Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/_EvqZGMEFvAEt0MPdCjDQjmeSjI.roa
File: _EvqZGMEFvAEt0MPdCjDQjmeSjI.roa (raw, json)
Hash identifier: /2RdANr5Uvf/wEEq1HMYYHMg3XqAYzAlqZUbNES3q1s=
Subject key identifier: FC:4B:EA:64:63:04:16:F0:04:B7:43:0F:74:28:C3:42:39:9E:4A:32
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018E3282EDE52C90D2537FDFD2DAC02E7389
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/_EvqZGMEFvAEt0MPdCjDQjmeSjI.roa
Signing time: Tue 12 Mar 2024 11:53:45 +0000
ROA not before: Tue 12 Mar 2024 11:53:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210538
IP address blocks: 46.37.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:82:ed:e5:2c:90:d2:53:7f:df:d2:da:c0:2e:73:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Mar 12 11:53:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc4bea64630416f004b7430f7428c342399e4a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:19:7c:1b:14:76:49:e4:1f:fe:54:c2:ef:da:
56:c8:9b:55:6d:05:7b:4d:0e:90:55:41:56:0e:41:
35:de:76:a4:ce:37:04:3e:59:0a:b8:90:b0:3b:c2:
1e:26:ab:13:53:22:1a:13:21:4d:e6:31:cd:35:d4:
45:38:89:96:0b:b0:49:7a:c3:9c:82:67:e7:6e:18:
7a:22:97:04:4d:dd:7d:2d:ac:09:72:7e:4e:aa:f8:
a3:ee:f5:4f:27:41:a5:ca:b8:21:3e:f0:53:04:0e:
c3:d7:a8:2c:24:74:58:35:26:0f:09:7a:18:30:20:
d0:d7:47:e7:e0:3e:2e:3a:18:0e:9d:79:37:9e:50:
ec:d9:2b:e6:c1:d9:db:a3:6d:42:23:eb:45:11:98:
5d:df:58:36:ef:02:3b:73:fe:57:1d:c9:47:c3:54:
75:8e:1f:5d:d6:77:50:c9:18:33:9f:1b:bc:78:78:
bf:13:db:6c:b6:15:7a:57:e2:3e:06:41:aa:77:5b:
af:48:60:7f:36:e8:cd:5b:b5:e9:ad:16:9d:ef:83:
ed:24:12:11:22:3f:7e:60:a8:d3:8a:11:33:ea:b2:
03:35:34:22:2c:28:36:bc:20:d9:87:fe:21:d8:1f:
c0:f6:c7:27:2b:53:cd:58:28:01:2c:fa:9b:e5:d2:
21:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4B:EA:64:63:04:16:F0:04:B7:43:0F:74:28:C3:42:39:9E:4A:32
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/_EvqZGMEFvAEt0MPdCjDQjmeSjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.115.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:61:24:bf:9f:1c:61:b2:79:ed:7f:98:7f:8b:c6:eb:f6:5b:
a0:13:14:4f:e4:98:33:4f:73:73:c0:8b:82:10:51:bc:e4:cd:
b7:df:b3:17:d4:73:68:cd:4b:f9:1e:20:1f:4d:a7:d0:0d:bc:
d8:05:85:49:0d:a8:6f:6d:84:aa:6a:57:c2:80:ec:f8:94:45:
f2:0e:79:6f:2d:de:2a:11:f0:8e:f3:f6:3d:03:54:92:ba:04:
f8:78:e2:51:29:6e:1b:39:f2:20:73:ae:2b:0c:85:07:9e:f5:
27:79:cf:2b:3d:03:12:15:71:ae:85:9d:41:99:b9:9b:40:ff:
b4:40:6b:27:cc:e8:52:3a:92:62:24:34:69:52:50:fa:da:ec:
ad:5c:32:84:36:0e:fb:c6:e1:98:f2:dd:ec:8f:95:9c:8a:90:
cc:06:f0:b5:79:8d:76:30:d3:59:52:7e:35:14:f1:70:3b:30:
db:a3:14:5a:9f:2c:7d:0c:3e:8c:5d:a6:27:08:2c:c2:6d:ac:
24:26:8d:c0:46:37:fb:38:f6:ce:58:69:e5:04:c4:2d:a5:a7:
7f:c7:c0:04:10:b5:5c:5c:a1:5a:0b:ef:27:8b:f7:a5:23:88:
67:a9:aa:c5:5b:46:f9:2a:5d:14:fa:73:8c:4e:4b:d7:86:f6:
84:72:a2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:50:26 2024 by rpki-client on console-ams.rpki-client.org