Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/sm69a1of4VH3HCsy-0sqDuhwIzU.roa
File: sm69a1of4VH3HCsy-0sqDuhwIzU.roa (raw, json)
Hash identifier: 8727WV78dITMcNzq5RQ1LLEdVexkVkIeWpytRyS2zbQ=
Subject key identifier: B2:6E:BD:6B:5A:1F:E1:51:F7:1C:2B:32:FB:4B:2A:0E:E8:70:23:35
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 018CC4923E7A779BBCB263E749B2DDD322A8
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/sm69a1of4VH3HCsy-0sqDuhwIzU.roa
Signing time: Mon 01 Jan 2024 10:29:27 +0000
ROA not before: Mon 01 Jan 2024 10:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397230
IP address blocks: 37.209.192.0/24 maxlen: 24
37.209.198.0/24 maxlen: 24
37.209.196.0/24 maxlen: 24
37.209.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 12:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:3e:7a:77:9b:bc:b2:63:e7:49:b2:dd:d3:22:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 1 10:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b26ebd6b5a1fe151f71c2b32fb4b2a0ee8702335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:79:51:64:18:16:3b:2f:e9:26:26:41:c2:ff:
d4:43:12:02:41:d3:b8:7b:c1:13:b4:5c:c8:08:ec:
b9:6f:8e:a4:7f:e6:fc:eb:27:03:ea:d4:88:d4:9f:
5a:c9:10:ca:c5:30:5a:90:64:44:7c:ba:3b:9b:64:
16:32:60:69:f8:e4:b3:86:50:7d:29:f0:6b:4a:75:
53:e7:ab:25:6a:55:9b:c2:cd:ac:b1:46:a5:ea:a2:
97:7c:e6:55:54:89:64:59:03:87:82:e5:20:be:9d:
81:5d:17:93:39:16:bc:31:71:37:63:03:7b:1d:55:
d0:66:4d:ce:fd:9f:f8:ca:87:2b:c3:92:43:e4:ca:
30:cc:7f:e2:33:97:c7:f4:c1:fe:57:65:41:90:08:
46:e0:44:2a:c4:f7:47:8b:c0:7e:01:e5:8a:ba:17:
55:eb:b8:04:df:a3:a7:b8:c3:98:3c:a5:77:4f:7d:
f6:13:6d:a7:cd:77:7e:0d:05:6d:5f:0f:5a:14:86:
0d:33:75:a0:25:b9:1a:5b:49:47:68:3e:8a:47:ea:
24:44:c6:a9:7b:23:b8:33:0f:b6:0a:c8:3a:f2:6b:
19:33:4a:09:8c:76:74:1c:9b:1d:f4:86:5d:f9:5e:
23:33:bb:2b:16:6a:9b:85:99:2a:5f:9a:b7:05:76:
5e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6E:BD:6B:5A:1F:E1:51:F7:1C:2B:32:FB:4B:2A:0E:E8:70:23:35
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/sm69a1of4VH3HCsy-0sqDuhwIzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.192.0/24
37.209.194.0/24
37.209.196.0/24
37.209.198.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:d6:28:3a:4f:7d:10:39:ab:ec:0d:6f:05:df:0b:7b:19:7d:
21:7f:ca:b1:c4:f7:0d:8a:e9:33:1a:0b:5c:6c:b5:49:42:f1:
2b:84:69:c6:70:32:e7:32:a6:ee:fa:4b:cc:8a:2a:28:e7:c7:
2c:24:32:38:19:84:34:c5:fa:4c:18:5f:df:45:07:7a:07:24:
7e:b5:e3:ff:ef:74:0d:d9:7a:6e:86:c1:b2:aa:64:9a:44:99:
5c:f5:47:e2:c7:f8:32:ff:13:2a:0e:21:c5:62:84:55:bf:d7:
21:cb:79:8c:a2:bc:b3:c2:70:fb:b4:f6:a1:f5:db:f1:f3:4a:
a7:d5:64:b8:65:40:d5:f5:93:ca:ee:82:d8:7c:f5:6a:82:3f:
d9:f9:8a:ac:da:d0:6b:4f:89:c6:0e:2c:37:3a:92:41:eb:fa:
9b:f0:1a:0d:36:50:6d:9a:4c:0f:75:50:db:a4:65:e6:d5:66:
5f:68:be:3f:f7:c1:d6:a0:3d:13:24:27:7d:f4:35:76:3d:b8:
bc:22:b7:13:e1:84:63:63:82:36:86:4f:6e:1d:05:26:27:24:
d5:d2:cb:a7:89:ca:68:d9:8c:35:73:9f:ff:a0:a0:b9:20:d3:
bc:1c:b3:03:58:cf:9b:2c:c8:19:43:d7:de:6e:6e:df:00:ef:
bf:d1:87:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 16:43:22 2024 by rpki-client on console-fra.rpki-client.org