Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/9k17CbEyW0WciYG3Gm1Jqp2zt-w.roa
File: 9k17CbEyW0WciYG3Gm1Jqp2zt-w.roa (raw, json)
Hash identifier: x+uby+TvFvze7QNqm0gisGnxLxh13s1NF/l6AdrIeZQ=
Subject key identifier: F6:4D:7B:09:B1:32:5B:45:9C:89:81:B7:1A:6D:49:AA:9D:B3:B7:EC
Certificate issuer: /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Certificate serial: 0191CC54EA9C7787A73AAFD02596229E2860
Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/9k17CbEyW0WciYG3Gm1Jqp2zt-w.roa
Signing time: Sat 07 Sep 2024 11:53:22 +0000
ROA not before: Sat 07 Sep 2024 11:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398395
IP address blocks: 37.153.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:cc:54:ea:9c:77:87:a7:3a:af:d0:25:96:22:9e:28:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Validity
Not Before: Sep 7 11:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f64d7b09b1325b459c8981b71a6d49aa9db3b7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2d:3a:c8:11:fb:f8:e3:86:1b:4f:53:4e:6a:
2a:a8:9c:04:b2:ef:18:fb:58:e2:13:14:5a:bf:a8:
b0:d6:a9:65:3e:3a:64:df:ec:98:48:49:49:60:11:
1b:20:71:e3:87:b7:00:85:86:af:84:e0:15:69:1d:
a2:e5:17:71:df:cc:8d:89:e7:b5:ed:42:60:6f:d3:
41:b6:91:03:ea:5e:cd:59:39:ba:2a:47:cb:a9:71:
29:f6:a7:5c:ef:61:f7:b5:c8:02:ec:99:66:ed:60:
af:28:94:10:01:e8:08:7a:a4:76:39:52:d1:a1:80:
55:61:66:4f:46:c1:2e:f2:45:80:5c:8c:a9:3a:03:
0b:de:00:b8:25:b7:09:3f:f9:44:ff:ce:6c:a9:b6:
27:7a:4e:95:2e:af:4c:d0:59:b5:6d:21:f5:e2:9b:
2a:31:28:6b:43:f6:aa:9c:58:45:88:af:f3:21:10:
87:30:e5:d6:83:6f:ff:c5:cb:80:94:4e:9a:d4:86:
5b:35:00:89:95:23:e1:05:68:2e:03:36:1e:22:d5:
f7:26:1e:cc:7f:43:86:64:e9:36:50:3d:49:88:cf:
bb:fb:d5:5f:99:47:9a:bd:40:b6:a9:01:f8:77:07:
1e:d2:03:c3:2a:6c:13:7b:70:9b:78:69:5d:8c:ed:
4b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4D:7B:09:B1:32:5B:45:9C:89:81:B7:1A:6D:49:AA:9D:B3:B7:EC
X509v3 Authority Key Identifier:
keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/9k17CbEyW0WciYG3Gm1Jqp2zt-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.155.0/24
Signature Algorithm: sha256WithRSAEncryption
67:37:75:d2:df:7e:5b:f0:bf:31:73:a7:fd:d3:a2:5a:99:e6:
90:96:57:b8:38:1c:cc:24:bb:95:87:3f:33:2e:78:2e:78:ab:
aa:6a:45:5b:80:8d:03:89:50:e7:2f:18:be:ea:fc:d5:d4:c3:
89:5d:5e:55:4e:c7:61:77:22:33:34:90:b7:2a:22:5e:ff:12:
1c:c4:a8:99:e1:6e:96:26:98:12:94:8d:62:93:30:96:4e:d6:
0c:e3:7d:cc:cc:c6:1f:7b:fb:79:82:eb:43:51:34:c4:0f:82:
e8:b4:e2:b5:ab:92:b4:71:e6:c4:c7:1f:f8:dc:3c:13:34:ef:
d4:54:0f:c4:70:80:0f:5e:60:5d:0d:ca:fb:22:1d:f1:36:f4:
22:14:65:0b:90:1d:6e:da:ed:f6:8a:6b:00:70:52:f0:76:5e:
30:94:86:28:bb:d0:d9:62:ce:51:37:f3:6a:cd:8f:73:22:76:
f2:c5:b0:24:6a:66:e4:71:c3:70:1f:06:32:be:a3:6d:03:c1:
23:87:92:df:58:e7:36:e6:97:3e:22:62:38:ba:27:f4:e8:ff:
7d:f3:2c:f9:5f:65:3c:c4:07:8f:0b:bc:d5:cf:1a:65:e8:a4:
1c:8a:95:78:6d:30:8b:e8:3a:c5:c0:8b:24:79:6e:d2:1a:69:
7f:33:0f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:46:38 2024 by rpki-client on console-fra.rpki-client.org