Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OCUhvVCSWg3iy2uXctG-QpvDWLU.roa
File: OCUhvVCSWg3iy2uXctG-QpvDWLU.roa (raw, json)
Hash identifier: 0JWhHsns9mrL9PQCjHRQJX/9dYEqR6UwoR69aDrchRg=
Subject key identifier: 38:25:21:BD:50:92:5A:0D:E2:CB:6B:97:72:D1:BE:42:9B:C3:58:B5
Certificate issuer: /CN=398881e06383fd2c36e9f245c4bfa1301d15a537
Certificate serial: 018CC7954A299902896751484EF77A2D6B39
Authority key identifier: 39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OCUhvVCSWg3iy2uXctG-QpvDWLU.roa
Signing time: Tue 02 Jan 2024 00:31:38 +0000
ROA not before: Tue 02 Jan 2024 00:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57642
IP address blocks: 37.25.56.0/21 maxlen: 21
37.25.56.0/24 maxlen: 24
193.228.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:4a:29:99:02:89:67:51:48:4e:f7:7a:2d:6b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398881e06383fd2c36e9f245c4bfa1301d15a537
Validity
Not Before: Jan 2 00:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=382521bd50925a0de2cb6b9772d1be429bc358b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e1:3b:3b:9b:59:8e:a5:0c:b7:4a:bb:c1:ea:
e9:60:08:46:93:e1:52:f9:f6:d4:d6:36:d0:d6:eb:
ca:f1:49:d2:5c:ee:33:38:e5:70:93:88:2b:74:49:
51:fc:f5:2f:fe:a2:f4:f4:37:c2:7e:84:2b:04:dc:
ac:ae:c6:91:11:65:c3:e1:25:4f:09:5f:11:80:e3:
5c:a3:ab:42:7a:e2:7c:55:1d:cb:75:d9:c1:98:54:
d9:d3:14:55:59:40:c7:d4:19:ce:f1:14:d9:7a:60:
19:5b:90:74:ff:36:f3:12:b4:44:b8:8b:cf:4a:eb:
af:d5:12:07:8b:5d:6e:96:0a:81:9f:4e:07:f3:4c:
c1:6e:71:26:75:68:70:ef:d5:b1:50:f2:85:30:c8:
09:bb:fd:0f:8d:75:2f:33:d9:86:c0:db:04:ee:7a:
b0:4b:f5:32:ef:52:f3:16:5f:3e:03:fb:4a:b7:63:
6d:1d:1a:e8:02:b8:ed:d7:12:d6:b9:47:5f:2c:e7:
48:78:bb:af:59:d5:04:cd:4a:24:e6:31:98:7f:14:
d9:df:df:d2:cb:4b:7b:e3:bc:d7:17:cb:0d:fc:8a:
d7:49:a1:f1:80:ed:8b:1b:d5:19:51:be:35:1c:5c:
e4:93:fa:85:74:2e:69:6b:29:cf:e5:e8:16:2e:8d:
d9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:25:21:BD:50:92:5A:0D:E2:CB:6B:97:72:D1:BE:42:9B:C3:58:B5
X509v3 Authority Key Identifier:
keyid:39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OCUhvVCSWg3iy2uXctG-QpvDWLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.56.0/21
193.228.156.0/24
Signature Algorithm: sha256WithRSAEncryption
14:6d:94:aa:56:6f:e2:96:40:b3:17:41:4c:c2:e5:6c:fe:be:
74:9d:e5:c6:fd:19:a6:38:67:59:fa:b7:22:40:30:cc:39:41:
4d:7f:ad:51:75:17:5a:2d:e8:ac:62:e1:df:ce:9d:c2:69:be:
5f:62:c9:aa:67:8a:8e:c8:c5:42:d3:1d:66:d8:a3:7d:7e:23:
71:5a:3b:76:67:f7:2f:3d:50:c1:00:a8:0b:fe:1f:35:8d:0f:
32:ca:d9:75:7a:a8:3c:f9:8a:4d:7a:93:6b:11:e2:a9:2e:42:
66:ae:4d:00:3b:58:1f:c0:45:ac:d3:57:b9:15:59:1b:5f:29:
de:99:46:53:99:a3:72:bf:c1:ba:09:08:5a:13:13:1b:89:21:
91:8a:10:b5:4d:ca:63:9e:9f:b3:6b:27:34:ac:27:e9:ca:e5:
3b:dc:f9:3a:ef:a6:46:62:bf:1d:61:05:77:a4:d7:3e:12:27:
1d:97:61:18:44:d8:fd:57:f2:55:7d:f5:92:9c:e6:11:76:84:
58:bb:69:a3:4a:1d:fc:a6:09:cf:59:d3:95:23:9a:cc:3c:c5:
05:de:eb:c2:73:1b:a9:39:68:c9:5e:d8:44:ff:22:97:9e:98:
97:e1:80:18:1e:d0:a1:15:7e:9f:6a:f5:26:65:45:88:db:b2:
79:1f:0d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:53:11 2024 by rpki-client on console-fra.rpki-client.org