Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/Toe053mBO3oImHHBgNfyTfxR1LU.roa
File: Toe053mBO3oImHHBgNfyTfxR1LU.roa (raw, json)
Hash identifier: 4Wj2HDrTHoTY5d+9oCO/ih/+GifRvhZGeMLeZeykBvg=
Subject key identifier: 4E:87:B4:E7:79:81:3B:7A:08:98:71:C1:80:D7:F2:4D:FC:51:D4:B5
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 018CC79359E383116252782F63E4F3CDC365
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/Toe053mBO3oImHHBgNfyTfxR1LU.roa
Signing time: Tue 02 Jan 2024 00:29:31 +0000
ROA not before: Tue 02 Jan 2024 00:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 37.143.4.0/22 maxlen: 24
37.143.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:59:e3:83:11:62:52:78:2f:63:e4:f3:cd:c3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Jan 2 00:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e87b4e779813b7a089871c180d7f24dfc51d4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:4f:73:75:e1:cc:46:7d:cd:19:ac:b7:9f:
68:ba:fb:aa:be:81:d3:2c:87:08:98:be:b2:7e:cf:
d2:61:c2:bc:46:c5:88:8e:cc:7d:27:68:17:bc:fd:
ef:df:20:54:c1:cc:f4:8f:a3:32:0a:39:d2:e2:a5:
ac:e2:2a:68:ca:4f:f0:d4:c9:2b:10:ec:97:9c:ef:
5d:70:f4:dd:38:71:cd:7c:fa:f0:40:33:a6:fd:fb:
b1:03:ad:9a:c6:51:1c:1b:3d:4d:ed:a0:cf:62:ef:
47:3d:0e:47:71:1a:c6:37:db:e4:7f:58:84:ef:91:
00:1a:4a:88:8b:5f:91:a7:65:7c:77:5b:76:85:64:
a9:65:71:88:a0:81:c0:43:e2:3e:6f:ee:12:ac:7d:
59:3d:e7:9f:11:19:8f:9b:ee:c5:f7:90:42:3d:76:
04:c5:97:73:3a:b3:cb:0e:5d:10:37:23:4a:3f:68:
e9:8d:b6:2f:2d:6c:80:55:fa:b4:ab:60:63:5f:d6:
b5:f8:bc:c6:1b:f2:00:e6:73:db:e8:af:b8:7a:17:
0e:10:4a:92:9d:1c:5a:c1:16:42:7f:c5:e1:c6:62:
24:76:30:62:cf:cc:ca:1e:df:5e:41:3e:e4:4f:ee:
ff:a2:fd:5d:34:74:35:56:b1:77:84:d0:93:a9:52:
38:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:87:B4:E7:79:81:3B:7A:08:98:71:C1:80:D7:F2:4D:FC:51:D4:B5
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/Toe053mBO3oImHHBgNfyTfxR1LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.0.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:16:0e:11:36:51:e5:40:e3:d1:b4:ec:58:28:48:ef:89:db:
75:99:e6:76:2e:71:27:d2:df:4b:6f:c5:48:a1:6e:10:a3:19:
1a:26:ad:ed:c1:29:af:cc:01:99:e3:20:4a:b1:21:90:08:36:
a6:66:c0:73:a1:da:ac:a8:5d:18:c9:fc:b3:f3:a2:d3:dc:b0:
17:e4:9e:e0:95:2e:22:f1:fd:95:b0:e4:49:6f:58:7c:3d:8c:
02:86:e8:b3:22:b9:0a:28:24:59:f3:97:ee:0e:18:e3:f0:46:
4c:86:a5:24:04:b0:9a:76:ab:f0:2c:57:1a:99:0c:0a:7c:e0:
7f:0d:14:3d:26:59:5e:02:de:4b:4b:10:8e:12:57:c9:f7:ea:
c4:d9:da:59:22:52:5b:ee:2d:67:0b:ac:23:73:af:d6:18:10:
bd:d1:e0:ca:92:3d:a9:06:42:d2:07:a6:53:91:f6:ca:03:c0:
00:93:6d:d9:9c:89:8f:1b:fd:26:bb:cb:ae:03:ec:07:02:73:
c6:6f:11:c9:17:a3:a5:30:96:e0:fd:2a:52:62:e6:8a:61:6c:
1b:83:ef:81:7e:bf:88:3a:2e:4d:14:2d:bf:70:98:b9:46:c3:
e9:7c:18:42:51:fc:02:50:9e:02:53:a2:97:b3:53:b3:55:cb:
01:41:8f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 21:29:38 2024 by rpki-client on console-ams.rpki-client.org