Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/O5fY0dSox26D7GpBl6WYeHCXWtY.roa
File: O5fY0dSox26D7GpBl6WYeHCXWtY.roa (raw, json)
Hash identifier: AcH/wkg0XO9teSKf+gsva1aJzG/hvqGDEc/bEu19Wbc=
Subject key identifier: 3B:97:D8:D1:D4:A8:C7:6E:83:EC:6A:41:97:A5:98:78:70:97:5A:D6
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018CC348BDDBECCD468D4EDDCCD1E53438DA
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/O5fY0dSox26D7GpBl6WYeHCXWtY.roa
Signing time: Mon 01 Jan 2024 04:29:33 +0000
ROA not before: Mon 01 Jan 2024 04:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204316
IP address blocks: 46.37.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:bd:db:ec:cd:46:8d:4e:dd:cc:d1:e5:34:38:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 04:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b97d8d1d4a8c76e83ec6a4197a5987870975ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:eb:92:61:09:e7:f1:00:f7:ec:24:61:86:61:
86:3f:f8:a3:bc:e2:3f:51:c9:b9:20:1b:53:85:df:
8f:c4:1d:19:83:30:78:c6:09:9f:f2:91:69:ee:ce:
1d:9e:cd:f0:47:22:e0:79:dd:c0:6d:07:96:da:c8:
e8:f8:25:82:0e:f5:8c:63:73:92:85:50:61:b6:4c:
38:55:6f:e6:55:d2:d7:c6:e0:a9:38:27:c9:83:45:
d4:7c:84:f7:9d:c1:da:4c:15:bb:ae:14:3e:00:06:
b4:a9:68:83:8c:2c:55:6f:47:b5:7e:aa:38:fa:f0:
80:de:9d:55:93:04:45:ce:e6:48:db:c5:d0:58:11:
55:a0:e2:e6:87:7c:5d:2d:11:6f:a0:38:0b:3e:3d:
b7:e9:da:93:73:f3:2e:27:86:d9:6a:aa:bb:99:f2:
07:ef:0c:eb:2f:57:6b:c3:c2:1c:6b:21:7a:be:08:
5f:1f:d4:b7:29:6c:44:d9:00:bf:68:27:43:4d:3e:
d7:04:b2:08:cb:8a:f5:2f:9e:be:8d:f1:32:7f:09:
6d:7c:78:9d:b3:e8:2b:b2:ad:f1:a3:26:57:dd:2d:
9c:ce:d3:0a:02:8e:f4:0e:fb:ca:66:30:31:01:96:
e4:67:59:c2:f7:36:78:f2:e1:59:2c:72:e3:e9:7b:
bd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:97:D8:D1:D4:A8:C7:6E:83:EC:6A:41:97:A5:98:78:70:97:5A:D6
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/O5fY0dSox26D7GpBl6WYeHCXWtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.104.0/24
Signature Algorithm: sha256WithRSAEncryption
12:3c:2f:81:16:30:48:d9:10:cb:62:75:a9:bc:b2:f4:b3:88:
6e:30:fa:9a:5b:ae:c3:49:92:b8:f7:8c:7c:62:58:6e:58:61:
16:53:f3:77:7c:56:f8:11:c8:a4:09:e5:c7:fd:43:c6:09:fb:
25:96:48:a1:7c:78:0b:1d:31:7c:20:45:fd:19:40:df:86:c5:
92:ae:69:2a:5a:6d:33:d7:ee:f9:1d:16:a6:da:b7:ae:4f:78:
1b:3a:f3:2e:1e:d1:ed:55:e2:d7:aa:c5:a3:99:18:b9:f8:61:
d8:45:bc:f5:9e:db:2b:dc:34:24:e3:cd:35:f5:6b:11:9e:bd:
68:b7:8c:ed:19:25:43:9d:3d:8c:66:de:6f:20:aa:1f:56:1b:
03:99:71:9b:ba:07:c0:0e:07:c9:6c:12:7f:0e:e9:9d:45:51:
53:99:56:f4:07:47:b8:c6:a9:e3:8d:f6:bf:c9:a0:b0:bb:46:
7e:ee:41:66:f1:b7:73:b1:35:41:d2:39:e3:3d:6a:86:c9:6e:
39:7d:cf:f4:b3:3e:cc:d8:de:2d:ca:68:af:d4:4e:76:5b:d0:
0d:e5:3e:07:42:5d:8b:55:32:ab:9d:f2:ff:c1:20:f1:ee:77:
b3:df:33:22:d3:79:3b:df:58:7f:8c:60:d1:75:b8:6e:eb:a1:
96:69:78:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:50:26 2024 by rpki-client on console-ams.rpki-client.org