Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/vq6cWNXN-vgxWRWNULQfBaRl2zw.roa
File: vq6cWNXN-vgxWRWNULQfBaRl2zw.roa (raw, json)
Hash identifier: qYYwOiYgLuQfP2ll5TTi/t0gDEtni+1LoGiyGMFEzPw=
Subject key identifier: BE:AE:9C:58:D5:CD:FA:F8:31:59:15:8D:50:B4:1F:05:A4:65:DB:3C
Certificate issuer: /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial: 018CC5DCA635EE97EB8BDDB4FEC9FA4F5839
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/vq6cWNXN-vgxWRWNULQfBaRl2zw.roa
Signing time: Mon 01 Jan 2024 16:30:21 +0000
ROA not before: Mon 01 Jan 2024 16:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 37.224.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:a6:35:ee:97:eb:8b:dd:b4:fe:c9:fa:4f:58:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Validity
Not Before: Jan 1 16:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=beae9c58d5cdfaf83159158d50b41f05a465db3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c1:f3:18:ee:3c:aa:d2:8d:ec:cd:3f:66:f3:
09:cc:d4:89:ba:d0:de:8c:3d:61:4c:7e:db:ec:8f:
06:1c:50:3b:88:1b:04:4f:97:1c:0d:64:34:0c:33:
7d:62:42:dc:34:45:b3:81:c0:ff:d8:85:f5:24:97:
9e:79:a2:05:e4:94:6c:b6:8a:ba:58:cf:50:be:a8:
ba:69:0e:cd:25:81:5b:ec:18:21:d2:3a:94:22:14:
f6:4e:41:51:a4:43:29:27:0f:1c:7e:86:22:90:10:
4f:23:dd:d7:4a:13:26:b7:4d:47:8a:a2:05:0d:14:
44:bd:c0:54:39:ec:23:43:c2:ad:7b:d2:ee:42:a6:
09:e7:16:e8:b8:ca:9b:46:12:52:7a:b0:af:a1:3a:
ed:a3:29:9d:f1:2c:f4:8d:aa:7c:24:52:b9:a6:48:
24:5f:ee:35:0b:51:bd:93:b0:d3:8e:c8:9e:eb:2d:
6c:30:96:ad:4a:74:94:1a:77:d9:7c:1a:3f:9f:24:
97:55:07:ea:6a:d8:4b:10:7e:c1:9f:9f:79:84:81:
2d:50:7f:1b:c4:54:77:2d:26:44:b5:81:3e:4d:c3:
43:71:a0:3c:6c:fb:30:0b:8c:34:d9:0f:77:73:2b:
6a:62:26:a4:96:c0:37:82:db:2d:45:8e:66:ae:99:
1a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AE:9C:58:D5:CD:FA:F8:31:59:15:8D:50:B4:1F:05:A4:65:DB:3C
X509v3 Authority Key Identifier:
keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/vq6cWNXN-vgxWRWNULQfBaRl2zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.224.77.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ef:fd:73:e1:dd:3a:f5:66:e6:e8:e0:7e:ef:36:46:a8:96:
4f:d7:55:12:86:7f:04:90:22:ee:8c:ec:e3:9c:10:94:54:01:
04:77:6e:1b:a3:14:50:7d:94:98:76:c9:24:d3:d8:a1:5a:36:
e2:2f:2b:06:4b:3b:c4:60:1f:ed:05:05:bc:43:12:d2:77:49:
e0:91:97:e9:ac:52:ff:56:41:22:85:11:b6:dc:cb:0c:05:c8:
c7:5e:da:bd:72:7a:a2:bd:0d:97:97:8e:af:75:31:65:4e:89:
49:5e:9e:ba:82:3d:41:bf:f7:0e:36:af:81:2f:f6:82:55:20:
47:7e:5d:1c:4f:5c:ea:db:d4:38:42:d7:6d:a7:cd:e4:07:84:
0d:3a:ee:6a:37:7f:fe:61:c2:04:ed:ca:dd:65:7c:cf:d8:9a:
71:de:5f:d8:44:e6:72:84:22:2d:33:b4:a8:f2:e8:2d:df:f1:
2b:a0:7e:9a:53:7b:4c:d6:0f:2b:e0:fe:07:a0:71:ad:49:5b:
ff:0b:30:b3:8f:68:e7:97:c9:c1:ee:70:b8:48:26:bf:73:b2:
e6:36:29:05:96:b9:3d:8d:b2:66:4b:10:77:65:8c:2a:91:87:
6d:be:3e:9c:74:26:b4:43:0e:c6:1a:08:7a:a1:67:50:73:2d:
30:70:70:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:31:11 2024 by rpki-client on console-fra.rpki-client.org