Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/f2UBKOitvJ6P_rFmjW4354SQvaA.roa
File: f2UBKOitvJ6P_rFmjW4354SQvaA.roa (raw, json)
Hash identifier: oNbm0aB9UvRzHjeAMNd5DhjPerlRMhPWUypdvhPKdlM=
Subject key identifier: 7F:65:01:28:E8:AD:BC:9E:8F:FE:B1:66:8D:6E:37:E7:84:90:BD:A0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0192A3B0F9A46B4E344D2BEBED0010BBFA48
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/f2UBKOitvJ6P_rFmjW4354SQvaA.roa
Signing time: Sat 19 Oct 2024 07:32:17 +0000
ROA not before: Sat 19 Oct 2024 07:32:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 37.202.219.0/24 maxlen: 24
37.202.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a3:b0:f9:a4:6b:4e:34:4d:2b:eb:ed:00:10:bb:fa:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 19 07:32:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f650128e8adbc9e8ffeb1668d6e37e78490bda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:49:43:b6:24:d7:7d:ab:ac:8a:0d:83:d5:d7:
7e:ec:bc:f9:7c:a9:cb:0b:d2:a8:9a:70:76:4e:df:
c0:76:84:07:a2:71:ae:a7:a3:f3:60:0d:af:44:d2:
79:49:c0:a1:45:97:b0:9b:7e:7d:a9:87:d1:7d:96:
2e:02:6b:e8:98:22:fb:33:7f:bf:d7:f5:ad:fa:03:
62:99:5b:db:a0:27:8d:c9:50:95:ef:2e:0f:e2:76:
5b:22:27:de:29:6d:e8:14:d5:96:2a:d8:7f:8b:bc:
16:0a:7b:59:6c:02:f4:6b:61:38:8e:11:3d:82:58:
fe:f6:ee:06:0c:ba:f1:11:6a:0b:7e:0b:d3:92:9a:
93:f0:c4:b3:a0:24:d7:48:fb:b8:be:98:e2:7f:8e:
8b:4c:01:4a:dd:ca:72:5b:c4:7b:c7:9b:20:64:96:
19:4d:be:38:30:16:fa:f5:fc:14:9c:16:e8:01:c0:
cc:b3:0a:5f:27:ce:b9:4b:83:6e:25:9f:98:6f:8d:
6d:5b:7c:17:20:39:db:b5:0c:8c:cd:15:81:12:63:
67:de:b4:01:b3:16:1f:88:aa:aa:41:f4:1d:ac:b1:
6b:bc:b6:10:fe:33:85:83:2c:fe:40:83:f1:20:6d:
22:aa:27:67:ec:56:d4:41:3e:35:b7:6d:90:48:79:
40:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:65:01:28:E8:AD:BC:9E:8F:FE:B1:66:8D:6E:37:E7:84:90:BD:A0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/f2UBKOitvJ6P_rFmjW4354SQvaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.219.0/24
37.202.223.0/24
Signature Algorithm: sha256WithRSAEncryption
22:34:cc:34:1b:f8:e0:c7:6f:ee:b2:03:60:8f:6f:c7:a3:f6:
32:80:5b:ea:22:38:3a:ca:ff:46:5f:5d:e8:9c:f4:cc:25:b1:
d2:f2:64:02:f9:c1:01:a0:38:e8:98:54:60:94:e8:98:f1:50:
3f:1f:79:3b:1f:28:7a:ea:0c:a4:48:8a:5c:b1:81:5d:ad:67:
1a:47:82:78:6e:2a:90:79:4e:59:26:9e:e6:63:4c:53:b6:c2:
3d:e5:e3:4b:39:29:16:3d:88:54:85:09:eb:2f:18:0a:50:64:
e9:eb:f7:f2:f2:a0:8c:f8:76:d8:cb:51:ad:eb:31:a6:80:03:
b6:2c:ed:51:8a:e1:36:46:ce:33:3a:5e:75:6e:44:3a:6b:2d:
de:28:de:db:a9:fb:27:54:99:fd:4e:b6:fd:cd:bb:ff:62:dc:
d6:cb:d5:8e:68:43:5e:bd:f1:9a:43:71:b0:2b:b9:7b:0f:3a:
60:5a:e5:a7:01:c2:6c:f6:d5:15:22:d4:db:37:3b:2b:94:f2:
6d:c3:8d:5f:63:5e:19:50:ba:72:e0:59:b9:0b:80:35:59:6b:
43:0b:dc:38:e2:f2:f1:3f:8d:3f:d3:9c:b9:6a:a8:e7:f8:d7:
bc:bc:17:10:10:5f:0e:db:ec:cc:5f:f0:56:3b:dd:2b:ef:d5:
d4:c9:8d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:51:06 2024 by rpki-client on console-ams.rpki-client.org