Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/GISu4fRZKOLy4tFKTMKVFG4TOyI.roa
File: GISu4fRZKOLy4tFKTMKVFG4TOyI.roa (raw, json)
Hash identifier: sz88mQx8NVCCzg7a7pz+GRwSKaacrhindJm4PDl1yRY=
Subject key identifier: 18:84:AE:E1:F4:59:28:E2:F2:E2:D1:4A:4C:C2:95:14:6E:13:3B:22
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 018CC49237E220063AB1FD01A272B0089D13
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/GISu4fRZKOLy4tFKTMKVFG4TOyI.roa
Signing time: Mon 01 Jan 2024 10:29:25 +0000
ROA not before: Mon 01 Jan 2024 10:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397213
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:37:e2:20:06:3a:b1:fd:01:a2:72:b0:08:9d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 1 10:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1884aee1f45928e2f2e2d14a4cc295146e133b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8f:17:6b:b7:7a:72:40:16:4b:e8:7d:de:cf:
cf:6b:8f:cd:5c:ab:e1:6e:94:17:44:de:5c:a4:b7:
b9:b6:ad:4a:8c:20:27:10:81:05:60:41:2f:57:83:
6a:18:c8:a2:f5:94:64:0a:3c:0b:bc:51:22:aa:bc:
34:d9:c1:dc:d5:86:05:5b:98:b4:45:a0:17:eb:f9:
27:4e:0d:1e:a9:0a:01:b4:5a:24:83:00:fd:65:0a:
b9:59:9e:89:2c:ac:69:a3:1a:09:36:0f:7b:01:09:
a3:6f:c4:d0:d8:cb:7d:01:a4:a9:00:78:2f:e0:bf:
cf:ef:96:6f:98:86:a3:65:0d:f3:4f:09:3a:01:c5:
6a:66:e2:e0:e6:a2:9b:ba:59:a9:91:65:f2:10:37:
4f:14:fd:0f:c6:f9:c5:63:fe:98:f3:95:51:3b:d5:
85:89:eb:f5:b6:bc:3c:5c:9e:6a:40:b7:9a:06:67:
e2:e0:1e:d2:d1:a5:93:53:75:87:36:a4:d3:99:b0:
80:c7:da:42:15:44:b3:63:26:49:24:b4:c2:d4:4d:
9d:dc:ad:20:bb:59:ea:db:41:a9:ea:d3:46:f1:6e:
14:b3:b7:d6:12:da:ae:ed:cb:1d:cd:fe:38:c8:bf:
cb:4c:96:b1:ec:52:55:1f:d9:a6:89:e2:87:97:53:
da:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:84:AE:E1:F4:59:28:E2:F2:E2:D1:4A:4C:C2:95:14:6E:13:3B:22
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/GISu4fRZKOLy4tFKTMKVFG4TOyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
11:26:d1:37:41:a1:00:89:3e:3f:b6:29:77:9f:13:18:92:9e:
76:3c:da:bb:80:1e:94:05:92:c2:a2:51:23:13:19:af:13:ef:
08:4e:a5:5a:f2:71:5b:ab:f6:9a:fd:51:6c:11:f3:50:ae:44:
dd:f3:d7:2a:8f:d1:42:cc:1d:e7:07:64:da:11:89:01:04:09:
b0:5f:63:ca:af:08:d4:3f:95:83:1f:6c:66:d9:ff:86:59:1c:
b2:e2:fe:59:af:a9:f5:2c:8f:9f:85:40:f2:ad:59:8d:87:69:
1b:1f:8b:b0:5f:88:79:db:0d:35:18:88:22:a5:5d:66:93:71:
3e:ec:44:bc:d4:e1:ec:96:bf:14:43:7c:14:a2:28:1b:a6:78:
c5:83:d0:7a:d3:53:2c:b1:35:5c:c0:d5:c7:75:c4:b1:75:d1:
0d:01:4d:38:ba:14:bf:9f:04:df:58:49:07:18:20:56:bb:65:
b1:13:c6:5d:fa:35:07:79:f5:e5:22:4b:3a:a4:1d:83:aa:84:
d3:cd:d7:7e:7c:41:09:4d:69:5b:b3:af:c8:c6:a2:63:be:35:
34:bb:6f:50:cb:1b:c0:28:2a:4b:1e:f9:77:b8:c3:4d:c7:2a:
00:29:fd:28:76:1e:bb:e0:12:81:f3:dc:a9:c6:e9:a8:b3:1a:
00:2c:37:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:25:40 2024 by rpki-client on console-ams.rpki-client.org