Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/AjP2n5Ueztk1rgG1haKrmrMpShk.roa
File: AjP2n5Ueztk1rgG1haKrmrMpShk.roa (raw, json)
Hash identifier: EQ9PAWVzsNnLRUKNlmif6RvEY9AApZbz7Krppx2e3v4=
Subject key identifier: 02:33:F6:9F:95:1E:CE:D9:35:AE:01:B5:85:A2:AB:9A:B3:29:4A:19
Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial: 018D5B9F8D81FA493CABB06174FE76E3EB7F
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/AjP2n5Ueztk1rgG1haKrmrMpShk.roa
Signing time: Tue 30 Jan 2024 18:26:39 +0000
ROA not before: Tue 30 Jan 2024 18:26:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 37.16.91.0/24 maxlen: 24
45.86.85.0/24 maxlen: 24
62.68.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5b:9f:8d:81:fa:49:3c:ab:b0:61:74:fe:76:e3:eb:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Validity
Not Before: Jan 30 18:26:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0233f69f951eced935ae01b585a2ab9ab3294a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:95:ff:86:52:34:f6:d6:59:8d:ef:56:92:2c:
3d:01:63:89:e7:d8:54:c4:da:ab:dc:e6:34:b8:e1:
bc:f5:71:a7:67:d9:bc:46:e2:b9:bc:fe:12:1e:4f:
93:f1:df:9f:c7:55:e7:40:93:e2:73:25:4d:47:80:
b3:dc:a7:3d:10:02:ab:22:aa:f8:2c:ba:8f:3e:b8:
d0:73:45:9f:65:48:d5:6e:c3:ca:cb:16:5c:95:d5:
0d:a6:cc:62:b3:2c:60:f1:22:e4:3a:7c:60:56:8e:
6d:f1:a9:1a:00:71:1c:6f:a5:54:c8:d2:df:0e:00:
7f:27:2c:2d:df:f2:cf:62:e9:bd:e3:41:40:51:e2:
2d:50:25:f0:51:63:b0:4f:f0:77:20:8a:a4:18:dc:
2a:af:6b:d7:48:a0:9a:c1:b0:f4:62:e6:07:b7:7b:
3e:68:06:cc:d4:98:93:03:ea:4c:1b:8b:c3:99:63:
ce:f0:9b:a1:6c:bf:94:a4:d7:96:6d:62:fd:79:5a:
14:53:1e:85:d4:be:16:89:fb:56:97:d6:d9:d4:50:
cf:19:d2:9d:2a:12:3c:8c:e3:ba:7a:e0:6f:4f:97:
33:1f:69:0a:a9:38:cc:7f:3e:0c:7c:fa:ec:eb:87:
45:bb:f8:ac:2c:f9:c1:9d:67:cf:d9:01:16:36:4c:
ac:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:33:F6:9F:95:1E:CE:D9:35:AE:01:B5:85:A2:AB:9A:B3:29:4A:19
X509v3 Authority Key Identifier:
keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/AjP2n5Ueztk1rgG1haKrmrMpShk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.91.0/24
45.86.85.0/24
62.68.89.0/24
Signature Algorithm: sha256WithRSAEncryption
73:fa:ef:57:6c:ab:bd:5d:11:0c:dc:38:dc:e6:4a:0c:57:b8:
55:31:ad:c4:64:87:9b:53:e0:88:9a:32:60:4c:dd:29:29:1f:
6e:68:d4:db:92:af:f1:b6:b4:ce:1f:99:9e:63:08:23:40:c5:
e8:04:d2:0d:dd:94:28:15:42:37:42:46:9c:ca:6d:42:38:6c:
4b:51:94:05:d4:0c:61:98:3c:ba:5f:f2:57:90:73:40:f0:d6:
5c:8e:10:80:bf:34:5d:38:c7:13:42:9d:58:2e:cf:91:34:f3:
62:29:d4:7b:26:68:50:9f:4e:dd:6d:a3:e2:46:01:30:d7:b3:
7b:61:2e:d6:51:a2:7c:c4:db:99:37:8d:73:ce:3f:b3:e1:b4:
0b:80:71:9a:e2:b0:ee:b0:ca:ca:25:18:ac:2b:f3:6b:6c:13:
8a:e2:e9:b6:68:9f:c5:b2:f0:bf:b5:c3:b3:9e:da:f6:c7:6c:
a1:0a:c1:3d:9d:0c:5b:32:cb:20:6d:45:3b:f9:50:95:16:64:
1e:4a:c9:37:32:95:5a:ef:4e:b6:e3:0e:dc:c6:fd:a4:10:92:
e1:ed:eb:82:f2:f8:34:05:90:90:4b:59:da:07:17:ce:40:1d:
18:9a:49:cc:3f:bb:5e:14:bf:6e:ac:4c:21:9a:e5:e4:80:5a:
ef:5b:a6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 02:15:07 2024 by rpki-client on console-fra.rpki-client.org