6d:5e:70:00:50:
b6:ac:ac:b3:a3:f7:5b:7f:0f:b8:90:38:9e:21:1c:
34:50:8a:3e:a9:15:36:80:5f:64:8b:79:28:19:87:
d5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6D:FA:60:94:98:8E:A5:15:C2:FF:34:D8:19:A7:50:9D:A6:DC:3C
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/bG36YJSYjqUVwv802BmnUJ2m3Dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.36.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:d9:20:a3:28:51:1e:16:e8:21:23:25:77:cb:1e:bc:50:1f:
38:ce:ea:15:a6:09:a0:77:b9:32:22:fc:cb:75:b4:fa:93:66:
8c:85:b0:ef:1a:ec:75:48:37:9d:80:ec:85:73:c1:a1:0d:f2:
c2:f5:8b:ea:19:11:d4:12:2a:0f:8e:6a:f3:b4:98:2b:de:0f:
93:b7:bc:8d:57:7e:cc:83:89:c3:02:44:b0:7e:94:fe:0d:f8:
58:85:75:ac:9a:c1:14:22:09:00:63:54:52:96:2d:7c:d8:4f:
da:06:1d:e6:d3:77:f4:1b:f8:95:04:dd:8a:6e:ab:61:6f:f6:
3b:cb:a5:ac:3c:47:60:ed:12:8a:f3:54:5c:45:fe:cb:5f:3a:
37:4b:af:ea:ba:a0:a8:87:76:e2:cc:83:ae:e2:62:53:16:3b:
79:f6:5d:01:e0:41:e8:b8:12:22:e3:d2:25:8c:09:db:49:68:
3d:09:99:5a:69:4e:4b:d6:44:53:31:0b:d6:fd:54:dd:bc:40:
2e:5c:ec:55:ce:7c:40:05:a1:dd:13:34:6d:b2:50:13:d5:c3:
c2:3f:20:89:e0:51:b3:d4:44:bd:46:7e:17:8c:cc:d5:26:db:
a5:98:a4:4a:69:82:cf:d2:09:bc:91:84:fa:3b:40:b8:9c:27:
03:56:0c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:15:58 2024 by rpki-client on console-fra.rpki-client.org