Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/SHz5XfWi0MsdPS8zsi7AdSGKfmQ.roa
File: SHz5XfWi0MsdPS8zsi7AdSGKfmQ.roa (raw, json)
Hash identifier: 9zCPIq+NeESF3ZV47dfbpBxS7JePPAWc8r597uu2tX0=
Subject key identifier: 48:7C:F9:5D:F5:A2:D0:CB:1D:3D:2F:33:B2:2E:C0:75:21:8A:7E:64
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018CC348B4909A03ACBDB0B640F4921124A3
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/SHz5XfWi0MsdPS8zsi7AdSGKfmQ.roa
Signing time: Mon 01 Jan 2024 04:29:31 +0000
ROA not before: Mon 01 Jan 2024 04:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 46.37.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:b4:90:9a:03:ac:bd:b0:b6:40:f4:92:11:24:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 04:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=487cf95df5a2d0cb1d3d2f33b22ec075218a7e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:81:aa:50:d5:3f:0e:54:81:07:4c:b4:5b:f8:
7a:90:03:85:a1:33:88:de:5c:8b:0b:bf:33:91:5a:
ed:27:f8:b0:e7:98:67:0c:f7:fe:85:b2:f4:8c:64:
1b:f6:02:79:33:37:53:0b:08:31:28:82:5a:d6:d4:
24:53:cd:cc:ae:54:44:1e:89:ce:41:b3:e2:87:21:
48:f5:30:1c:02:76:1f:72:b9:27:95:1e:ef:5e:a6:
db:41:4c:23:e6:08:ad:a9:11:2d:9d:c8:5b:40:ce:
87:7c:be:7f:d3:10:d4:f7:54:5d:77:26:fc:94:46:
0b:5a:3b:1b:56:2d:00:3b:f0:0a:f4:ce:68:3d:0d:
d5:2e:59:65:0e:cf:15:87:6f:ae:47:20:ad:c3:95:
92:4d:f8:11:69:25:08:fa:b8:dd:04:d6:e1:39:26:
5b:59:ad:b2:5a:37:06:a8:7a:14:a3:fa:f7:85:7c:
80:f7:ed:80:e4:10:93:9d:f4:9f:57:cd:12:b1:ab:
f2:1f:1b:2d:8e:6e:85:68:30:88:3b:01:9f:db:15:
52:42:41:f9:f2:bc:7c:f9:87:7f:89:e2:50:f2:b1:
64:9b:06:f8:c1:2b:91:10:46:90:24:25:10:fe:9f:
0e:da:8a:ce:6d:41:eb:46:d9:d7:0a:29:22:2b:7c:
81:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7C:F9:5D:F5:A2:D0:CB:1D:3D:2F:33:B2:2E:C0:75:21:8A:7E:64
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/SHz5XfWi0MsdPS8zsi7AdSGKfmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.107.0/24
Signature Algorithm: sha256WithRSAEncryption
54:6d:4b:d0:9b:1c:8e:d9:60:5b:65:92:c0:f3:a5:77:6a:03:
80:c7:1f:e3:57:5c:f0:c8:44:61:b8:7a:b4:d5:e0:81:54:cb:
5d:97:3e:7f:24:52:ba:78:4b:ef:88:37:f7:a1:8b:62:32:f4:
ee:7a:5a:35:37:0f:75:6b:3d:06:c1:21:53:c0:7f:fd:cf:4d:
95:dd:bf:1a:9b:14:35:6f:88:b5:29:99:86:0c:52:e5:e9:1f:
a4:d4:aa:a4:63:5b:1d:93:95:07:b2:fb:82:d8:68:29:c1:7a:
e7:65:16:44:10:05:95:22:3a:1d:bc:a6:88:05:cf:7a:1c:c7:
ad:d3:2a:11:8a:26:46:e3:71:99:fe:41:ee:5d:f4:6a:89:60:
72:b1:5e:2a:cd:3a:72:0d:e8:9e:13:c2:7e:e4:3e:ee:58:61:
88:49:a8:e0:35:9b:bc:78:10:b5:22:3a:a2:83:c0:e9:98:77:
ba:e3:64:04:02:d7:c1:92:07:c9:df:8b:a3:33:23:ae:62:f6:
45:a9:5b:3f:f4:19:88:8c:e4:92:37:70:ae:a1:7a:96:7c:f3:
bb:a7:b8:cd:60:a3:00:a5:61:8b:12:ac:ed:83:84:13:04:67:
5f:ef:e6:a1:55:75:50:d9:48:8c:f1:80:0f:86:10:be:ff:4a:
99:e3:01:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:47:54 2024 by rpki-client on console-fra.rpki-client.org