Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/1Bhh_0LvvO5XtrJAq8MQfJiqTDM.roa
File: 1Bhh_0LvvO5XtrJAq8MQfJiqTDM.roa (raw, json)
Hash identifier: IvsAX7uE3njlEYkmfBlJm5GMCF4cYfvG8vJUyM3KcdI=
Subject key identifier: D4:18:61:FF:42:EF:BC:EE:57:B6:B2:40:AB:C3:10:7C:98:AA:4C:33
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 018CC4923C629E0F4B0F52501357BCA48DD1
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/1Bhh_0LvvO5XtrJAq8MQfJiqTDM.roa
Signing time: Mon 01 Jan 2024 10:29:27 +0000
ROA not before: Mon 01 Jan 2024 10:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397225
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 22:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:3c:62:9e:0f:4b:0f:52:50:13:57:bc:a4:8d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 1 10:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d41861ff42efbcee57b6b240abc3107c98aa4c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7b:50:a7:c2:25:f2:b9:d5:2b:bf:92:32:6c:
df:48:d6:ab:86:cb:01:72:82:d5:16:1f:5c:72:90:
27:f5:f8:4c:fd:4b:94:64:1a:00:2d:72:a3:da:b9:
73:9d:c1:b6:00:5a:15:5d:8b:a0:15:20:ed:d4:01:
aa:8a:2c:f0:92:2c:3c:e7:d6:f3:d3:ec:9f:f5:06:
a2:7e:9c:10:01:a6:99:4f:96:9f:bb:d4:d3:d3:27:
ff:6a:41:89:60:c4:dc:cb:f8:0a:27:1f:fa:a5:32:
8f:e0:c6:b0:1c:fc:8b:be:af:b1:8b:9d:ba:32:51:
6c:8d:b7:22:63:93:59:20:0f:2e:1c:fa:f5:ee:21:
62:7e:b2:22:0e:b0:3a:b6:60:4a:cc:58:f5:53:56:
d5:1e:02:33:0a:6c:1c:e8:dd:20:aa:ef:07:8c:bc:
23:53:09:fc:ea:8f:17:47:5c:5e:28:75:34:0d:ea:
14:eb:e2:74:09:64:43:d5:0d:3e:ec:49:b7:ae:f3:
2b:46:75:61:d4:80:5a:5c:50:cb:b1:6c:72:48:0f:
77:8e:66:0b:78:b7:cf:af:d7:78:22:02:aa:b5:f5:
c8:68:95:58:cd:52:88:46:20:69:8f:73:16:98:d7:
01:fa:92:55:3d:1c:9a:7b:de:b5:81:3b:85:2e:f7:
49:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:18:61:FF:42:EF:BC:EE:57:B6:B2:40:AB:C3:10:7C:98:AA:4C:33
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/1Bhh_0LvvO5XtrJAq8MQfJiqTDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
72:2b:22:18:46:67:fc:fb:ba:d9:4f:ae:16:b6:98:c4:a8:fd:
89:a2:0e:f6:db:dc:7d:94:dd:61:d7:d3:ad:88:f2:4e:ab:7f:
96:95:32:95:ab:0b:bb:88:7f:4d:f9:95:5c:e5:8e:b4:ca:b8:
ae:1d:06:da:9d:ed:4c:20:94:83:39:35:79:16:c7:1a:3b:da:
46:89:6f:e2:ba:d9:a7:20:88:07:e9:4d:92:ee:5b:29:74:c7:
99:e5:29:31:95:ae:87:c9:2a:97:88:23:58:d1:c2:da:af:8e:
2b:40:5f:b6:2b:79:fe:d4:0a:3b:10:46:03:0d:e3:d7:ea:16:
7c:63:26:59:29:37:61:3e:d7:6e:d2:ec:13:63:c0:c6:d8:98:
d6:19:2e:86:2c:5c:2f:e9:6e:bc:ab:b3:6e:8e:bf:6b:c5:8d:
de:75:bd:7a:72:60:30:e7:c1:6c:7b:61:50:fa:a6:c5:6d:85:
ea:d0:c1:66:d2:64:23:6e:ef:1a:84:12:14:f0:c8:f2:99:24:
18:26:19:21:b7:bf:c6:d7:57:d3:54:1e:76:e0:94:cb:d2:b8:
ce:7b:3d:96:d3:95:bf:45:07:4c:53:78:3d:c4:ba:4b:54:86:
97:f1:ca:2d:a6:64:1b:cd:95:84:29:9c:9f:49:d8:a4:79:41:
62:fc:20:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 04:47:11 2024 by rpki-client on console-fra.rpki-client.org