Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/m5zR9OmPZ7n8Hhmvufc_wkkITJI.roa
File: m5zR9OmPZ7n8Hhmvufc_wkkITJI.roa (raw, json)
Hash identifier: RoI9OR2DdtycDMENlHnK2hkkrKUCcRpgaFYqkBvHc1A=
Subject key identifier: 9B:9C:D1:F4:E9:8F:67:B9:FC:1E:19:AF:B9:F7:3F:C2:49:08:4C:92
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018CC56DEDDA62A0516B4A6E992EAE0282E4
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/m5zR9OmPZ7n8Hhmvufc_wkkITJI.roa
Signing time: Mon 01 Jan 2024 14:29:25 +0000
ROA not before: Mon 01 Jan 2024 14:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198700
IP address blocks: 37.16.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:ed:da:62:a0:51:6b:4a:6e:99:2e:ae:02:82:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 14:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b9cd1f4e98f67b9fc1e19afb9f73fc249084c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e8:63:29:be:2d:40:f6:10:e2:97:ec:47:95:
c5:dc:34:ae:72:cf:bf:86:fe:df:76:29:11:04:90:
d8:87:52:8e:a6:20:52:c5:1d:71:36:74:ac:67:24:
72:c3:90:c7:48:e6:81:c4:da:fe:20:c3:7a:cc:4c:
bc:36:13:0d:29:9a:e7:a5:4f:46:55:37:86:f9:a6:
be:c0:79:81:80:b0:51:92:43:29:2f:61:24:e8:d6:
e9:d4:ce:c8:95:1a:b9:c7:ad:49:8f:7f:b8:53:cb:
e6:06:fe:04:05:72:ff:89:3f:3a:f9:bf:99:48:6e:
d4:49:5a:4f:a5:f5:e8:33:45:9e:2b:46:07:6f:88:
54:ba:28:88:66:dd:3a:18:fc:80:fc:80:25:28:97:
e5:55:63:4d:a8:f9:2f:f5:bb:f2:72:c7:07:05:27:
43:c0:6d:8e:73:b1:a3:d6:76:c6:c6:b8:60:45:d6:
50:1f:aa:09:f3:f6:49:47:62:e6:ad:1e:e9:f0:5d:
72:aa:4d:de:2d:ad:ee:d7:69:1d:27:3d:ec:be:b8:
46:d4:6d:2b:81:de:bd:1c:18:e5:b1:a8:d6:8d:09:
8c:ed:18:fe:4e:39:e7:c9:3d:36:21:41:08:be:2c:
d9:76:61:02:c6:02:72:c2:81:b5:3a:79:85:fe:27:
ab:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9C:D1:F4:E9:8F:67:B9:FC:1E:19:AF:B9:F7:3F:C2:49:08:4C:92
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/m5zR9OmPZ7n8Hhmvufc_wkkITJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.86.0/24
Signature Algorithm: sha256WithRSAEncryption
96:dd:6a:5d:23:13:98:1a:74:fb:c5:a3:94:a2:ad:7e:30:1d:
84:d4:26:6a:c5:8c:22:05:44:3b:4b:a4:fb:bc:6b:6a:3e:ea:
95:fa:fa:d4:bd:9e:b3:bb:b3:2c:ce:10:41:1a:96:e1:84:fe:
46:6d:85:fc:e5:00:20:84:7e:07:c6:07:0e:6c:ba:89:85:07:
06:b9:72:7d:c5:e8:06:3a:52:ae:ef:fa:72:af:7b:07:be:72:
38:98:30:cc:95:3e:97:6d:6c:57:b1:40:cf:f3:71:8e:e8:98:
ae:e8:12:07:8f:b9:90:de:33:e1:78:66:61:07:02:c6:9d:15:
f8:40:00:4f:f1:1a:75:65:8a:62:5a:23:8d:04:c7:3e:47:8f:
c2:36:36:83:08:00:62:5e:8e:4f:f3:25:8e:48:b0:e4:a8:ba:
cd:e3:b9:bf:58:d3:4e:5a:5f:59:66:d7:e3:25:ac:42:72:ba:
a1:a0:5e:66:e6:01:69:2d:b3:0f:27:90:78:74:e9:77:d3:cd:
de:60:e4:e9:bc:30:2b:ee:89:57:d8:41:56:0a:f2:61:d2:6f:
f1:71:5a:e5:24:de:ce:e3:08:60:32:6e:f4:9a:6e:68:d9:52:
31:81:b9:e6:71:78:55:5d:37:59:e9:81:32:1e:7c:2b:3e:55:
92:c7:9c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:21:59 2024 by rpki-client on console-ams.rpki-client.org