Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/4D_cWEO9J3jXbieponuH0PmpALU.roa
File: 4D_cWEO9J3jXbieponuH0PmpALU.roa (raw, json)
Hash identifier: DsXj08TMeG2orlIedzhC3B+LMOWJe2Rs497+rHNX8jk=
Subject key identifier: E0:3F:DC:58:43:BD:27:78:D7:6E:27:A9:A2:7B:87:D0:F9:A9:00:B5
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 018D8563A12E608B3D5991C6E4FCE37E66BC
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/4D_cWEO9J3jXbieponuH0PmpALU.roa
Signing time: Wed 07 Feb 2024 21:05:15 +0000
ROA not before: Wed 07 Feb 2024 21:05:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 31.14.37.0/24 maxlen: 24
185.155.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:85:63:a1:2e:60:8b:3d:59:91:c6:e4:fc:e3:7e:66:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Feb 7 21:05:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e03fdc5843bd2778d76e27a9a27b87d0f9a900b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f8:b0:e0:02:19:ce:36:d2:31:39:ed:fe:89:
b3:17:0d:18:6b:40:f8:d8:dc:67:eb:92:84:54:71:
ea:76:4b:8c:05:e7:16:50:68:7e:07:3d:b3:db:9f:
87:87:54:ac:b7:39:63:4e:14:11:5f:69:50:1f:85:
b6:6f:0d:94:58:56:61:e1:ab:f1:81:99:46:24:23:
b6:d0:38:f8:f8:0a:1b:85:28:f1:db:e9:6a:69:bf:
a4:3c:e6:91:71:0b:62:2a:b8:da:78:60:18:91:f6:
bf:f1:de:62:ac:54:14:b9:35:9f:3b:d4:df:c1:84:
9a:e3:b4:51:f7:20:bc:1a:7f:19:d1:2c:60:cc:ac:
57:39:46:35:04:48:1d:59:98:f6:3c:b8:70:c8:aa:
42:40:ef:f3:3d:ac:cb:24:b9:b3:24:ba:3f:b4:5d:
f0:10:a5:4d:cc:40:23:b5:eb:d8:f0:d4:2d:c4:28:
07:45:02:ef:40:07:a5:e9:66:91:32:43:b7:0e:68:
e7:ab:49:87:ec:12:fe:aa:43:de:b1:4e:ac:0e:44:
e1:20:99:2f:3d:aa:6c:8d:95:31:fe:f2:1d:cb:a1:
c0:fd:71:43:63:a6:d1:49:7c:c2:0d:e4:a1:76:7a:
0d:df:af:aa:f5:a1:ca:70:d5:7e:c2:d3:64:4c:0d:
3b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3F:DC:58:43:BD:27:78:D7:6E:27:A9:A2:7B:87:D0:F9:A9:00:B5
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/4D_cWEO9J3jXbieponuH0PmpALU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.37.0/24
185.155.52.0/24
Signature Algorithm: sha256WithRSAEncryption
27:80:ef:74:af:35:aa:f5:8c:c3:dd:7f:0e:9e:09:1c:09:92:
8d:71:39:a0:b0:a4:9e:04:ea:13:a5:76:9e:9c:eb:85:70:03:
01:65:1d:11:ae:5c:6d:4e:bb:02:11:e1:36:73:6e:ce:50:06:
58:4d:1f:3b:5c:9b:c0:44:9b:57:2e:40:ad:b7:98:8f:17:3f:
57:f0:df:71:c9:f4:9d:15:c6:9b:98:86:83:30:02:95:95:9b:
66:3b:4d:66:25:a5:2f:ab:1e:76:57:69:55:32:ea:76:81:db:
95:3c:04:cf:61:10:ae:ea:08:8b:2e:37:a8:55:8e:62:79:97:
46:d5:56:19:93:ce:d7:5e:99:26:95:3d:ca:6f:30:e6:cf:50:
2f:43:bf:ed:42:1b:46:f6:cc:58:22:c2:2f:e0:0a:a2:0c:e4:
55:e0:e1:d8:02:6b:43:69:fa:63:29:42:da:4c:b2:d1:5e:d9:
5a:24:88:99:26:b9:71:01:cc:3b:52:5b:81:38:ea:5d:8a:2a:
62:95:eb:b9:78:3e:f2:a6:31:f4:ee:a9:7c:b9:c1:f8:58:1d:
37:a4:80:6c:06:4e:8c:75:80:9e:d1:b3:8a:6e:7b:6d:bf:07:
98:fc:54:47:8b:27:52:c2:84:4b:88:07:e8:64:a2:bd:bb:5b:
58:f0:76:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:47:18 2024 by rpki-client on console-fra.rpki-client.org