Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/kGf9S_SXeiln6TJ4MXQGLIzpdmw.roa
File: kGf9S_SXeiln6TJ4MXQGLIzpdmw.roa (raw, json)
Hash identifier: S6dws2zcDJOaPp/Hd51NbdK/0ZoBjPyoc/lilY1Qb9o=
Subject key identifier: 90:67:FD:4B:F4:97:7A:29:67:E9:32:78:31:74:06:2C:8C:E9:76:6C
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018CC348BD187DE3146027ABD11FF3586751
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/kGf9S_SXeiln6TJ4MXQGLIzpdmw.roa
Signing time: Mon 01 Jan 2024 04:29:33 +0000
ROA not before: Mon 01 Jan 2024 04:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203363
IP address blocks: 46.37.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 04:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:bd:18:7d:e3:14:60:27:ab:d1:1f:f3:58:67:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 04:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9067fd4bf4977a2967e932783174062c8ce9766c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ee:59:7d:96:42:af:64:1d:ef:01:c2:12:9d:
7d:e7:b3:bd:32:89:72:b5:fa:f9:56:ae:60:48:50:
c7:5a:14:59:1a:2c:58:df:89:e3:f4:49:11:a4:f3:
06:4a:6b:09:bb:5b:93:30:0f:36:18:7c:0c:4d:3f:
f4:df:28:fb:62:27:f7:78:19:46:de:77:7f:42:f5:
d4:21:59:3d:51:58:6d:6c:4d:82:03:e4:e5:15:3f:
ec:92:e4:bf:fd:92:ce:5c:eb:6f:fc:f1:13:79:db:
16:da:0c:e6:65:97:c3:1f:db:dd:ef:a7:ba:0e:5a:
d7:31:42:6c:19:8e:08:46:9c:30:92:cf:e1:96:89:
4b:65:65:3e:8d:86:7d:83:d7:21:86:46:69:7e:7b:
e3:6c:d6:ae:7c:6e:4a:4b:2c:76:8a:85:96:50:68:
20:61:6b:b0:b3:d0:cb:a5:8d:d9:af:ca:c9:b9:31:
c9:04:a3:07:4c:29:4b:24:46:06:96:4a:92:cb:fb:
a1:bf:a9:13:dc:89:c2:8a:21:20:14:b9:77:02:5a:
be:f5:21:4f:28:35:a1:e6:bf:05:4c:fb:54:97:ad:
85:83:23:6c:8d:ea:e0:50:62:42:01:95:6f:a3:63:
6b:27:a5:32:89:05:b9:62:91:f7:ec:39:3f:73:74:
06:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:67:FD:4B:F4:97:7A:29:67:E9:32:78:31:74:06:2C:8C:E9:76:6C
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/kGf9S_SXeiln6TJ4MXQGLIzpdmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.124.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:74:55:2b:34:4e:e3:c3:b5:57:2d:08:82:fd:4a:f4:2a:80:
41:b2:ac:7f:ed:47:f9:ac:24:e7:53:91:fd:30:81:33:20:a4:
d3:38:6d:da:f6:35:c0:f0:4c:56:87:93:b5:eb:18:45:6c:6d:
bc:2e:ce:77:67:c4:b4:71:2e:b7:38:f7:c7:c9:bf:e2:4d:80:
cb:bd:89:41:16:2c:1b:af:84:4e:82:02:fb:12:bb:ad:3a:f7:
aa:f1:e4:fc:d3:db:4b:b7:fd:90:20:b6:42:53:41:2e:c1:51:
8b:2b:d4:42:6e:c1:89:e9:6f:7e:4b:0c:0d:63:62:dd:da:56:
06:00:b8:a0:36:d2:17:ce:d7:ac:6b:72:6c:5c:4e:5f:b8:9b:
ab:98:bd:65:55:79:42:e7:6c:d2:b0:81:8b:b6:db:fa:9b:d5:
04:a9:3b:9b:a0:0d:32:6e:1c:cf:61:1f:f2:d3:a9:a3:4c:92:
98:80:03:6f:d4:f0:ac:8a:53:21:f9:59:9a:84:7b:77:9d:1d:
32:8d:5f:f9:02:87:5c:cb:09:7d:d1:90:18:ba:4e:34:41:ae:
c8:31:a3:87:bd:d1:af:76:e0:57:e3:22:71:0f:d1:52:e8:d4:
07:ca:61:4e:aa:2b:36:14:93:6a:ba:e7:34:99:47:4e:f6:01:
9c:02:7b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 11:06:18 2024 by rpki-client on console-ams.rpki-client.org