Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/5uc81bJnqYNuMerFwaG0jHTnCU8.roa
File: 5uc81bJnqYNuMerFwaG0jHTnCU8.roa (raw, json)
Hash identifier: 3PbIbKSqdmD/Ugk6iWL2Pp0tOLQUBl1qXnL+Ec0Log4=
Subject key identifier: E6:E7:3C:D5:B2:67:A9:83:6E:31:EA:C5:C1:A1:B4:8C:74:E7:09:4F
Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial: 018CC3B73E4C9C99AFAA7B7F34E697C7ABC5
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/5uc81bJnqYNuMerFwaG0jHTnCU8.roa
Signing time: Mon 01 Jan 2024 06:30:15 +0000
ROA not before: Mon 01 Jan 2024 06:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59704
IP address blocks: 37.32.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3e:4c:9c:99:af:aa:7b:7f:34:e6:97:c7:ab:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Validity
Not Before: Jan 1 06:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6e73cd5b267a9836e31eac5c1a1b48c74e7094f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2e:2a:1b:b4:32:bd:d2:49:9b:fc:3b:0e:36:
f4:a2:27:d5:fa:f3:3a:ad:48:b2:c1:bd:a9:f9:9e:
8f:49:0d:a9:e4:b5:4e:a9:77:72:4c:8d:63:ab:5d:
6f:15:a9:f5:ad:03:8f:7a:35:88:f4:53:d9:fe:da:
68:d3:77:f8:f7:1e:64:0b:34:20:78:bb:bd:4f:e7:
f7:71:89:7f:d9:ee:3b:5a:62:ac:41:3e:32:1d:40:
72:60:af:08:c1:a5:04:15:19:e7:54:cc:ff:32:70:
fe:29:29:73:21:b0:0a:b3:8f:c5:57:36:53:01:06:
40:0e:fd:c5:32:e8:91:6a:32:c5:9a:23:f9:25:d3:
62:22:60:60:9c:50:8f:07:02:15:dc:85:72:8c:06:
ed:53:0a:c3:d1:20:fa:d2:76:c3:c4:2b:b0:a1:c4:
41:f9:a4:f6:85:54:1c:c3:1d:4a:6a:8b:e0:5a:74:
b8:1d:9a:ad:c2:05:ee:c8:73:fd:db:6f:32:3d:50:
23:81:67:f5:f2:08:df:86:04:73:9f:fb:60:93:3a:
e5:fa:8d:ee:ee:2c:d8:99:e9:5d:43:3a:d2:52:60:
3a:01:b9:11:65:ad:ac:ba:ce:57:bb:dd:ce:50:58:
e3:97:b9:c0:df:2a:7f:c0:f8:05:ab:b5:40:85:f9:
92:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E7:3C:D5:B2:67:A9:83:6E:31:EA:C5:C1:A1:B4:8C:74:E7:09:4F
X509v3 Authority Key Identifier:
keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/5uc81bJnqYNuMerFwaG0jHTnCU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.77.0/24
Signature Algorithm: sha256WithRSAEncryption
10:fe:c3:27:a9:15:fb:ed:44:65:33:ab:3f:ed:22:80:14:b0:
38:03:27:c9:11:0d:86:e7:04:7e:67:13:4c:cc:cd:c9:9b:e4:
56:e7:3f:53:99:ea:9f:1f:a2:19:3e:50:9f:61:8b:db:b2:73:
2f:7b:38:e5:28:47:22:36:6c:51:32:09:2a:8c:18:f4:7d:13:
ea:b0:15:e6:db:42:83:c3:43:45:e4:20:40:06:83:81:cd:a2:
b0:32:31:58:2b:6b:40:4b:14:db:04:0c:c5:08:44:79:97:39:
f3:4a:9d:3b:3e:b9:7d:ca:2e:18:e5:fc:f0:ce:28:a7:6f:56:
8b:e1:de:8f:27:e4:a9:bf:70:25:4e:94:ad:de:c1:24:5b:23:
51:d2:72:7e:12:6a:d4:84:55:fb:2c:98:0f:eb:af:85:13:40:
d3:b8:70:7e:f2:4b:40:dd:38:68:2d:7c:e6:24:d4:c4:7b:cd:
35:91:c6:67:16:c5:47:ca:f9:9f:8b:c1:cd:f7:a8:de:49:36:
bb:1b:f5:3b:c7:17:44:02:38:bf:5b:81:48:0e:d6:d9:2a:9b:
7f:64:54:ac:45:e7:a6:57:bd:b5:6d:84:18:a6:cb:06:12:b4:
87:b3:04:69:dd:e2:79:b2:69:7e:47:de:5f:e7:d0:81:1a:7b:
26:f5:d5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:28:12 2024 by rpki-client on console-ams.rpki-client.org