Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/R0P4NivRXZyDqiQcEq-3VkEmJBw.roa
File: R0P4NivRXZyDqiQcEq-3VkEmJBw.roa (raw, json)
Hash identifier: b2Jk9M2Q1Z+ZPRU5v8A0MLxTR23qCdrMFou1QamOgyg=
Subject key identifier: 47:43:F8:36:2B:D1:5D:9C:83:AA:24:1C:12:AF:B7:56:41:26:24:1C
Certificate issuer: /CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Certificate serial: 018F72E7CF6956D4F7E2A37F58777E07AD58
Authority key identifier: 1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/R0P4NivRXZyDqiQcEq-3VkEmJBw.roa
Signing time: Mon 13 May 2024 17:02:25 +0000
ROA not before: Mon 13 May 2024 17:02:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216357
IP address blocks: 66.33.37.0/24 maxlen: 24
2a14:3b41::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:72:e7:cf:69:56:d4:f7:e2:a3:7f:58:77:7e:07:ad:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Validity
Not Before: May 13 17:02:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4743f8362bd15d9c83aa241c12afb7564126241c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:2a:4b:32:31:cd:51:97:65:c5:01:86:6d:
f9:4a:ea:e0:e4:de:d5:90:1d:ec:a7:ca:84:58:1e:
7e:c5:da:81:26:6a:f0:9d:dd:e3:73:b1:2d:6a:65:
fa:83:8b:75:49:40:e6:96:fd:2c:83:45:ee:b3:c9:
90:83:18:2a:0f:21:80:65:0f:23:8f:b1:40:e3:9d:
d2:75:49:4a:bb:21:bb:71:3c:b3:45:76:14:84:94:
aa:ca:dd:d9:11:d8:84:a3:b2:9d:20:ec:83:ad:50:
99:a1:87:9a:41:12:7d:ea:9f:7c:32:35:01:26:73:
e2:09:13:c6:51:a5:39:3d:8e:87:88:de:50:c1:66:
b1:98:05:57:a2:58:2d:f9:39:f1:50:72:f5:03:9f:
54:ca:30:8a:59:8d:73:f3:4f:95:f0:0a:42:e5:76:
5b:22:d4:fb:fb:bc:33:8b:02:0e:55:53:ce:ed:dd:
3d:2d:98:7a:ea:ed:43:a7:5b:d5:49:f6:7a:60:76:
10:97:0f:62:4b:47:e9:b4:88:39:1b:c0:61:fb:ee:
4c:49:04:fe:0b:db:4e:e0:d3:0a:d2:d1:52:a4:db:
f4:b0:4d:b0:08:46:c8:9a:1e:05:2c:11:69:b0:98:
ee:58:c7:06:20:5f:02:f5:e4:8f:bf:fc:d9:b3:52:
f8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:43:F8:36:2B:D1:5D:9C:83:AA:24:1C:12:AF:B7:56:41:26:24:1C
X509v3 Authority Key Identifier:
keyid:1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/R0P4NivRXZyDqiQcEq-3VkEmJBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.33.37.0/24
IPv6:
2a14:3b41::/36
Signature Algorithm: sha256WithRSAEncryption
52:44:99:82:9d:0f:7c:de:d2:ea:10:22:03:3b:5b:32:59:91:
63:aa:e4:b8:1d:dc:4e:f4:5f:b5:6a:61:ea:1d:e5:43:bf:b5:
60:94:ca:7e:7a:2c:e3:79:f1:f8:33:3f:5e:c2:c1:fa:c0:d7:
6a:39:9d:19:93:87:a3:6c:c8:a0:64:4a:43:9a:c5:a1:db:df:
6c:29:7b:66:56:f5:2f:12:98:76:2d:de:49:d7:01:20:ee:52:
31:87:11:42:66:aa:09:9e:67:1e:29:75:37:f7:0d:39:ac:84:
dd:93:f4:f9:c7:82:e6:6c:cb:67:fe:d4:1c:0a:89:54:26:78:
eb:62:c3:f7:fa:af:e9:72:f8:b2:81:b5:dd:5e:23:9a:1c:44:
73:54:2f:27:c9:c2:5d:86:ea:e6:26:f2:7f:40:90:d7:12:e2:
97:35:de:a1:ce:dc:34:01:98:81:bc:2d:f0:2b:02:64:2f:67:
ce:a1:eb:b1:a5:9c:e3:6d:e1:54:57:4b:80:f6:33:00:d3:52:
34:43:b9:5c:14:c1:bd:cd:fb:11:9f:6d:39:f3:31:b7:86:95:
53:5d:e1:a7:7f:82:ce:90:b3:ce:93:48:d6:10:86:9f:1d:59:
e5:07:18:99:5b:87:8d:9b:28:e7:55:27:88:5c:66:80:59:a3:
64:9f:c3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:17:28 2024 by rpki-client on console-ams.rpki-client.org