Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/w_mXPpeeHRBu6iuIgFFEQiJrzfY.roa
File: w_mXPpeeHRBu6iuIgFFEQiJrzfY.roa (raw, json)
Hash identifier: 3GZF67fFfLhuRgCQ71gsjeiAAJV0bWkyj61NbFIs+KA=
Subject key identifier: C3:F9:97:3E:97:9E:1D:10:6E:EA:2B:88:80:51:44:42:22:6B:CD:F6
Certificate issuer: /CN=a99b4739437b55f944d2229d16b6e6fa59919687
Certificate serial: 018CC727135F20FAA468439BF85B60A98ADA
Authority key identifier: A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/w_mXPpeeHRBu6iuIgFFEQiJrzfY.roa
Signing time: Mon 01 Jan 2024 22:31:16 +0000
ROA not before: Mon 01 Jan 2024 22:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209912
IP address blocks: 37.44.232.0/22 maxlen: 22
37.44.232.0/24 maxlen: 24
37.44.233.0/24 maxlen: 24
37.44.235.0/24 maxlen: 24
37.44.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:13:5f:20:fa:a4:68:43:9b:f8:5b:60:a9:8a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a99b4739437b55f944d2229d16b6e6fa59919687
Validity
Not Before: Jan 1 22:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3f9973e979e1d106eea2b8880514442226bcdf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2a:84:30:6c:38:d7:ec:cc:4f:ba:cc:3f:95:
bb:3d:cd:e4:5d:7a:4c:21:0f:1f:b5:31:41:2f:a1:
db:be:16:fd:ad:e5:fc:d8:05:f6:14:50:a0:b4:ef:
64:b5:bf:c4:72:f7:6d:70:cb:51:c2:68:03:a9:20:
9e:60:44:ea:4f:f6:37:b0:21:b8:f2:6e:99:36:4f:
eb:b3:4f:55:13:37:96:7b:13:c2:85:72:61:c6:06:
e6:c5:d9:54:1e:4b:63:29:12:a6:70:8d:64:aa:9e:
72:52:a9:21:a0:be:b2:16:b9:b1:c4:99:8f:5d:ea:
1d:1e:a7:1b:bc:84:d6:b7:da:ac:c8:f6:36:e3:af:
eb:32:83:05:0b:dd:60:94:d3:a4:0b:a8:f6:b1:2a:
66:ee:f8:af:86:42:12:85:2e:4c:d1:ea:c4:5d:29:
01:8c:2f:11:cc:8d:84:43:b5:4e:15:86:28:67:db:
85:98:db:7e:f2:a8:14:b9:29:e0:ac:57:99:36:37:
05:8b:a3:92:44:3f:ec:4c:ef:13:f8:85:69:6c:48:
1a:60:aa:e1:d6:21:9f:07:77:61:33:da:fc:76:48:
44:f5:cf:5b:7d:ee:36:5b:6d:d3:7c:a3:ae:b1:0c:
e6:3b:a3:fc:01:18:2c:13:bc:ba:78:b1:89:68:28:
c3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F9:97:3E:97:9E:1D:10:6E:EA:2B:88:80:51:44:42:22:6B:CD:F6
X509v3 Authority Key Identifier:
keyid:A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/w_mXPpeeHRBu6iuIgFFEQiJrzfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.232.0/22
Signature Algorithm: sha256WithRSAEncryption
17:d3:c5:41:b2:20:0c:fc:4d:7e:7c:dc:62:7c:54:ce:69:f5:
c4:3e:30:6b:bd:8f:5a:48:f9:1b:c5:46:a1:12:b6:29:5b:36:
53:20:cf:68:58:81:dd:2c:8b:02:c5:4c:8c:0e:98:a9:9d:cb:
cd:56:6d:52:7e:d2:4e:72:02:98:95:5c:a0:be:9d:2a:5a:0d:
c2:7e:10:89:5c:ef:66:37:d4:e8:09:a9:5e:9d:16:31:b3:51:
35:07:2d:55:e6:95:34:06:ed:bf:0b:99:64:23:26:f7:b4:5c:
e1:ee:36:68:22:04:48:b6:6e:ed:5d:bc:fb:1b:46:16:0c:27:
ee:53:47:a6:ac:6c:51:b9:0e:e4:b2:10:35:e1:22:73:5e:a4:
52:40:ae:55:b4:fc:80:e2:67:6b:7a:0b:5f:a5:ad:85:ea:0d:
d8:cf:ab:a1:04:a3:b2:c6:32:8f:ea:37:8f:05:39:bb:9a:f9:
fc:2f:a4:d7:b5:57:8a:4c:7f:ab:ee:6d:f5:94:34:b6:81:ab:
11:e0:ac:d9:af:83:1a:7b:0b:46:5b:58:33:d6:f6:ac:cb:94:
2c:fe:2a:df:b5:bc:ac:9a:43:a5:fa:fb:cf:58:74:30:95:aa:
d9:cd:24:67:b0:7e:77:18:ae:01:d0:11:59:e5:f3:47:7d:19:
dd:c2:7a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:44:55 2024 by rpki-client on console-ams.rpki-client.org