Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/Ih9NprqK8_1a2JJ8m0w8mLNrV8Y.roa
File: Ih9NprqK8_1a2JJ8m0w8mLNrV8Y.roa (raw, json)
Hash identifier: iAXKoPxuMuuwXpSaKX5ejyr9eJpEted2CFQCfykX+yQ=
Subject key identifier: 22:1F:4D:A6:BA:8A:F3:FD:5A:D8:92:7C:9B:4C:3C:98:B3:6B:57:C6
Certificate issuer: /CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Certificate serial: 018CC5007F7AED8A3B4DD96B35B6B4CD2670
Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/Ih9NprqK8_1a2JJ8m0w8mLNrV8Y.roa
Signing time: Mon 01 Jan 2024 12:29:53 +0000
ROA not before: Mon 01 Jan 2024 12:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50941
IP address blocks: 37.152.79.0/24 maxlen: 24
85.95.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:7f:7a:ed:8a:3b:4d:d9:6b:35:b6:b4:cd:26:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Validity
Not Before: Jan 1 12:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=221f4da6ba8af3fd5ad8927c9b4c3c98b36b57c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9e:ab:cb:78:7f:69:86:ee:46:c1:c7:1a:c2:
0b:01:69:44:2a:6c:92:7f:df:29:d7:fc:47:dc:9b:
7c:2c:63:e4:46:dc:11:4e:2c:12:af:3c:41:05:0a:
a9:95:ca:f7:2c:3d:4d:37:6a:63:bc:9b:e2:ad:3f:
be:4a:42:59:87:0a:1a:7f:e1:92:00:1a:6e:70:e3:
b6:ba:71:5e:b4:48:35:1a:ba:c2:08:33:b3:e5:d5:
8e:22:4c:09:c3:e8:de:63:2e:07:b0:b9:8e:d9:f8:
ae:92:89:d1:69:d5:b4:89:07:30:bd:7f:26:83:9e:
fd:e1:c8:c8:46:98:25:2d:cd:44:f1:a6:df:ee:a2:
a6:8f:76:84:a8:ea:5e:2d:58:99:99:0d:f2:57:7a:
ee:de:33:48:1f:65:bf:21:8a:63:d5:6f:3d:6d:35:
2a:6c:78:b6:40:4a:3f:0e:3f:10:b5:b4:34:97:01:
e6:0d:7c:b7:76:cb:d9:5e:37:e9:9b:90:6d:cd:99:
1d:76:ba:3b:cd:6d:7c:f0:69:91:87:ad:7e:a8:85:
45:9b:c1:f5:0d:74:e2:2f:0f:52:e6:82:bb:25:55:
12:b1:15:5f:4d:6d:92:15:4c:8b:18:0b:e1:c2:7d:
fd:79:a8:60:0a:49:8c:77:ff:a4:48:96:53:a6:63:
0c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1F:4D:A6:BA:8A:F3:FD:5A:D8:92:7C:9B:4C:3C:98:B3:6B:57:C6
X509v3 Authority Key Identifier:
keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/Ih9NprqK8_1a2JJ8m0w8mLNrV8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.152.79.0/24
85.95.255.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:71:dc:f4:d4:65:30:ef:95:ee:bc:2f:91:d6:21:36:e4:03:
31:69:0b:c1:15:e6:81:31:7e:70:0b:cd:19:f5:92:10:6f:05:
f5:0d:e8:a8:ac:4f:39:74:37:b2:13:de:d3:c1:21:c9:54:50:
d2:72:c2:63:d9:34:6b:ed:cd:8a:07:a6:db:92:9f:f2:95:24:
63:3c:40:7b:ad:6a:5a:99:7b:10:02:55:91:f1:f6:d1:42:9c:
de:33:33:23:88:c1:48:b7:19:1a:63:17:e1:1b:bc:99:31:f2:
aa:e4:cd:6f:fc:c7:6e:ad:38:f4:66:08:3b:06:30:a0:f6:6c:
8b:f8:87:6e:eb:cd:5e:43:63:99:c7:0e:97:b5:8c:c0:b4:a0:
9c:3d:a2:16:cd:db:6a:e9:c4:ee:bf:20:f1:58:ad:19:cf:8c:
9e:ce:52:b5:d0:98:bb:83:c0:c0:6f:39:95:8f:a9:4f:22:1d:
8d:31:73:22:4d:05:da:4c:ae:59:c4:d9:2d:c9:82:6e:b6:ac:
6c:30:10:50:b1:4f:06:66:d4:3f:bf:94:55:87:4c:a4:79:2c:
db:5f:10:30:4e:30:38:7b:e0:91:bd:7e:60:7d:f9:3e:52:27:
78:7f:56:68:84:41:3a:95:36:c6:9a:94:70:af:b5:c8:e4:bf:
8a:0c:94:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:12:02 2024 by rpki-client on console-ams.rpki-client.org