Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/SJIex7rH4LdrtKCOkDabzrxasUE.roa
File: SJIex7rH4LdrtKCOkDabzrxasUE.roa (raw, json)
Hash identifier: RfT4jFm03PxWsRyGJM/EYoqgJMkqtXy06vj6rtNaVkE=
Subject key identifier: 48:92:1E:C7:BA:C7:E0:B7:6B:B4:A0:8E:90:36:9B:CE:BC:5A:B1:41
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 018CC49238819D02CDD2F75AB3F2745AEF4C
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/SJIex7rH4LdrtKCOkDabzrxasUE.roa
Signing time: Mon 01 Jan 2024 10:29:26 +0000
ROA not before: Mon 01 Jan 2024 10:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397216
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 13:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:38:81:9d:02:cd:d2:f7:5a:b3:f2:74:5a:ef:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 1 10:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48921ec7bac7e0b76bb4a08e90369bcebc5ab141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:26:34:4c:81:a6:ad:9a:98:fe:9e:bd:0a:72:
40:f1:0c:20:9e:c6:21:98:cd:23:c9:af:14:2e:89:
22:09:81:a8:29:3f:e4:99:06:f3:49:61:fe:a3:0e:
04:5e:94:60:c7:ad:51:f3:0a:ec:6a:02:6a:5b:ec:
35:e4:30:a0:51:ff:b5:53:b9:c5:be:42:8a:51:91:
6f:db:69:11:70:f5:ec:3c:84:d3:9c:35:9a:3c:55:
a1:09:f3:39:90:9e:b5:ad:4f:12:57:f2:f7:4a:e4:
d8:90:30:1f:ea:0c:64:6d:a2:9f:8c:f3:f8:2c:f7:
27:fe:b3:16:9a:77:17:6b:93:b4:d7:a4:47:8c:05:
ea:e6:e0:ee:0b:d6:16:14:d4:a3:3d:e2:c5:5b:82:
0d:8d:6e:eb:be:df:d4:5e:63:25:9e:c3:bb:4e:90:
ec:2f:d2:0f:84:16:e8:a2:a4:5c:6d:5f:6e:82:9f:
2c:62:ef:65:93:a7:17:ea:62:5c:62:bc:1c:34:a6:
f7:3e:c5:d3:54:e8:05:11:04:a8:d2:4f:33:6c:3d:
21:68:8a:72:bd:49:f1:46:63:31:6a:ff:8e:4e:54:
2e:c3:6d:0e:2a:7c:81:c8:e7:fa:03:f6:0b:3f:10:
99:1a:f5:9f:02:6f:76:e1:9a:d8:d3:5d:34:d0:42:
b5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:92:1E:C7:BA:C7:E0:B7:6B:B4:A0:8E:90:36:9B:CE:BC:5A:B1:41
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/SJIex7rH4LdrtKCOkDabzrxasUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
09:10:ff:83:bc:8f:43:1c:89:7c:f4:25:b2:76:ba:29:3f:d7:
3b:44:f5:7c:05:a2:72:45:6c:c3:d1:cb:65:f8:a8:bd:f6:c0:
cc:d6:ed:ee:e4:0a:aa:98:54:27:5c:10:b5:81:b8:29:65:17:
e5:cd:68:ad:98:76:fe:d7:54:ca:97:6d:3e:dd:16:eb:ca:e9:
63:51:5c:29:04:12:37:05:86:28:85:ae:85:07:a7:a3:80:e6:
b7:9e:7f:f8:45:06:cb:c0:d7:5e:11:9e:4e:c8:f8:69:a6:0a:
28:79:fb:31:76:35:d6:15:88:47:bf:1e:5f:46:87:ec:3a:2d:
12:20:e3:68:a6:f9:68:55:7c:9d:02:c7:8e:46:d8:f4:c0:ed:
85:2c:27:b4:18:9d:af:98:68:60:39:a6:fd:b7:d2:bd:c3:94:
06:c3:c8:f5:01:3f:e8:17:2e:f4:27:ef:c0:ea:8a:9d:9e:9e:
5d:75:54:91:ea:b7:6f:11:d0:bd:18:30:e0:71:61:fa:40:99:
a3:95:04:90:fb:98:f0:2c:74:b1:97:55:d7:09:c6:d8:4a:96:
2e:86:e3:e5:e7:3a:4d:76:93:c8:cb:ee:28:3f:0f:df:a6:06:
78:12:83:b4:2d:ff:e4:13:e3:e6:75:bc:65:bd:cd:6d:63:60:
cc:47:12:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:38:51 2024 by rpki-client on console-fra.rpki-client.org