Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/RgDBmrzg7vqe8HH-CCGWI4NTr6Q.roa
File: RgDBmrzg7vqe8HH-CCGWI4NTr6Q.roa (raw, json)
Hash identifier: 4uLT22PIarj72WPImOXDOjnx1svPiw2ryGHKMbExDAA=
Subject key identifier: 46:00:C1:9A:BC:E0:EE:FA:9E:F0:71:FE:08:21:96:23:83:53:AF:A4
Certificate issuer: /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial: 018CC5DCA6EBCC66E4DE6B3FE7AB55E3E6B8
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/RgDBmrzg7vqe8HH-CCGWI4NTr6Q.roa
Signing time: Mon 01 Jan 2024 16:30:21 +0000
ROA not before: Mon 01 Jan 2024 16:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32787
IP address blocks: 37.224.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:a6:eb:cc:66:e4:de:6b:3f:e7:ab:55:e3:e6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Validity
Not Before: Jan 1 16:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4600c19abce0eefa9ef071fe082196238353afa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2a:40:4f:13:ef:ff:44:86:07:25:73:fe:10:
b5:c0:de:98:a9:cc:d7:5f:75:bb:23:9b:46:01:91:
5f:8b:c0:02:d5:cb:19:2b:fd:2c:5c:60:e8:5e:62:
23:88:2c:3a:33:4f:33:c4:b3:28:dc:f5:6f:cd:bf:
78:2c:f2:fe:cd:0c:a5:b8:77:3b:c6:98:28:2e:e3:
0a:ee:4f:33:e0:c5:8e:94:70:e7:5f:81:48:25:1a:
86:62:81:1c:9c:0c:aa:7e:1f:da:66:36:1d:89:92:
bd:6b:f2:cf:98:f6:02:3e:a3:22:e0:0d:50:03:df:
20:5b:2e:46:79:4a:7b:0f:1b:0d:c5:0a:dc:76:bc:
85:0d:42:1c:8f:8c:e1:35:01:1b:ad:44:3f:fe:c7:
8c:3f:55:20:a7:64:43:51:34:29:8d:98:92:88:0b:
e4:c4:4a:e7:0e:10:b8:c3:4e:eb:97:32:32:d1:35:
41:ae:8f:cf:1e:72:b4:3e:2b:16:be:08:cc:14:8d:
ab:01:8e:34:4a:86:b7:b0:2b:96:2d:3a:90:8e:f8:
e6:ec:96:28:ae:0b:dd:38:f0:89:c3:68:08:12:09:
b2:c8:14:e3:58:1f:8f:29:2b:c6:07:cf:65:4a:4a:
99:5f:61:15:7b:00:eb:c9:6b:60:e1:6f:70:4f:bb:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:00:C1:9A:BC:E0:EE:FA:9E:F0:71:FE:08:21:96:23:83:53:AF:A4
X509v3 Authority Key Identifier:
keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/RgDBmrzg7vqe8HH-CCGWI4NTr6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.224.77.0/24
Signature Algorithm: sha256WithRSAEncryption
35:f4:aa:70:80:b8:32:00:09:cb:ec:b0:da:54:bf:7f:3a:62:
57:43:1b:ed:fa:b3:de:98:83:43:4a:52:36:44:3a:e4:f7:5c:
e0:b2:d5:5e:cd:1e:38:b9:7a:d6:fd:78:f1:ea:b4:d9:47:b7:
fa:ef:27:5b:d0:02:d5:10:6d:1a:b7:3c:5b:96:5b:86:97:b8:
84:7f:de:93:cb:14:aa:c2:26:7f:a3:db:b4:bb:56:48:77:fb:
b8:2e:ec:f0:a8:a7:ed:c0:77:72:52:e0:29:df:1d:12:c8:d3:
99:01:01:ff:b5:9f:ac:94:df:ba:03:10:a1:9e:f2:47:24:2e:
84:e4:47:0e:7c:13:50:fe:d5:3b:47:bb:0f:66:29:7a:b7:75:
ec:f0:82:d6:d1:11:f8:a1:1b:a9:7d:ff:be:66:a7:88:e9:c5:
7c:02:37:10:1c:bf:25:38:78:a1:ec:6d:80:cc:8f:ea:08:d5:
44:b8:73:9d:77:6a:a6:54:8e:ad:7e:34:9e:f0:61:df:24:08:
80:83:55:05:9c:98:8d:a9:86:75:93:9d:91:72:00:14:12:9f:
cb:47:32:8b:bd:ba:40:ef:ff:11:9c:41:19:c8:ee:a4:43:d2:
45:cf:3d:06:be:ef:0b:d6:89:bb:21:2a:f2:6b:c7:48:04:8f:
53:d8:68:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 17:07:52 2024 by rpki-client on console-ams.rpki-client.org