Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/OLPHWH8xNUldynoLiZYUzSB7f_M.roa
File: OLPHWH8xNUldynoLiZYUzSB7f_M.roa (raw, json)
Hash identifier: AUBvVmojfXte1D9rADDATmsU9oNw3wWNTeTnhvO1r+s=
Subject key identifier: 38:B3:C7:58:7F:31:35:49:5D:CA:7A:0B:89:96:14:CD:20:7B:7F:F3
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 018CC49240546B86BBB32507DA2579F9CE58
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/OLPHWH8xNUldynoLiZYUzSB7f_M.roa
Signing time: Mon 01 Jan 2024 10:29:28 +0000
ROA not before: Mon 01 Jan 2024 10:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397234
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 04:04:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:40:54:6b:86:bb:b3:25:07:da:25:79:f9:ce:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 1 10:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38b3c7587f3135495dca7a0b899614cd207b7ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ac:50:78:f5:26:69:7e:62:4e:0a:60:08:72:
bf:95:a2:ff:88:27:5c:c0:02:5d:e6:5e:8c:f7:ed:
4e:fb:75:0f:95:59:c7:47:47:22:2b:5e:e2:41:a0:
08:a0:81:d8:67:53:73:ad:67:b5:99:c6:18:97:cf:
3f:25:16:66:b5:07:94:a1:a0:56:ec:f7:6b:7b:23:
f0:5f:9a:d0:89:5f:46:35:89:1e:45:df:bf:d3:fc:
72:b0:fb:72:60:75:ca:ff:79:a9:84:b9:44:a6:7f:
dc:9c:b5:de:cd:c1:3e:86:42:b8:fd:ab:c8:b9:6d:
35:9a:5c:cd:db:d2:ce:81:e7:5d:7c:b6:36:d9:0c:
da:7f:f8:07:f8:9b:50:a8:0c:d6:ba:9c:87:9b:3a:
8a:8a:98:30:74:30:52:28:82:3e:96:6c:d0:27:a6:
26:97:f6:48:c7:b8:c9:d8:11:60:b5:3c:e1:ff:ee:
51:3d:fe:6b:cf:30:68:5f:c7:3e:7b:47:36:59:3f:
7b:25:a3:b3:53:a0:53:ea:a4:3b:32:36:cd:4f:68:
d8:8c:4d:a0:0b:f3:14:85:a5:a4:dc:30:ad:e0:f7:
09:6d:c6:3a:12:5f:77:4c:99:b9:c5:9c:51:05:a0:
fc:75:95:77:bf:73:9a:f8:cf:be:da:ce:8d:61:d0:
e2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B3:C7:58:7F:31:35:49:5D:CA:7A:0B:89:96:14:CD:20:7B:7F:F3
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/OLPHWH8xNUldynoLiZYUzSB7f_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
52:6c:0a:65:30:da:b1:73:b2:c8:d9:d9:dd:fe:41:fe:48:ab:
31:eb:f3:84:e8:65:53:a2:7b:c7:93:6c:aa:d9:90:96:b7:99:
29:e7:8d:2f:b0:ba:9f:b4:05:8b:a9:a4:f1:4c:62:6a:15:6b:
f2:40:04:94:9b:ff:6e:01:29:dc:8e:ba:e2:d5:1e:1e:33:41:
c4:02:c1:0c:b6:57:1a:6b:26:fa:02:10:78:c5:02:16:2a:1b:
cd:92:12:30:b3:88:bc:8c:4f:e4:c6:bc:2b:67:75:01:ab:f5:
37:79:9c:96:d3:b2:59:e4:7c:3d:c1:ea:6d:77:04:ff:0d:6a:
6d:28:f2:4f:a1:3e:40:ef:5d:42:c2:f4:c5:c4:86:6e:6e:39:
5b:b5:b8:89:d5:06:38:b1:9a:3d:72:88:14:fc:8c:61:f4:30:
2d:5b:b8:f0:98:92:b9:c2:a1:10:49:46:6c:9d:62:d1:fd:43:
d6:40:36:a8:36:a4:90:f5:98:bf:8a:39:64:a9:26:8a:49:07:
4f:41:a1:f2:47:96:21:92:ee:b1:63:42:74:08:00:db:0e:97:
4b:4f:05:a9:dc:50:8f:d5:58:bb:77:84:f7:5a:52:b5:04:13:
8c:42:44:da:19:6b:a0:4d:7e:fc:fb:e7:8b:b9:f6:9d:18:df:
b1:99:cc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 12:10:50 2024 by rpki-client on console-ams.rpki-client.org