Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/E5HTbbG8tJE4hEPzKkGTLaMYS5g.roa
File: E5HTbbG8tJE4hEPzKkGTLaMYS5g.roa (raw, json)
Hash identifier: xH5ZDr6Wa5GEJJ224YNGCwk0uCbWdk7z4495VtoQMoE=
Subject key identifier: 13:91:D3:6D:B1:BC:B4:91:38:84:43:F3:2A:41:93:2D:A3:18:4B:98
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 018CC80245B4ED1EA5B60C87AAB1CB8D136B
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/E5HTbbG8tJE4hEPzKkGTLaMYS5g.roa
Signing time: Tue 02 Jan 2024 02:30:41 +0000
ROA not before: Tue 02 Jan 2024 02:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42688
IP address blocks: 37.157.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:45:b4:ed:1e:a5:b6:0c:87:aa:b1:cb:8d:13:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Jan 2 02:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1391d36db1bcb491388443f32a41932da3184b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:b9:2a:b3:67:79:85:32:50:fb:55:3e:7c:
fa:20:51:cb:f7:69:dd:d6:89:88:16:41:92:95:df:
0f:34:0b:42:a3:87:4c:fd:66:cd:d1:d3:c5:0c:6e:
79:e1:57:ac:f4:bc:14:10:88:0d:98:de:42:d0:eb:
1f:97:10:c2:b1:63:f1:95:c0:3f:a3:05:de:63:94:
e6:9a:27:25:c1:dd:98:d2:2c:a3:67:8d:23:38:48:
2f:18:9d:8b:cc:a3:4f:8e:f3:fb:a2:4a:fb:a8:77:
3d:b1:9f:c1:f3:7c:a6:ae:f6:8d:90:c0:0d:18:2d:
8a:cf:fe:bf:d0:fa:fc:f7:40:6a:b1:be:18:7d:8a:
52:62:6e:56:e0:88:51:61:3a:c3:70:37:61:84:e9:
20:1a:d2:99:37:89:44:1d:6d:a4:b1:36:85:a4:f2:
9e:ef:3e:dd:05:32:03:04:e2:62:f1:18:15:ee:32:
94:bf:f7:85:f3:c8:18:0e:fe:69:09:d8:61:09:2a:
93:d5:fa:05:09:a9:80:53:13:15:63:9d:4f:b6:16:
55:ca:33:65:e0:62:20:b1:82:2f:07:c9:bc:80:6e:
1e:51:19:94:be:8b:7a:e0:ae:05:99:e6:f7:7f:7a:
0f:30:ef:a9:f4:b5:8e:7b:c7:0e:2d:c8:5e:a7:c1:
d8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:91:D3:6D:B1:BC:B4:91:38:84:43:F3:2A:41:93:2D:A3:18:4B:98
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/E5HTbbG8tJE4hEPzKkGTLaMYS5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.208.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:db:ec:15:2d:20:a6:dd:b8:f7:8c:87:48:c5:b5:f8:c1:82:
80:d8:5a:15:91:0d:44:ff:97:e3:5f:1e:93:64:ff:89:c6:52:
0d:c6:b6:1e:25:18:73:c2:87:fe:0f:c9:33:3b:88:bd:aa:7e:
61:59:59:4c:ef:fa:de:76:91:55:39:bc:8e:a5:43:a9:57:28:
40:43:39:36:c9:dd:44:12:1a:fa:05:95:1c:85:a4:eb:22:c5:
d1:22:73:86:71:d6:6f:2a:3c:22:f2:16:86:c6:5b:3e:65:82:
77:21:7b:a1:79:64:eb:14:31:92:d7:5f:5e:af:e1:91:a9:bd:
10:75:f5:3b:2f:56:75:5f:e5:9b:47:15:96:26:2c:cc:dd:75:
d8:e4:80:79:16:c2:b2:f4:57:df:24:d5:1e:1e:de:32:49:32:
5a:23:54:1a:a5:3b:ad:3b:f4:15:18:7b:31:10:df:b9:9f:58:
17:ff:1d:72:ad:aa:7b:9e:9c:32:3b:e6:d2:a3:eb:b8:59:fd:
dd:56:a8:55:c0:52:2b:6a:db:cc:ce:b8:f2:03:77:a4:5c:87:
6c:24:fe:ac:3a:61:9b:7e:a0:4e:96:c6:2e:d0:1d:98:72:9a:
17:ff:3f:86:3e:33:3d:be:00:91:71:f7:a6:9d:f6:3f:28:9d:
12:9c:5e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 06:37:31 2024 by rpki-client on console-ams.rpki-client.org