Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/KmQLXSMs_5aM5clCGXYUAIZuDaU.roa
File: KmQLXSMs_5aM5clCGXYUAIZuDaU.roa (raw, json)
Hash identifier: e463FBGgJ6GdCX1aWMV0J724CoCighITo++ybgu3xC8=
Subject key identifier: 2A:64:0B:5D:23:2C:FF:96:8C:E5:C9:42:19:76:14:00:86:6E:0D:A5
Certificate issuer: /CN=084059a0ca6078a9b75daa66db806ff22c0eaad9
Certificate serial: 018CC72719D91B0EB6180BC4DD0859CA084B
Authority key identifier: 08:40:59:A0:CA:60:78:A9:B7:5D:AA:66:DB:80:6F:F2:2C:0E:AA:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEBZoMpgeKm3Xapm24Bv8iwOqtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/KmQLXSMs_5aM5clCGXYUAIZuDaU.roa
Signing time: Mon 01 Jan 2024 22:31:17 +0000
ROA not before: Mon 01 Jan 2024 22:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.37.38.0/24 maxlen: 24
185.37.37.0/24 maxlen: 24
185.37.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/CEBZoMpgeKm3Xapm24Bv8iwOqtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/CEBZoMpgeKm3Xapm24Bv8iwOqtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEBZoMpgeKm3Xapm24Bv8iwOqtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:19:d9:1b:0e:b6:18:0b:c4:dd:08:59:ca:08:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084059a0ca6078a9b75daa66db806ff22c0eaad9
Validity
Not Before: Jan 1 22:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a640b5d232cff968ce5c94219761400866e0da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:25:ba:ff:f6:d7:6c:f8:1d:a8:2f:d4:3f:
04:a1:a5:d6:0f:10:41:c3:00:71:a6:28:61:49:7c:
f2:57:2f:8b:45:c9:eb:5e:dc:9a:50:eb:41:49:ab:
d3:ca:66:0b:01:a4:86:fb:f8:3c:1b:64:f2:8f:c5:
c0:f1:31:65:7a:1a:92:45:ac:b2:de:82:32:9c:00:
21:bc:65:37:19:b6:49:26:91:2a:00:4a:63:3c:b8:
41:e8:87:20:d7:39:24:f9:21:6f:0a:2e:b7:d4:10:
a5:90:13:14:70:25:36:4f:e0:54:47:93:7a:be:b7:
d0:27:2d:b5:96:5c:52:7b:ed:94:57:7e:f7:20:59:
1d:22:f4:07:91:04:09:ed:0c:df:63:72:e7:63:d8:
00:60:c3:b2:a6:0a:15:9d:95:1c:eb:17:d0:88:5a:
b1:14:7b:b2:0e:15:4e:09:ff:80:2b:08:a3:96:1b:
58:e6:91:f6:e1:4b:04:df:87:22:74:1d:b0:33:eb:
b9:71:fb:3c:1c:b0:7a:18:67:ee:61:e4:d6:5b:8c:
d3:5a:f9:94:3d:dc:71:b6:77:62:c1:ba:db:ee:e8:
a8:73:9a:f7:ec:e5:90:fe:87:88:64:99:68:42:2f:
fb:cb:f9:42:e6:30:97:cf:32:a3:70:1c:3c:66:15:
43:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:64:0B:5D:23:2C:FF:96:8C:E5:C9:42:19:76:14:00:86:6E:0D:A5
X509v3 Authority Key Identifier:
keyid:08:40:59:A0:CA:60:78:A9:B7:5D:AA:66:DB:80:6F:F2:2C:0E:AA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEBZoMpgeKm3Xapm24Bv8iwOqtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/KmQLXSMs_5aM5clCGXYUAIZuDaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/CEBZoMpgeKm3Xapm24Bv8iwOqtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.37.0-185.37.39.255
Signature Algorithm: sha256WithRSAEncryption
6f:f6:53:9d:b1:96:02:55:9a:b2:0f:02:c9:72:0f:48:29:4c:
28:f5:5e:bd:8e:ee:f4:c7:35:db:d8:80:52:d9:39:3a:d7:79:
68:81:95:8f:77:6f:f8:1c:19:73:41:eb:d3:0b:b7:1d:30:4a:
62:e1:bf:2a:e7:68:31:e3:67:3c:38:70:3e:16:51:c6:44:57:
17:6e:f0:ef:6e:25:5e:7f:f4:92:35:30:54:76:8d:8c:4e:1b:
29:3f:7b:93:41:8f:5c:5a:88:52:77:a2:4f:7d:f9:86:0a:59:
c6:c6:ad:00:e0:c2:c2:5f:28:e9:44:f8:a9:87:df:52:bb:ec:
f5:df:0c:ec:fb:ce:57:71:f8:27:89:4b:45:31:92:89:73:00:
bb:6a:a3:ab:db:4e:f7:5a:33:d7:0f:e4:9d:89:55:54:ff:02:
d4:f2:76:a1:1a:f2:0b:2f:36:70:b5:96:a2:d3:f9:70:30:5c:
09:cd:e6:70:4b:28:d8:1d:f6:82:2c:50:56:56:d7:d9:77:c0:
a4:20:5d:c8:3d:4a:0e:b9:f6:ba:00:63:5a:bc:f1:1a:e3:42:
cf:04:c4:7b:32:a2:2d:8e:5d:b3:c8:91:3f:6c:da:67:76:0f:
72:f4:f1:64:a8:92:b0:b7:4c:05:bb:27:ed:a6:4d:26:03:9f:
a9:48:aa:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:57:27 2024 by rpki-client on console-ams.rpki-client.org