Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/4FJXhvtwSIAIxFCmv_NFDtgf840.roa
File: 4FJXhvtwSIAIxFCmv_NFDtgf840.roa (raw, json)
Hash identifier: Am00g/qINl795UxkMqTmPbUPpoT9CGPPeV+Zdx0ztAo=
Subject key identifier: E0:52:57:86:FB:70:48:80:08:C4:50:A6:BF:F3:45:0E:D8:1F:F3:8D
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A74EB91B7615E60541EED6B2B5EFB
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/4FJXhvtwSIAIxFCmv_NFDtgf840.roa
Signing time: Mon 01 Jan 2024 18:30:17 +0000
ROA not before: Mon 01 Jan 2024 18:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24774
IP address blocks: 37.230.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:74:eb:91:b7:61:5e:60:54:1e:ed:6b:2b:5e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0525786fb70488008c450a6bff3450ed81ff38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:56:32:16:c8:10:f6:b9:fd:c7:bf:48:26:
38:a6:a1:09:c3:2c:bb:69:3e:2c:d4:d8:6d:fb:58:
dc:df:e1:64:c6:66:6a:2d:14:bb:56:bd:06:27:b5:
0a:95:ca:a8:a8:68:c4:91:ce:9a:2b:fb:86:63:d5:
10:a7:d8:1a:a5:9a:e9:cc:74:44:8e:45:0a:6e:ca:
b3:58:e4:0d:54:1b:a3:e0:25:f9:20:5d:ec:dd:58:
70:55:60:15:3c:6e:d9:84:76:f8:97:b2:26:05:4c:
0c:99:50:ca:8b:53:ca:2c:47:c0:f4:d8:91:b1:48:
19:e4:02:0f:5f:42:ac:54:0c:28:5f:1f:a4:f9:33:
4d:d2:c9:74:f3:40:a4:ba:44:7f:5c:0f:8c:77:25:
b8:89:78:c7:3d:97:35:6b:66:75:1a:9d:b8:d3:52:
39:25:b8:80:f8:45:15:7a:1d:43:76:a1:86:fc:38:
7e:5a:dd:f8:8a:d4:61:53:50:4b:6e:3d:de:d6:10:
7e:ca:11:b1:93:ba:6f:15:33:f1:16:9e:3e:43:a9:
8a:4a:63:de:30:09:6e:e0:9b:ee:41:bf:d2:ef:8d:
2a:4a:b9:0d:e5:4f:e5:6e:fb:2a:2a:c7:2d:52:2b:
e7:3e:49:36:67:bd:96:c0:b5:b8:1e:00:65:ec:c7:
1e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:52:57:86:FB:70:48:80:08:C4:50:A6:BF:F3:45:0E:D8:1F:F3:8D
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/4FJXhvtwSIAIxFCmv_NFDtgf840.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.161.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:40:46:8f:12:51:9d:bc:5c:fe:2b:5b:20:37:42:d0:2e:b4:
43:45:84:9f:ce:74:db:91:75:8f:c9:9b:f0:15:a6:35:70:27:
70:6f:35:40:ae:97:75:eb:fc:a8:40:84:34:52:7f:a9:18:8a:
79:84:c9:34:bb:12:fa:21:50:51:f2:c8:4e:be:bb:01:69:21:
6a:e5:02:9f:7b:4e:a0:ee:f4:11:85:24:bd:71:95:2a:ad:43:
2f:e0:e9:e0:5b:9d:5a:92:db:cd:66:9e:3d:b2:bc:c7:dc:67:
29:a1:8a:f7:f2:1c:35:b0:c2:2a:1d:61:08:8a:ab:ee:8c:14:
b8:13:bb:51:37:34:bd:e0:a7:0e:06:18:7c:67:e9:b5:c7:37:
fb:df:93:9a:89:8e:53:06:b7:2e:6c:13:4f:d5:d0:0e:7e:68:
4f:ba:d8:db:b1:ef:c4:29:63:a0:f8:10:fb:00:76:fd:63:3d:
3b:a4:79:ad:79:c1:49:71:44:8a:5d:ce:e5:e6:8c:e2:0f:fa:
f5:88:b8:da:da:51:42:4e:a6:13:b6:57:24:ba:0a:be:c0:38:
50:c9:90:4f:aa:60:c1:3d:7a:d2:6f:de:c8:ab:48:45:41:c4:
d7:b7:7d:33:14:3e:90:51:f6:23:a3:b5:b7:63:23:f2:c7:6a:
65:85:7c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:45:12 2024 by rpki-client on console-ams.rpki-client.org