Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/eWCKoH-fvQB_ToRur7hJiXAzZDU.roa
File: eWCKoH-fvQB_ToRur7hJiXAzZDU.roa (raw, json)
Hash identifier: 7IdX1+cwrP2leEyw5r7pX7/DO2yywooqopDvYVMkBkc=
Subject key identifier: 79:60:8A:A0:7F:9F:BD:00:7F:4E:84:6E:AF:B8:49:89:70:33:64:35
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018CC348BE675619BBF8876551E055ADFD3F
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/eWCKoH-fvQB_ToRur7hJiXAzZDU.roa
Signing time: Mon 01 Jan 2024 04:29:33 +0000
ROA not before: Mon 01 Jan 2024 04:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207633
IP address blocks: 46.37.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 10:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:be:67:56:19:bb:f8:87:65:51:e0:55:ad:fd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 04:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79608aa07f9fbd007f4e846eafb8498970336435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e9:84:26:89:a4:dc:eb:00:f9:89:81:62:d6:
9d:4a:11:d9:03:3d:a6:b0:fe:f3:c0:5d:58:75:19:
99:76:f5:5a:7e:95:c8:16:f2:69:49:0e:45:59:f2:
b8:f7:cd:56:b0:e5:fa:83:90:dc:97:4e:49:d6:f5:
40:60:b6:39:f4:72:0b:70:ba:d9:ac:d2:f6:75:0c:
15:b4:65:67:78:ad:c3:0e:5b:2e:ad:7b:a9:74:e1:
2f:72:22:76:b9:ba:a5:fb:1c:9e:ad:80:f3:ee:76:
aa:de:90:ea:c6:ca:a4:88:13:5c:9f:69:c0:e1:3b:
17:db:10:a3:b8:c2:3a:92:c4:85:ac:a4:8b:6d:96:
f3:a6:47:8d:cf:33:25:15:ac:a2:2e:67:90:00:17:
0f:72:3d:07:bc:f3:65:e2:78:22:da:06:1a:f6:96:
6c:6c:6a:a9:9b:a7:55:68:99:87:aa:82:4a:72:85:
ce:c4:52:0e:87:e9:8e:03:1a:0e:9f:8a:61:e5:35:
d1:25:ac:52:18:4d:74:6c:11:27:3e:7c:fb:0e:ab:
ff:79:ec:e1:f7:1d:55:c8:d4:83:8d:ea:bf:95:de:
ee:d1:15:ee:45:dd:ff:23:63:0b:f9:1c:45:88:ae:
87:37:ea:00:5e:de:42:2d:94:8a:1a:d5:74:89:5b:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:60:8A:A0:7F:9F:BD:00:7F:4E:84:6E:AF:B8:49:89:70:33:64:35
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/eWCKoH-fvQB_ToRur7hJiXAzZDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.107.0/24
Signature Algorithm: sha256WithRSAEncryption
57:4a:fa:10:89:78:05:84:05:29:77:c4:19:36:88:5b:76:33:
b7:59:f3:ce:16:73:6d:25:73:78:85:65:9f:48:e3:08:73:23:
e1:b7:c1:26:3a:6b:bc:66:d2:7f:97:d4:e8:3c:5d:13:f2:55:
7d:57:72:c1:d3:12:54:59:9d:fc:e7:bd:74:bf:fc:85:fc:d4:
a3:c9:16:33:fd:16:2c:b4:43:66:5e:f2:2e:03:5d:01:bb:02:
65:89:41:cf:06:df:ea:74:1e:bf:67:98:1f:84:8f:2c:7d:d1:
9e:8a:3a:0e:e1:31:b4:40:87:35:8b:8f:0c:c0:dd:f0:05:67:
a2:51:22:8d:e2:8c:56:29:9b:4e:67:00:1a:a8:43:f3:cd:4d:
8a:cc:e8:86:5e:83:e8:f8:fe:72:e7:a6:99:86:d6:21:b2:8c:
70:0e:24:ed:42:71:79:ca:70:5b:c0:16:fd:f0:cd:d7:5f:78:
81:d5:da:9a:c3:5f:24:07:a2:8e:64:b1:6c:21:21:43:91:b9:
a9:95:13:30:03:17:6b:2a:ff:0d:3c:b4:c6:34:47:a0:d0:86:
9d:cb:65:ef:59:aa:90:2b:de:5f:e9:70:2f:35:3d:fd:81:ee:
09:05:65:06:1a:66:2a:09:0a:d2:a4:b9:7d:71:a5:fe:01:fb:
25:64:27:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 19:01:19 2024 by rpki-client on console-ams.rpki-client.org