Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/014GfgLnO9NLJMlz1ji33p7R_mE.roa
File: 014GfgLnO9NLJMlz1ji33p7R_mE.roa (raw, json)
Hash identifier: yREDgOB+2t7MJ1C0ylSpAXbJSfFhGmuVmZ9g2tLRmzw=
Subject key identifier: D3:5E:06:7E:02:E7:3B:D3:4B:24:C9:73:D6:38:B7:DE:9E:D1:FE:61
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0192C8F0309E798595D8696D671BF8EAE850
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/014GfgLnO9NLJMlz1ji33p7R_mE.roa
Signing time: Sat 26 Oct 2024 13:07:17 +0000
ROA not before: Sat 26 Oct 2024 13:07:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199524
IP address blocks: 37.202.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c8:f0:30:9e:79:85:95:d8:69:6d:67:1b:f8:ea:e8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 26 13:07:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d35e067e02e73bd34b24c973d638b7de9ed1fe61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b0:93:5d:49:f9:5a:af:66:18:a0:88:13:02:
b7:ce:37:70:46:48:5f:bd:ed:9d:71:12:0f:b5:30:
00:31:d7:f1:5b:de:c0:8c:5d:a6:bc:44:51:b6:dd:
e5:13:d7:60:a5:ff:65:2d:f1:73:5c:12:68:25:ad:
e9:be:b2:ce:b4:c4:78:f9:88:08:22:50:f1:9a:cd:
1b:34:24:3f:d8:0b:84:e1:cc:47:70:21:c2:f1:e3:
de:69:50:fb:96:d8:77:0e:67:ee:65:92:a3:23:85:
94:2a:54:fe:a9:0a:cf:23:7f:41:25:00:bc:c9:34:
1e:5e:04:d4:92:8a:50:52:e2:28:b9:f9:2b:06:0b:
f0:cf:ad:c0:65:44:76:33:13:73:09:40:a5:56:91:
30:89:8f:fc:b1:79:61:0f:e9:74:d1:57:68:80:c3:
db:11:43:8d:f8:e9:27:4f:3b:49:28:21:9e:ff:55:
53:3e:b2:2e:70:65:b4:93:50:fd:c7:42:93:d9:e8:
b1:1f:d8:2a:6a:e8:1c:eb:8b:ef:5b:f3:9f:c5:35:
7c:ad:06:b5:42:16:08:fb:46:06:e1:b1:24:e7:1b:
b0:27:3d:93:9d:c6:fe:3c:94:6c:3c:4c:4d:eb:4f:
60:98:35:4b:4b:65:9d:1c:25:a3:38:9f:ad:c1:31:
a7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5E:06:7E:02:E7:3B:D3:4B:24:C9:73:D6:38:B7:DE:9E:D1:FE:61
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/014GfgLnO9NLJMlz1ji33p7R_mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.217.0/24
Signature Algorithm: sha256WithRSAEncryption
02:01:2c:22:e2:10:22:3a:43:e8:f4:4d:44:3b:4c:ed:1f:ab:
40:df:5a:d6:98:07:b7:8e:99:83:e0:7b:ab:21:1e:00:00:05:
90:90:2f:33:19:52:3a:40:b4:fe:8c:94:b5:01:19:1d:7a:49:
86:64:ce:ea:8e:a8:79:37:23:ab:f0:7f:f0:8e:fe:d1:a6:1e:
15:94:8c:55:8e:ce:ad:8c:58:84:3a:48:8d:09:f1:67:f8:52:
59:b1:51:54:1e:8d:1f:0f:7e:57:c6:d6:83:09:79:81:b0:bb:
25:40:3d:5e:70:3e:10:6c:b7:b8:2b:9e:59:60:9b:5c:ad:f2:
b9:87:87:fe:9b:1c:f4:9e:c2:fe:8d:c4:3e:a7:09:ae:2d:d7:
fe:31:6b:31:b5:25:2b:23:ec:22:16:a0:53:94:9f:c1:f5:37:
84:df:92:43:83:ae:0d:b5:1b:2a:82:d1:47:ae:e2:f3:9a:c6:
84:1f:a1:f6:3c:b6:12:8b:0b:32:1c:88:84:20:98:61:a0:99:
ea:ae:ba:79:bb:5d:da:c5:76:a8:2c:b3:92:1e:ca:1a:a0:42:
ed:1b:07:cf:db:85:24:bf:02:fb:56:6e:cb:77:1c:88:8d:0c:
a6:dc:db:a5:d2:73:49:cd:05:86:1c:37:47:ea:61:f0:88:a4:
f3:7c:f9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:30:39 2024 by rpki-client on console-ams.rpki-client.org