Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/bQ1ild-O2tARleAajkeYOURNc-s.roa
File: bQ1ild-O2tARleAajkeYOURNc-s.roa (raw, json)
Hash identifier: 4WDFgn438KJhSpwPs/ScRYyhV7Vp2ZYJ8aaPY6xAFNA=
Subject key identifier: 6D:0D:62:95:DF:8E:DA:D0:11:95:E0:1A:8E:47:98:39:44:4D:73:EB
Certificate issuer: /CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Certificate serial: 018CC3B7174B0A1B7D23E0104968CFB47FAE
Authority key identifier: 37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/bQ1ild-O2tARleAajkeYOURNc-s.roa
Signing time: Mon 01 Jan 2024 06:30:05 +0000
ROA not before: Mon 01 Jan 2024 06:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209543
IP address blocks: 185.150.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:17:4b:0a:1b:7d:23:e0:10:49:68:cf:b4:7f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Validity
Not Before: Jan 1 06:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d0d6295df8edad01195e01a8e479839444d73eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b6:62:5f:23:88:e1:d2:94:99:67:20:91:63:
c2:78:7a:9c:d6:d0:cb:6d:59:e7:39:49:7f:49:fc:
2c:a1:18:6f:15:a0:02:2e:b6:c1:9e:92:17:c7:ab:
0b:07:ad:47:26:75:58:66:49:48:1d:36:45:05:07:
15:a5:5b:6f:b3:c6:12:c4:b2:67:42:50:70:03:ae:
52:58:68:6c:09:c0:9e:5b:d4:21:b3:e1:c3:03:a0:
5c:d1:c2:b8:1d:f4:11:08:34:6b:4f:0c:5f:f9:aa:
23:5d:7a:84:f4:c0:8a:50:3e:bb:96:67:a5:f7:df:
16:d2:1d:c8:b7:4e:dc:6b:45:b4:e3:15:ce:c3:f7:
27:f4:be:99:30:72:b3:1d:1f:4e:45:00:ed:72:1c:
7d:39:9a:67:58:0d:3d:8b:2c:64:ac:50:13:c8:8a:
22:8b:7c:8a:7b:e2:07:fc:e1:0b:45:14:33:09:3d:
36:fe:79:8c:57:31:b0:18:40:39:c1:03:20:bc:6a:
bc:66:53:b1:e9:a2:15:91:91:59:f4:51:4f:eb:dd:
c7:ab:da:fd:9f:70:b8:50:46:d4:29:bf:f9:3e:a7:
79:29:63:65:59:f8:1c:63:05:09:dc:69:0c:3d:b4:
17:42:e8:a2:74:1b:05:dd:39:d4:74:a3:9b:27:41:
26:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0D:62:95:DF:8E:DA:D0:11:95:E0:1A:8E:47:98:39:44:4D:73:EB
X509v3 Authority Key Identifier:
keyid:37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/bQ1ild-O2tARleAajkeYOURNc-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.36.0/22
Signature Algorithm: sha256WithRSAEncryption
46:57:7a:2b:f4:64:51:26:9e:84:0c:03:12:08:70:16:cf:f6:
9b:9b:a9:f1:ce:c4:eb:85:eb:a5:8f:0c:99:ae:59:00:16:cd:
d2:27:d0:4c:f9:92:a1:6f:82:be:fe:74:61:7e:8d:54:00:a0:
05:f7:47:72:30:9a:5e:0d:6f:12:03:42:d2:11:b0:cd:09:b9:
a3:33:16:b6:8e:9f:4e:ef:ea:66:9f:7e:0c:ec:7f:33:6f:a1:
42:7b:6f:78:e4:2b:04:37:6b:db:be:10:fa:24:47:87:52:54:
c1:ae:0b:db:a2:3a:56:79:e3:6e:55:53:31:08:95:71:8f:57:
c5:d8:fa:18:ff:80:bb:5e:5c:bd:df:b8:6d:8a:21:53:c4:00:
12:f4:84:7c:84:74:b4:7a:46:64:c2:9d:5e:b9:be:a5:99:27:
42:70:6d:c7:a6:df:e5:93:36:26:58:9b:a2:59:d2:7b:9b:39:
11:3b:8f:d3:bb:19:bb:b0:96:26:73:73:46:a8:93:4d:04:d5:
66:5e:40:b8:60:e3:8a:d1:37:e8:ba:1c:0a:f2:a0:9d:33:b6:
d0:ff:7f:0c:8f:d1:0e:1b:12:c4:48:87:0a:57:64:36:bb:41:
15:49:e0:8e:22:f1:e5:c5:0c:e8:29:48:3c:77:ce:59:e8:1f:
80:1f:17:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:54 2024 by rpki-client on console-ams.rpki-client.org