Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Shkr6LOfRzPJguwQONwUO3QMuKk.roa
File: Shkr6LOfRzPJguwQONwUO3QMuKk.roa (raw, json)
Hash identifier: a7l6f8BYs6SXUYsEuczFfyM/J5RVezkfI0Up8ekkbYg=
Subject key identifier: 4A:19:2B:E8:B3:9F:47:33:C9:82:EC:10:38:DC:14:3B:74:0C:B8:A9
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369B716172A51EA3A4962BAF3C16B57
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Shkr6LOfRzPJguwQONwUO3QMuKk.roa
Signing time: Wed 01 Jan 2025 19:48:38 +0000
ROA not before: Wed 01 Jan 2025 19:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62342
IP address blocks: 37.156.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:b7:16:17:2a:51:ea:3a:49:62:ba:f3:c1:6b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a192be8b39f4733c982ec1038dc143b740cb8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:ef:7d:d5:d7:dc:7d:ae:e3:cd:37:8d:fb:
db:b2:18:13:9b:bb:a3:35:b0:83:9e:c1:a4:50:40:
c2:89:ac:52:12:47:3d:c6:11:b4:2f:d8:47:7a:91:
76:16:1e:29:af:ba:db:1a:95:e6:4a:87:35:77:a0:
be:76:a0:c5:47:48:02:e5:b6:ca:5c:90:9a:09:df:
1e:cf:56:ea:2c:86:14:23:17:9e:46:0f:c2:86:cd:
f3:0b:be:78:77:0b:42:4b:fe:dd:5b:ea:9d:67:04:
e0:b8:2b:10:c8:90:01:ca:48:80:01:e2:e6:c0:f0:
c4:6a:61:5f:8c:8a:af:5e:af:5a:b8:de:25:63:9d:
14:ac:11:29:f3:ca:2f:92:81:81:4b:f2:74:ac:0c:
e4:03:f5:a5:d7:d0:55:48:49:42:bf:59:13:8e:83:
c4:04:a9:ec:5c:22:69:59:52:e1:dc:a2:12:f8:ca:
f5:47:0b:cf:8e:73:2a:3f:1f:64:1e:0f:be:75:6f:
32:c8:1c:a4:3a:0a:97:47:27:92:c9:6d:80:aa:2c:
3e:bb:5a:29:53:0b:b8:a0:ce:f4:21:2d:4a:62:be:
7e:c7:eb:fe:f4:bd:31:4f:fc:df:7e:c9:ae:78:d4:
7a:8e:2e:69:f5:91:f6:6b:67:ff:9a:a1:73:83:aa:
14:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:19:2B:E8:B3:9F:47:33:C9:82:EC:10:38:DC:14:3B:74:0C:B8:A9
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Shkr6LOfRzPJguwQONwUO3QMuKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.36.0/24
Signature Algorithm: sha256WithRSAEncryption
28:be:c8:61:c1:71:93:e7:a2:17:57:9b:e8:55:16:4c:83:27:
64:da:4a:5b:0a:e3:84:2c:57:52:cb:5b:c8:d7:16:ee:05:82:
d9:bd:40:f3:34:43:d4:6b:5c:b6:fd:af:72:58:0c:46:a7:6c:
48:f7:f1:6a:3b:47:30:83:6a:ff:e4:b8:03:d6:85:ab:3f:fa:
89:05:30:5f:e3:d6:e6:d3:a3:ed:68:76:66:6a:1b:0d:48:b2:
c0:c2:05:b6:72:ef:51:64:b3:7e:e5:d8:a2:58:09:6f:29:db:
b5:6a:0d:46:b9:bd:f8:4e:fb:c2:aa:79:9d:84:70:02:4f:2a:
bc:45:de:5b:8d:79:c5:89:ad:ce:71:e0:8d:ac:5c:46:9b:ac:
aa:48:7c:53:18:d9:8e:57:a8:da:6d:3f:66:2f:a7:ba:14:55:
e6:af:6b:64:8b:7c:a8:b3:b4:f2:61:12:af:d5:dd:ae:c4:25:
78:34:a3:e6:2a:a4:3d:d7:44:0b:75:eb:31:6b:0b:d7:78:13:
40:db:c9:15:34:14:a8:35:3f:4a:49:1c:2e:40:38:81:60:d7:
68:63:c7:72:e4:64:af:61:04:dc:77:bc:54:d8:1a:37:b0:42:
64:a6:65:82:93:12:cf:6f:b1:1e:b4:36:44:67:b6:20:36:a4:
d2:43:d0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:53 2025 by rpki-client