Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/4GLC0lNr78IMED0KCVMAmHYQaGo.roa
File: 4GLC0lNr78IMED0KCVMAmHYQaGo.roa (raw, json)
Hash identifier: xJQAgZPLhSrKdeKWf013a9j99zq2KJN6fNlFc1rLoJ4=
Subject key identifier: E0:62:C2:D2:53:6B:EF:C2:0C:10:3D:0A:09:53:00:98:76:10:68:6A
Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6
Certificate serial: 018CC801B1D2EF6E7A2099E4275F5F94D526
Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/4GLC0lNr78IMED0KCVMAmHYQaGo.roa
Signing time: Tue 02 Jan 2024 02:30:03 +0000
ROA not before: Tue 02 Jan 2024 02:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61113
IP address blocks: 37.209.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:b1:d2:ef:6e:7a:20:99:e4:27:5f:5f:94:d5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6
Validity
Not Before: Jan 2 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e062c2d2536befc20c103d0a095300987610686a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:73:73:b0:52:ca:06:bb:b9:08:4b:58:4f:cf:
c6:81:85:92:c5:59:0b:be:17:2f:f8:79:74:8c:b0:
2e:2e:25:6b:c3:4a:df:3a:86:7b:79:4c:6c:59:c1:
88:2e:77:f6:32:79:0a:42:dd:65:ac:80:4c:35:13:
85:51:2d:de:b4:33:23:87:91:4f:b1:63:c0:1b:a8:
7f:7c:4f:33:f7:e1:7c:70:c1:18:64:92:21:1b:02:
a6:f1:b5:37:e0:13:48:e4:92:64:2b:21:7a:80:17:
d3:34:1a:f6:35:7d:88:bc:32:50:b8:ee:2e:4c:2d:
9a:5f:5b:e5:8f:b8:e5:d0:e6:b3:cd:ff:a1:53:76:
14:3a:a8:16:e3:84:66:08:24:6c:ef:77:88:79:58:
76:82:ab:7b:75:13:ce:f4:3c:78:58:e9:83:73:26:
4a:25:d2:f3:da:95:cf:44:b6:a9:84:d9:d6:a3:1c:
57:98:89:3e:e9:1e:a2:23:c2:09:90:75:3a:6f:da:
d8:b4:af:7c:e8:bf:7c:89:d4:b3:65:8a:0d:21:0d:
57:07:a4:6e:ed:b5:4f:d4:59:53:8b:61:5f:a0:d3:
5a:07:1c:f7:38:8a:d7:0d:b2:1d:59:19:f1:49:79:
de:68:ca:f6:34:1a:16:db:ed:bc:3d:82:73:2b:d9:
3f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:62:C2:D2:53:6B:EF:C2:0C:10:3D:0A:09:53:00:98:76:10:68:6A
X509v3 Authority Key Identifier:
keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/4GLC0lNr78IMED0KCVMAmHYQaGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.251.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ae:2c:e6:d0:87:a4:8d:94:17:c8:3f:87:1e:2d:06:a3:96:
0a:39:bf:48:cc:61:55:f8:bd:fc:64:20:ea:4f:56:c9:6c:42:
ff:5b:cc:dc:e1:5d:fd:22:20:ae:68:fd:d7:94:f1:5a:88:18:
b1:5c:2e:4e:2d:92:93:78:90:2d:47:e5:64:f6:e3:24:80:3d:
80:cf:6a:b8:5e:67:78:f3:a6:ac:ff:d5:d7:96:04:82:2d:30:
a4:47:7c:30:6c:b8:02:58:39:de:59:40:8c:b2:2f:a7:f7:a8:
5b:0a:3e:99:2d:e5:05:a9:2a:84:26:57:a0:2d:c3:55:cc:cd:
d5:08:e3:f0:3e:5e:15:75:00:7b:94:1f:70:32:41:a4:c0:30:
a3:3f:60:d7:97:3f:cc:4c:ba:b6:8b:38:19:37:54:72:35:1c:
cf:a5:dc:9c:f4:16:c3:b0:38:f4:0c:6c:a9:44:2c:6c:02:ee:
40:3e:6c:47:c3:66:c1:d5:46:9c:0f:0b:7c:68:47:72:a5:2a:
9b:8f:cb:1d:37:8f:eb:ea:03:ae:2e:b2:78:4e:c8:83:29:d2:
eb:18:89:6d:29:a0:d8:26:1a:67:d8:78:98:a5:24:8b:58:f6:
4e:3e:37:87:5c:cb:61:56:42:47:b3:b3:71:f1:de:0e:d7:e8:
9c:65:ac:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 19:57:52 2024 by rpki-client on console-fra.rpki-client.org