Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/5CwW_ak8h3Q9M140BfcaZ-iWZ70.roa
File: 5CwW_ak8h3Q9M140BfcaZ-iWZ70.roa (raw, json)
Hash identifier: D+znHHEmm0LNDjNhRSWoIywbv4Ln7gg4HrBa84FX7l8=
Subject key identifier: E4:2C:16:FD:A9:3C:87:74:3D:33:5E:34:05:F7:1A:67:E8:96:67:BD
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A84D134DD2BCD7E7FEB9794389D39
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/5CwW_ak8h3Q9M140BfcaZ-iWZ70.roa
Signing time: Mon 01 Jan 2024 18:30:21 +0000
ROA not before: Mon 01 Jan 2024 18:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204231
IP address blocks: 37.18.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:84:d1:34:dd:2b:cd:7e:7f:eb:97:94:38:9d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e42c16fda93c87743d335e3405f71a67e89667bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f2:f0:20:bd:5d:79:01:7e:a6:9c:0b:80:35:
54:c4:a9:e3:31:e9:5d:5c:93:cd:ca:bc:11:2d:1d:
75:ae:14:41:26:54:db:57:cf:2f:78:6c:54:27:37:
45:c3:a9:6c:64:81:86:94:f6:5f:01:eb:4e:bc:b8:
d6:56:f3:d0:33:7f:6c:70:53:5a:aa:3a:39:f3:ce:
dc:2a:41:09:0d:a9:19:83:7d:09:8f:12:de:7e:fc:
0c:23:0d:c5:eb:e4:aa:58:84:be:27:02:59:b8:6a:
13:8d:5c:8a:44:1b:e0:bb:c6:af:ad:2c:af:f1:66:
79:ec:99:7a:a7:80:3a:11:41:7b:c3:db:08:00:84:
95:19:0e:77:7d:7f:c6:c5:17:86:af:49:12:58:33:
6d:45:39:2c:06:98:a1:73:02:7d:0b:9b:9b:3e:3d:
25:d1:ac:cc:63:3f:04:cf:d5:f5:44:0d:7c:db:2d:
50:52:0c:c4:a8:57:24:1c:0f:b2:56:c8:9e:62:1a:
d4:6f:64:78:7c:2a:b3:1e:85:77:81:12:7e:05:da:
0b:f6:fe:28:b8:a4:8d:43:7a:4c:50:d8:39:66:7a:
d8:fd:fa:10:72:20:04:19:93:af:ed:6c:69:0a:ef:
c6:03:ca:8a:d1:84:ec:5a:c3:bb:ee:66:f5:71:7e:
eb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2C:16:FD:A9:3C:87:74:3D:33:5E:34:05:F7:1A:67:E8:96:67:BD
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/5CwW_ak8h3Q9M140BfcaZ-iWZ70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.85.0/24
Signature Algorithm: sha256WithRSAEncryption
66:54:62:4f:ba:01:bb:fb:bb:29:2f:04:5f:8a:7d:29:83:f7:
d5:4e:40:0f:7a:69:1d:53:47:52:20:5c:aa:37:3a:c7:1a:3f:
d2:be:7c:60:9b:92:af:da:60:3a:ef:72:86:b6:b2:71:3e:49:
c1:c2:08:b6:cc:fb:1e:93:cb:a5:82:fd:1b:ba:50:85:7a:f1:
2c:e8:b6:88:72:e4:1c:b1:de:92:10:51:12:16:43:79:4b:92:
97:fe:9b:d8:67:4a:ec:8e:55:5f:d6:fb:fb:98:ac:a6:1a:a0:
2c:0e:34:8b:9e:da:a1:42:fb:20:2a:ca:ae:55:5f:db:16:ff:
17:3a:4f:ac:e4:04:54:fc:f9:bb:b9:72:fb:c7:30:91:bf:b3:
a8:ee:42:5d:50:0d:83:57:0a:8d:e1:6f:a3:96:b7:46:31:78:
77:29:e5:72:35:80:33:06:7e:a4:4c:18:95:bf:9c:12:3c:56:
74:20:56:bd:e7:0a:86:14:af:87:84:ba:3e:9f:d8:bc:db:7b:
1f:f7:e3:18:6f:ca:92:ef:4f:55:30:cc:38:35:06:6c:46:41:
f7:19:8c:07:0e:99:b0:b2:92:40:b7:a4:03:c2:7d:b1:7e:58:
cf:08:5d:46:6a:5e:b4:b4:fd:de:ab:4b:20:ea:71:38:4f:45:
96:f0:43:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:03:13 2024 by rpki-client on console-ams.rpki-client.org