Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/RVE2fOEYG1omnNzNsdsDbZY7jTQ.roa
File: RVE2fOEYG1omnNzNsdsDbZY7jTQ.roa (raw, json)
Hash identifier: /KqiypmUlDQ0LAta02Vs3sjZTUOSJJfJK4J70nbqeqE=
Subject key identifier: 45:51:36:7C:E1:18:1B:5A:26:9C:DC:CD:B1:DB:03:6D:96:3B:8D:34
Certificate issuer: /CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Certificate serial: 018CC795020471D971BC4940D6F1FC26C51C
Authority key identifier: 37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/RVE2fOEYG1omnNzNsdsDbZY7jTQ.roa
Signing time: Tue 02 Jan 2024 00:31:20 +0000
ROA not before: Tue 02 Jan 2024 00:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2852
IP address blocks: 193.84.53.0/24 maxlen: 24
193.84.55.0/24 maxlen: 24
193.84.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:02:04:71:d9:71:bc:49:40:d6:f1:fc:26:c5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Validity
Not Before: Jan 2 00:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4551367ce1181b5a269cdccdb1db036d963b8d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b0:be:5b:b2:b9:97:93:2d:5c:90:dc:0c:24:
57:39:3a:07:91:3a:fe:53:3b:ce:2a:e5:5c:61:99:
e3:72:50:63:72:b4:4e:af:e4:7c:5d:73:31:0a:49:
a6:05:e2:3b:fd:95:eb:16:ba:f8:c7:a8:a4:26:3f:
02:8f:12:8b:8d:7b:d0:dd:58:20:08:f9:e8:7b:62:
b0:3e:6e:21:4c:7b:15:03:54:92:1b:d2:6d:9b:7b:
91:9b:27:25:f8:6c:2b:cc:9b:6f:d1:27:37:b3:39:
c4:55:7d:36:de:3e:13:fc:f6:aa:7d:0a:85:95:b0:
8a:d7:0b:09:89:8c:22:30:af:5a:fc:e8:62:87:dd:
0f:7d:ef:1c:d5:f1:64:dd:34:19:84:aa:c3:bf:03:
52:1a:a8:08:8d:2a:5d:7d:28:f1:27:f9:db:fe:e7:
b8:fa:b3:87:1d:3b:da:d7:c6:1e:e0:e8:ad:08:f2:
7c:a9:e9:4a:7d:cd:c2:66:dd:e5:63:9e:65:c1:b6:
2f:99:f0:dd:36:63:bd:0d:c5:7a:ab:bb:ca:a7:5c:
5f:56:28:78:fd:1a:ea:8d:b9:55:9c:25:7b:83:6a:
63:7c:16:b5:f1:db:9f:7f:16:26:36:7b:c3:7c:8e:
66:50:1a:59:b8:c6:3c:75:77:63:8f:33:d7:f7:11:
00:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:51:36:7C:E1:18:1B:5A:26:9C:DC:CD:B1:DB:03:6D:96:3B:8D:34
X509v3 Authority Key Identifier:
keyid:37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/RVE2fOEYG1omnNzNsdsDbZY7jTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.53.0/24
193.84.55.0-193.84.63.255
Signature Algorithm: sha256WithRSAEncryption
4e:77:4e:1e:44:a7:33:45:89:fc:22:e6:4a:45:be:a4:62:22:
7a:bf:7e:f6:2c:5e:7c:f2:8d:ec:97:86:ca:10:87:f1:64:c7:
ce:b2:1d:db:1e:77:bd:f5:92:e6:59:6c:e7:68:41:ad:74:c8:
82:f5:9f:e6:76:4f:1b:ca:53:66:07:02:3e:d1:d0:3f:31:28:
16:63:d3:9b:9a:75:41:0f:85:24:92:cd:b6:6b:b4:31:41:0e:
36:47:05:f1:8f:d7:5b:3c:26:19:46:41:ad:7c:58:70:8b:be:
71:9c:61:bf:75:bd:2e:78:8e:ae:51:c1:4e:dc:b8:c2:b3:b6:
d4:0d:df:fc:7b:86:5d:43:ff:e4:00:5a:2a:1c:c3:13:f3:8b:
88:ff:72:cd:1c:e2:dc:4c:7d:40:a0:dd:14:d6:7c:01:72:6d:
8e:24:90:37:ed:10:6f:75:fd:69:c5:6b:4d:7c:c1:1e:6a:7c:
80:0b:f5:59:39:92:63:9b:3c:4e:ef:10:6f:5c:2a:18:f1:34:
9a:23:a6:5e:96:10:2e:7b:81:f1:bb:fa:fd:9a:d8:3b:ac:d8:
33:fe:7d:9d:9c:dd:94:e0:4d:d1:4c:cf:f9:90:7c:d0:46:f7:
07:02:e2:f9:12:ea:e4:49:5c:85:8e:95:01:cf:fb:19:4b:e1:
7c:29:34:0a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 1 21:10:50 2024 by rpki-client on console-fra.rpki-client.org