Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/v8ZOjgKR38oCOBFX_BeNfMIVvtU.roa
File: v8ZOjgKR38oCOBFX_BeNfMIVvtU.roa (raw, json)
Hash identifier: lcHIZVbiyymk5MiO2QEQCqViJcaXgwpNXBbpT4Yr3hQ=
Subject key identifier: BF:C6:4E:8E:02:91:DF:CA:02:38:11:57:FC:17:8D:7C:C2:15:BE:D5
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018CC348B546908D15AD76F00BD4FE03C0C7
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/v8ZOjgKR38oCOBFX_BeNfMIVvtU.roa
Signing time: Mon 01 Jan 2024 04:29:31 +0000
ROA not before: Mon 01 Jan 2024 04:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 46.37.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:b5:46:90:8d:15:ad:76:f0:0b:d4:fe:03:c0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 04:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfc64e8e0291dfca02381157fc178d7cc215bed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b4:d1:ec:1c:44:85:2d:8f:60:9b:a3:86:09:
9e:ab:02:e4:7a:fb:78:8c:ac:fb:e9:f1:6b:ee:ab:
58:12:7d:a3:9f:25:3f:08:27:ec:af:b2:5d:4e:92:
b6:c9:4f:53:a7:39:2c:50:fb:ba:f2:c0:5a:99:80:
9d:af:eb:a1:7b:90:12:a2:42:78:bf:40:c4:5e:34:
9f:b0:2c:47:84:20:76:95:95:d7:a6:1a:57:6b:52:
59:e3:dd:d4:79:a3:8f:f4:09:1a:59:e8:e4:6b:34:
02:f1:29:da:14:15:21:78:d6:3d:2c:03:21:13:10:
b8:5a:8e:06:fd:44:63:36:8c:32:db:0a:44:e8:e1:
63:7b:30:2b:07:81:81:f3:ab:6e:88:4e:d3:67:47:
ec:a2:ff:31:29:1c:7e:8b:9a:d7:e6:65:d3:94:49:
27:1b:ac:ae:c5:34:f6:c4:4a:5d:8a:c8:b3:ab:be:
1c:8d:3c:5b:e3:52:da:de:aa:73:4e:45:81:e5:ca:
3f:2a:0c:ff:4b:6e:d1:62:b6:1d:bc:2a:20:7a:35:
0d:3f:4a:b0:dc:e0:47:0b:54:4d:c9:0a:eb:f8:af:
98:d0:2f:d1:29:ec:42:fb:e4:a2:34:18:74:ee:16:
3b:01:5e:89:21:cb:32:cd:8d:7d:c8:9a:be:14:c8:
13:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C6:4E:8E:02:91:DF:CA:02:38:11:57:FC:17:8D:7C:C2:15:BE:D5
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/v8ZOjgKR38oCOBFX_BeNfMIVvtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.127.0/24
Signature Algorithm: sha256WithRSAEncryption
84:1a:59:70:cf:d6:46:b0:54:79:7a:40:1d:09:98:92:a4:2d:
f7:01:84:3a:90:35:86:2f:f0:ab:ac:dd:a9:21:6f:45:12:a5:
f6:61:ef:8c:cd:79:d3:df:f0:83:a8:49:ad:e6:65:49:4d:ba:
78:d1:43:c5:c5:4d:c1:86:f4:2e:47:2e:1b:52:b7:ce:77:94:
ec:44:b2:bc:d4:02:85:62:d4:ad:97:ff:03:50:3f:48:44:03:
fa:de:19:56:d7:cb:5e:57:25:aa:bd:c6:ac:e0:37:3c:f5:e6:
f6:02:9e:29:8b:78:17:1b:b8:f1:8a:9a:f5:3b:d7:74:6c:0d:
c8:b2:21:90:22:74:7c:ca:76:8b:77:96:92:d8:85:34:31:cd:
e3:11:da:25:9a:8b:2d:84:16:7e:f1:d1:d3:fd:1a:8a:b2:a3:
ee:fe:a6:bd:23:17:40:26:83:09:9f:99:3d:04:7e:f8:1d:ab:
f0:bc:a5:c7:8c:ed:c5:bc:18:2b:6d:1d:7c:f1:d0:2e:ac:09:
98:1b:55:65:82:81:18:6a:08:d7:e0:ec:74:db:13:a1:90:e9:
ec:94:76:e9:43:15:da:7a:75:5e:ce:67:46:82:a9:4c:c3:ae:
be:1d:4f:11:97:f5:0d:f2:8d:db:bc:5b:3b:07:b1:08:f5:9c:
98:43:4c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 20:41:01 2024 by rpki-client on console-ams.rpki-client.org