Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DI8duCW76071m7AyYASnqXfmulc.roa
File: DI8duCW76071m7AyYASnqXfmulc.roa (raw, json)
Hash identifier: Wx+rBA3oWSxWuTGDtAaAZtO2DuVvCJk+kPoyRK9lsVs=
Subject key identifier: 0C:8F:1D:B8:25:BB:EB:4E:F5:9B:B0:32:60:04:A7:A9:77:E6:BA:57
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018CC348B4480BA4642E78B95D280C002544
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DI8duCW76071m7AyYASnqXfmulc.roa
Signing time: Mon 01 Jan 2024 04:29:31 +0000
ROA not before: Mon 01 Jan 2024 04:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3223
IP address blocks: 46.37.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 04:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:b4:48:0b:a4:64:2e:78:b9:5d:28:0c:00:25:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 04:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c8f1db825bbeb4ef59bb0326004a7a977e6ba57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cc:a8:0f:db:e4:cb:ce:06:56:92:40:26:af:
04:ea:9f:4a:d9:5f:df:b5:d5:c2:90:33:56:eb:82:
fc:94:0b:f0:a0:b4:4a:4e:26:38:ed:64:0d:92:e7:
68:f6:d6:35:47:1f:26:ba:31:54:f8:99:86:8a:08:
74:2d:03:4f:2c:1c:e7:7f:b0:0a:73:16:43:1c:5a:
8b:7b:c4:04:fc:b6:b2:e0:c3:3e:a3:9e:7d:5d:29:
7f:4a:73:d6:75:97:63:0d:ca:74:4d:9b:65:51:08:
41:7c:83:ad:19:14:3f:39:57:8e:38:41:6c:65:37:
92:80:08:c1:23:3a:1c:ec:ed:95:bd:c1:5b:84:f4:
9e:89:34:ce:40:81:0e:f9:20:26:f8:a3:2b:e3:f0:
d8:b4:5a:f6:bc:70:bb:31:b7:5a:e5:ed:2c:1b:e2:
17:91:d9:cd:9e:aa:dc:44:e4:6e:15:00:c2:ec:1b:
45:00:e4:2c:6a:3d:0a:fb:f8:3f:36:d5:14:4a:39:
02:8b:c8:f3:44:30:be:b3:90:8a:94:4b:ba:fd:06:
ba:d0:d4:f4:ff:55:a3:40:92:6f:b2:2a:f3:45:c8:
c1:93:da:e6:f7:b6:cb:4e:5b:48:5e:e2:be:e7:88:
4d:19:88:5b:f3:b0:ec:da:2d:a8:f2:20:4d:68:e2:
50:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8F:1D:B8:25:BB:EB:4E:F5:9B:B0:32:60:04:A7:A9:77:E6:BA:57
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DI8duCW76071m7AyYASnqXfmulc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.108.0/24
Signature Algorithm: sha256WithRSAEncryption
51:65:05:00:1d:12:60:12:f9:f0:09:cf:2e:eb:f4:a4:b5:cc:
92:4c:db:9a:b4:73:82:8f:7f:ce:c8:77:df:9f:05:a8:1f:f8:
7d:37:27:52:43:71:86:45:84:ea:bf:21:e8:a8:8e:e9:74:39:
0b:f0:c7:cf:b6:d3:31:e2:13:2b:21:77:38:72:eb:5b:b9:1a:
ff:e7:71:f5:2e:ab:9f:87:b0:52:ee:e9:27:c0:83:05:3c:3e:
62:78:32:99:fa:02:8e:23:49:87:49:7f:1f:f7:0b:ed:69:1b:
ee:1e:27:f1:67:27:71:9b:0c:07:85:38:c6:1b:48:7f:1a:aa:
d0:f4:d3:b8:95:6e:31:ac:c1:b7:c5:1c:42:2b:3b:ec:3a:77:
e2:da:2c:50:b8:0c:80:d4:9e:84:37:50:67:cb:5f:a2:27:88:
95:11:3c:cf:c9:77:50:3b:c7:66:1b:0b:1b:30:12:f3:e3:d1:
88:cd:8b:3d:6d:7c:12:3b:f3:c8:30:34:af:70:1e:81:10:7e:
a4:16:01:a2:67:05:3d:31:5a:d2:2b:4d:35:f1:9b:77:14:8e:
07:9b:e3:6f:b4:2b:f5:35:9b:9d:68:55:83:8c:aa:d8:96:85:
18:4c:94:2f:d5:0c:30:85:49:d5:01:b2:51:b9:62:b1:33:b8:
3b:a1:27:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 14:11:50 2024 by rpki-client on console-ams.rpki-client.org