Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/kY3wL-B35m38ZVOCX4W2r0n4iC0.roa
File: kY3wL-B35m38ZVOCX4W2r0n4iC0.roa (raw, json)
Hash identifier: SGXbnddEP3mKeYDs5XtQMlNoP6S732BC2bvDIJ2pjY8=
Subject key identifier: 91:8D:F0:2F:E0:77:E6:6D:FC:65:53:82:5F:85:B6:AF:49:F8:88:2D
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 018E1CA3CF2D4427CC967C392279A55C236D
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/kY3wL-B35m38ZVOCX4W2r0n4iC0.roa
Signing time: Fri 08 Mar 2024 05:58:01 +0000
ROA not before: Fri 08 Mar 2024 05:58:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215365
IP address blocks: 37.114.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1c:a3:cf:2d:44:27:cc:96:7c:39:22:79:a5:5c:23:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Mar 8 05:58:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=918df02fe077e66dfc6553825f85b6af49f8882d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:94:a5:2e:7f:15:b6:a9:d8:11:a2:73:5a:
f4:da:dd:29:e5:50:fa:c9:86:4f:21:b6:d3:15:f0:
d8:01:a5:a9:d6:88:be:3b:a5:2f:c0:ea:8a:24:e7:
50:1f:ec:20:11:7b:fe:10:6a:04:bb:b2:fd:be:2d:
f8:5f:8d:fb:4f:c3:4a:60:e9:7a:3d:84:50:f9:38:
97:b8:cd:0c:2c:88:fe:7f:5f:89:5b:fd:1c:c8:14:
a6:5f:0b:79:c1:12:56:21:48:7b:f4:9a:2c:92:f9:
94:07:a7:14:c8:d5:b0:8f:f5:aa:44:f6:a3:dd:24:
cd:bf:37:a4:c9:7b:21:b7:f6:f5:42:95:fa:07:e8:
3b:85:0a:dd:07:21:b6:6a:73:52:66:f4:69:2e:37:
36:27:a0:e6:30:b1:fc:a0:c5:af:c8:60:78:ea:7d:
f6:bd:7f:48:58:aa:96:48:ef:df:d4:37:67:43:11:
00:13:4e:ed:00:a6:4e:ba:a7:22:86:41:e3:04:68:
79:a5:dd:5f:1d:94:72:1b:cb:4a:e3:53:ef:56:39:
c6:1b:b8:45:96:1a:57:61:67:91:e3:c5:83:36:6d:
b8:1c:5c:98:d3:af:60:19:f4:d4:04:84:8e:fc:a0:
a8:13:96:9e:1f:67:16:e3:d8:e5:21:d1:ae:ba:79:
f0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8D:F0:2F:E0:77:E6:6D:FC:65:53:82:5F:85:B6:AF:49:F8:88:2D
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/kY3wL-B35m38ZVOCX4W2r0n4iC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.35.0/24
Signature Algorithm: sha256WithRSAEncryption
78:58:c6:38:c4:d8:d8:cd:7a:46:05:6c:93:6e:97:ca:13:58:
e5:21:65:45:48:e8:ae:97:00:59:a2:f7:cc:e3:c0:29:e8:a2:
8c:3a:91:e8:25:e8:b2:5c:0c:0f:06:db:24:37:da:dc:6c:68:
f3:8c:c8:d8:4a:72:3d:2b:72:8b:14:e4:2e:d3:97:0b:3e:00:
13:c9:64:5b:71:d8:44:07:6d:f5:7b:59:17:f7:28:73:56:c7:
e8:a5:af:73:d7:43:7c:55:5a:74:46:94:74:7e:c6:cf:b7:1b:
d5:16:de:51:0b:1e:70:0e:59:f1:b0:12:d7:32:92:3c:e9:2c:
f5:6b:fe:9f:06:61:4d:d8:50:0b:16:ad:72:46:2b:d3:1c:10:
68:42:26:a5:d3:b3:29:a5:c6:7b:0b:fb:13:1d:b1:1a:0b:5e:
b7:ad:77:5c:6b:8b:d1:3e:77:fb:93:1f:15:07:5b:d2:31:4c:
aa:c6:79:37:89:41:f0:81:fd:12:05:05:d3:28:76:6d:d3:e9:
0d:3b:8f:49:86:72:6a:65:ec:cb:3f:a1:98:da:45:d4:b2:b2:
41:76:5f:19:a5:5b:2a:e3:93:f0:61:df:6c:d3:26:10:b5:2f:
d3:69:b0:6e:33:47:9d:ec:34:30:5e:48:5e:35:cb:92:f3:58:
58:c9:51:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:24:21 2024 by rpki-client on console-ams.rpki-client.org