Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/obdf8bfDrN03tYyQ_Rd7lWFsBng.roa
File: obdf8bfDrN03tYyQ_Rd7lWFsBng.roa (raw, json)
Hash identifier: z6cNeBkJiwiplfBvNPQ2hoF+nNkTcE3oV837UbZC22Q=
Subject key identifier: A1:B7:5F:F1:B7:C3:AC:DD:37:B5:8C:90:FD:17:7B:95:61:6C:06:78
Certificate issuer: /CN=eab9a157e12a2ef717d13231af06fd85454b3151
Certificate serial: 018CCA2B2153BAFA2377578D1F04C87A4BBA
Authority key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/obdf8bfDrN03tYyQ_Rd7lWFsBng.roa
Signing time: Tue 02 Jan 2024 12:34:33 +0000
ROA not before: Tue 02 Jan 2024 12:34:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47292
IP address blocks: 37.157.0.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:21:53:ba:fa:23:77:57:8d:1f:04:c8:7a:4b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab9a157e12a2ef717d13231af06fd85454b3151
Validity
Not Before: Jan 2 12:34:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1b75ff1b7c3acdd37b58c90fd177b95616c0678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c9:fe:38:ac:5d:89:0d:39:01:f5:0a:e6:fd:
2a:7d:e7:e9:46:18:9e:22:98:26:4d:73:29:7e:46:
41:37:6e:be:53:62:7b:6d:3e:fa:0f:9a:a3:bb:ab:
a3:bb:27:2d:60:4a:a0:e4:ea:f2:0a:3d:da:b8:b1:
1a:8b:c0:0e:d3:b5:9d:b6:df:0e:c7:1f:58:83:31:
a8:9b:b7:dc:2f:33:86:ee:dd:95:9e:1a:1c:fd:81:
80:98:da:0b:1d:70:1c:bb:ea:f9:48:ff:00:12:1e:
fe:9c:ba:ee:30:8a:0f:9a:cf:7b:c4:7f:36:66:ef:
5e:21:59:56:f7:fa:43:94:2a:53:28:2f:25:12:a2:
b2:82:2d:e9:79:3c:d5:e2:71:a7:5f:40:12:56:4f:
46:e9:2a:46:95:ef:6a:50:82:c3:1e:9b:1a:7b:59:
4a:10:f6:55:01:d1:51:1a:0c:98:a3:a7:8a:02:3b:
16:c0:25:78:da:96:7f:21:0c:4c:7c:7d:37:3c:f5:
91:04:30:e9:84:bc:a2:e7:68:fe:c8:47:80:04:a0:
2b:27:57:42:0e:e1:2d:e8:8c:a7:10:76:39:63:58:
58:6b:1d:93:de:72:0f:65:e6:77:26:e0:ec:4b:b5:
69:85:f5:48:4a:87:7e:bc:4f:b6:a8:7a:6b:aa:76:
0a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B7:5F:F1:B7:C3:AC:DD:37:B5:8C:90:FD:17:7B:95:61:6C:06:78
X509v3 Authority Key Identifier:
keyid:EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/obdf8bfDrN03tYyQ_Rd7lWFsBng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.0.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:75:82:02:30:e9:a3:cb:63:56:0c:c8:d4:a1:5d:23:38:29:
77:40:ad:20:7b:c7:f0:00:1d:30:88:69:99:37:7d:52:ea:e9:
8c:b5:79:15:af:94:67:51:08:87:e2:64:a4:1b:86:4e:99:0b:
dd:49:f0:bf:21:fb:9d:1d:33:07:45:05:ed:a4:e2:0b:9d:ea:
6a:77:bc:67:6f:61:ff:f8:2c:a8:2f:e7:b1:56:15:36:b8:9e:
1b:e7:de:ba:39:30:9f:da:71:5d:cb:59:02:98:c5:7b:16:72:
d7:06:bb:5f:1b:e9:1b:c2:c9:2d:d0:3f:3d:95:47:f4:6f:03:
a0:ec:12:3f:df:9f:47:3e:b6:c1:bf:aa:c9:eb:f3:78:da:bc:
06:cf:61:da:2b:1b:68:a0:fb:7b:c0:f4:a8:03:ce:d9:65:08:
0a:3f:9e:c2:8a:4e:f0:79:32:70:8d:b3:4a:92:48:64:68:a2:
f2:55:1b:5c:bc:ed:be:3b:b5:39:01:52:90:20:5d:87:de:4e:
fa:4a:86:08:f6:9d:00:60:26:ce:64:ac:6f:9a:52:d0:34:06:
e9:99:94:8d:1f:4e:7a:17:ea:61:2e:92:ac:bf:0a:88:9b:ca:
39:4d:38:e0:a3:8c:0a:7c:e5:ba:fe:3a:62:64:91:4a:0c:85:
c7:fa:b6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:10:23 2024 by rpki-client on console-ams.rpki-client.org