Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dh7M4jFl6yNCRF4YMFcNSoQ6hwI.roa
File: dh7M4jFl6yNCRF4YMFcNSoQ6hwI.roa (raw, json)
Hash identifier: LXgD4oj+DfSvth6MbDiig1vHq7e4lyhhCpoqBLX3Gn0=
Subject key identifier: 76:1E:CC:E2:31:65:EB:23:42:44:5E:18:30:57:0D:4A:84:3A:87:02
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0192B28CFD29126B249F417B0F29B5B35875
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dh7M4jFl6yNCRF4YMFcNSoQ6hwI.roa
Signing time: Tue 22 Oct 2024 04:47:17 +0000
ROA not before: Tue 22 Oct 2024 04:47:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214025
IP address blocks: 37.202.220.0/24 maxlen: 24
37.202.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b2:8c:fd:29:12:6b:24:9f:41:7b:0f:29:b5:b3:58:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 22 04:47:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=761ecce23165eb2342445e1830570d4a843a8702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:fd:40:0a:ee:be:e0:89:79:9e:f8:8c:80:
af:b6:54:19:c9:8e:81:6a:da:b2:ed:29:4c:d5:a8:
e6:21:f8:70:cc:53:7f:bd:17:f4:a0:11:6e:37:b0:
e1:75:f4:37:08:d6:80:05:f2:75:f9:c2:05:2e:cd:
fb:6c:4d:0d:92:b0:bf:3c:af:12:26:a4:30:01:48:
37:b2:e4:51:43:a1:47:76:4e:b6:df:a8:90:d2:f3:
fc:29:f5:a4:bb:d5:ed:7b:34:b3:0d:b1:84:c6:60:
e6:02:fa:84:a6:c1:a2:21:d1:02:53:4c:bd:67:0c:
89:a7:f1:6e:96:5a:49:99:0e:29:32:88:b3:7e:c9:
84:3f:35:ff:35:30:59:e0:4d:30:41:05:55:db:fe:
47:ad:84:6a:4e:7a:cb:f9:64:e2:ce:44:94:65:a0:
c3:5c:bb:5a:da:ce:00:3a:0a:96:87:78:64:b7:5e:
58:59:60:02:9e:11:23:d0:76:fb:b6:1e:b6:84:49:
4e:59:a2:6b:e7:8a:db:56:77:6f:1c:f2:68:47:d4:
bc:e9:25:34:3f:e9:cf:6d:b6:1a:49:58:ca:c8:5f:
6f:fb:70:1d:01:ff:fa:2c:79:99:56:fb:ff:d5:f5:
aa:bb:2f:c7:2b:f8:8f:7d:d4:01:ca:3f:08:c2:6b:
29:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1E:CC:E2:31:65:EB:23:42:44:5E:18:30:57:0D:4A:84:3A:87:02
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dh7M4jFl6yNCRF4YMFcNSoQ6hwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.220.0/23
Signature Algorithm: sha256WithRSAEncryption
70:a2:60:ef:53:18:59:cf:7d:87:d5:04:d7:ee:2d:9b:fd:b0:
78:1f:55:d6:59:ae:02:88:f5:47:64:f9:ec:2c:df:6b:3c:0d:
0e:35:83:83:31:5c:db:02:dd:08:4e:19:b7:0b:a1:a4:5e:4b:
95:c8:01:07:14:de:6a:00:05:b2:9c:10:d3:41:ce:f9:43:4f:
d5:b5:56:51:f2:70:ff:40:5d:fe:3b:ff:09:71:b5:a4:e9:58:
fc:79:67:ba:fb:a9:e9:26:45:26:14:40:9d:00:22:4c:09:43:
26:df:7b:c2:99:cc:3f:6d:04:96:c1:8f:14:e4:93:31:f2:6d:
d1:83:3b:89:cb:d9:92:7e:98:ee:30:d6:75:d6:5c:11:94:6c:
ec:71:30:7d:1f:cc:dd:af:1b:55:4d:b2:79:d0:19:2e:27:cb:
0a:31:47:dc:fe:9a:59:62:7f:b9:be:65:f3:4c:20:b6:1c:92:
ea:8a:27:63:c6:47:53:be:f3:c1:b6:d5:54:0b:6a:e0:6c:1a:
5f:ef:46:ba:f8:d9:b9:22:ec:e9:71:f5:ca:00:fa:01:4e:f6:
f5:21:ed:dc:d1:41:53:b6:88:27:88:83:f2:a3:37:dc:dd:1a:
a9:5d:b2:cb:34:b1:ad:71:6f:f2:82:74:92:f1:6b:2a:c1:c7:
b2:47:80:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:18:00 2024 by rpki-client on console-fra.rpki-client.org