Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/dXOOb354FvwiifrD6yovl7hgScE.roa
File: dXOOb354FvwiifrD6yovl7hgScE.roa (raw, json)
Hash identifier: wcY3HTaWKyeSTgeGeL28F2jY/ZUK0U9HTu50GXlij7o=
Subject key identifier: 75:73:8E:6F:7E:78:16:FC:22:89:FA:C3:EB:2A:2F:97:B8:60:49:C1
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 018D02EAD4C4C6C82F89996D0A371B467707
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/dXOOb354FvwiifrD6yovl7hgScE.roa
Signing time: Sat 13 Jan 2024 13:02:40 +0000
ROA not before: Sat 13 Jan 2024 13:02:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216081
IP address blocks: 37.114.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:02:ea:d4:c4:c6:c8:2f:89:99:6d:0a:37:1b:46:77:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 13 13:02:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75738e6f7e7816fc2289fac3eb2a2f97b86049c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:96:f3:18:bc:77:ce:c2:1d:11:d6:50:d5:
c9:1c:d4:25:31:2c:99:6a:b3:2f:95:12:cc:5c:0e:
9e:06:d6:41:35:a6:97:bd:3c:1c:30:27:17:26:ae:
de:fa:f4:dc:60:7d:46:05:89:b1:62:2b:fa:42:62:
af:79:75:6b:1d:35:5a:f7:b7:5e:c4:e5:37:81:d8:
e3:9a:c4:97:19:ba:f4:c9:5d:fd:56:e3:2a:ca:0e:
8f:65:68:5d:38:de:ee:ec:f6:5b:3d:22:5e:39:9a:
78:43:be:74:9e:ff:8c:36:92:23:91:53:38:85:f5:
b7:f2:4a:90:31:b1:6a:3f:41:e8:b0:47:c8:aa:0f:
66:ff:da:ab:0b:b3:3b:c8:c5:c8:82:24:a3:6d:f8:
d6:b0:b6:1d:e3:2c:de:c3:04:9c:25:9f:f2:98:61:
fe:af:e0:4b:d1:71:ba:9a:07:98:e1:0b:15:e3:82:
17:9e:d1:d2:30:42:b5:42:a1:31:34:ef:45:ff:17:
4e:60:03:d8:2a:29:fb:9a:dc:4f:20:37:3a:ce:a4:
3b:dc:75:62:61:0a:9b:69:0e:82:cc:3e:68:76:03:
4b:18:4a:db:1b:84:9e:ca:68:9f:fc:51:78:98:02:
b9:0f:3b:3c:c4:57:b9:7e:e8:bb:ec:36:18:6b:30:
91:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:73:8E:6F:7E:78:16:FC:22:89:FA:C3:EB:2A:2F:97:B8:60:49:C1
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/dXOOb354FvwiifrD6yovl7hgScE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.61.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:86:23:e2:37:1b:fe:17:eb:30:fb:a4:d1:74:c5:b1:8a:01:
01:a9:26:90:5e:62:44:4a:d2:28:80:7b:d2:91:1f:35:02:ac:
0d:23:0a:af:84:4d:0a:6d:b1:97:53:74:91:4c:2f:97:f0:51:
2e:40:8b:56:ab:74:52:ea:d8:d2:c2:e5:b6:28:c0:b9:0d:27:
01:90:ea:89:48:48:4a:3c:9f:42:8e:ca:2a:b1:9c:ba:ad:c1:
7d:f5:0a:b8:b7:b4:5c:ad:1f:25:98:c3:93:9e:91:b4:68:c2:
a3:f1:55:eb:a3:73:34:48:f4:92:45:27:f5:09:c6:46:e2:6e:
01:b5:d7:ce:34:5f:38:ed:c2:d0:b7:4f:b2:16:da:ec:11:c0:
59:1d:99:bc:66:cb:4f:26:f0:d0:35:f8:42:1b:4c:9b:65:0f:
33:8a:4b:39:f2:0a:62:a1:79:bb:9b:7c:02:83:b9:16:32:8a:
e7:5a:57:08:c0:f0:d7:de:74:af:01:f6:64:c2:d6:14:e8:ff:
44:45:27:1c:1d:ac:11:b3:6a:aa:b4:3d:c2:cf:18:0b:4b:dc:
4a:28:fe:37:5e:21:cf:4c:69:f7:bf:ba:09:8a:fa:08:a8:3c:
b7:c9:71:ac:b8:28:1a:e2:5a:b0:79:09:96:8d:46:cf:c0:5f:
39:c6:97:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:19:46 2024 by rpki-client on console-fra.rpki-client.org