Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/kvoJsZlNBJrkEEzYPPJLseMQm5g.roa
File: kvoJsZlNBJrkEEzYPPJLseMQm5g.roa (raw, json)
Hash identifier: 8E4G74fEGkXNoTd1KRiPbpNXUgJ5Zk0eXISRO4ethII=
Subject key identifier: 92:FA:09:B1:99:4D:04:9A:E4:10:4C:D8:3C:F2:4B:B1:E3:10:9B:98
Certificate issuer: /CN=eab9a157e12a2ef717d13231af06fd85454b3151
Certificate serial: 018CCA2B218CBD1FB2BCFB08CC51C29E3D36
Authority key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/kvoJsZlNBJrkEEzYPPJLseMQm5g.roa
Signing time: Tue 02 Jan 2024 12:34:33 +0000
ROA not before: Tue 02 Jan 2024 12:34:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198622
IP address blocks: 37.157.0.0/21 maxlen: 24
185.84.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:21:8c:bd:1f:b2:bc:fb:08:cc:51:c2:9e:3d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab9a157e12a2ef717d13231af06fd85454b3151
Validity
Not Before: Jan 2 12:34:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92fa09b1994d049ae4104cd83cf24bb1e3109b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:51:07:76:b0:cc:de:96:73:c3:92:e3:8f:
26:3c:29:b2:4e:2d:c7:f5:05:16:21:f6:3d:91:e2:
63:f8:37:b1:c5:69:a0:22:f8:98:37:3d:9c:e8:91:
e1:16:0d:56:dd:21:54:dc:d8:67:c2:16:fa:36:34:
1d:e5:bc:c9:42:b5:93:6a:e8:73:3b:33:d0:2b:28:
88:0b:09:18:a2:47:1f:ad:8d:54:3a:1b:0c:3b:6f:
14:44:bd:de:ad:3b:a9:a1:95:b4:59:f6:cc:84:aa:
35:c1:c2:7c:61:c0:71:18:31:d8:0c:d1:d0:1b:ce:
05:5d:21:d4:af:e9:81:70:48:49:58:f5:b0:39:cf:
31:1e:73:84:83:41:e7:5d:89:d6:78:9d:46:44:cd:
49:d8:ee:f6:f1:84:8e:9c:35:e5:b9:c1:08:20:7b:
08:17:e9:e7:ad:2b:7e:96:91:c1:da:32:25:5e:f1:
46:a3:90:8c:81:f1:1b:a2:20:9c:ef:67:e7:28:3d:
80:0c:ec:db:39:d0:42:ed:81:15:29:5a:27:36:7b:
36:d3:25:2b:60:4e:c7:c9:e7:31:96:c2:22:51:31:
1a:2f:4c:5f:9b:12:28:e3:5a:62:00:ef:c0:e7:73:
50:26:47:dd:33:e0:d8:56:1f:01:21:88:3b:7a:0c:
4e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FA:09:B1:99:4D:04:9A:E4:10:4C:D8:3C:F2:4B:B1:E3:10:9B:98
X509v3 Authority Key Identifier:
keyid:EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/kvoJsZlNBJrkEEzYPPJLseMQm5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.0.0/21
185.84.60.0/22
Signature Algorithm: sha256WithRSAEncryption
17:84:9a:8d:79:33:d1:f4:d7:de:f6:ce:cd:67:60:1b:d4:ac:
23:e2:35:71:a4:92:e4:07:52:c2:5f:cb:7a:6f:1c:fd:89:c7:
02:b4:3a:62:4d:6d:91:02:2e:ab:2a:5d:1f:4f:6a:08:dd:58:
c8:fb:28:04:05:bd:7e:90:14:98:3f:67:ec:1f:64:cd:c5:d1:
94:76:91:66:70:ed:dc:7a:55:5a:80:7e:e3:0c:32:27:99:7a:
15:e8:92:87:fd:ff:8d:51:2a:36:2d:53:c3:c0:8b:ae:db:e0:
61:74:7c:eb:9d:30:8d:eb:11:db:82:84:b3:27:e2:1e:2c:5f:
7a:b2:fb:17:66:ae:fe:d0:80:47:03:c0:fa:d5:0d:88:f5:4e:
20:7e:e7:d2:d2:c2:68:61:37:76:6a:55:59:a9:34:71:da:4a:
25:fd:3f:f6:f9:b6:12:2f:49:d7:54:31:0f:83:a8:0e:14:14:
0d:f4:0d:5a:c1:a5:ba:6a:f6:18:b2:31:ba:e3:88:64:5f:8b:
df:09:74:56:8e:17:2b:9a:6a:61:08:e5:20:7e:21:50:b7:22:
16:6a:ad:15:3b:1a:e0:e1:c1:6c:a6:33:5c:74:0e:cc:08:a1:
24:fb:63:f2:ae:3c:c8:0b:0d:16:c9:eb:54:5b:cf:27:80:4a:
f2:83:04:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 13:59:29 2024 by rpki-client on console-ams.rpki-client.org