Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/1-ChiW6WQnSVSx-O8IRJLvR83OQ8.roa
File: 1-ChiW6WQnSVSx-O8IRJLvR83OQ8.roa (raw, json)
Hash identifier: tGwCTCPEgmVKM32PIOR6zu7nBOc3XGE95r2FUT8gVgM=
Subject key identifier: F8:28:62:5B:A5:90:9D:25:52:C7:E3:BC:21:12:4B:BD:1F:37:39:0F
Certificate issuer: /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Certificate serial: 018CC26D05B983C5C0C023A884996374BAFA
Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/1-ChiW6WQnSVSx-O8IRJLvR83OQ8.roa
Signing time: Mon 01 Jan 2024 00:29:33 +0000
ROA not before: Mon 01 Jan 2024 00:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50440
IP address blocks: 37.122.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 10:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:05:b9:83:c5:c0:c0:23:a8:84:99:63:74:ba:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Validity
Not Before: Jan 1 00:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f828625ba5909d2552c7e3bc21124bbd1f37390f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b9:75:d6:c5:40:59:28:41:c0:4a:fc:43:aa:
a7:04:ea:6d:95:23:ba:59:ad:f4:ed:a2:58:50:6b:
5d:e4:2a:3c:90:7f:7c:c4:71:78:1e:a9:06:14:d4:
b7:21:d7:b1:ef:4f:b2:8d:03:7a:03:0c:be:b8:95:
0d:ef:9f:b6:68:13:bf:db:20:2b:6a:51:89:63:42:
94:d6:c1:d1:62:42:27:3a:ec:13:8f:72:a8:e4:a5:
29:de:9c:4a:56:13:47:98:80:6c:b6:f7:65:bf:a1:
0f:d9:88:9c:8c:68:5e:1e:18:60:bf:78:40:69:f8:
ff:16:f9:e5:90:37:08:fd:3a:a0:d4:0b:c4:c9:54:
af:90:00:c7:5b:f5:51:ef:87:06:eb:7b:68:81:1b:
55:52:53:9a:b6:b9:78:0e:37:0d:28:53:cf:ce:f3:
cc:66:c4:69:64:9c:fd:91:0c:27:26:8c:a9:bc:b2:
c4:04:0b:9d:09:01:00:00:32:cf:f4:28:5a:7d:36:
cb:07:b6:ed:c0:f6:ba:b8:89:27:90:14:d3:b3:94:
47:9c:45:82:6d:7c:b4:93:fb:7f:ce:e8:a8:b0:78:
8a:24:bd:5f:bb:db:eb:cd:f3:a7:cd:a0:a1:bb:05:
41:00:e1:00:e0:49:68:cc:2b:14:73:40:d6:81:bd:
2b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:28:62:5B:A5:90:9D:25:52:C7:E3:BC:21:12:4B:BD:1F:37:39:0F
X509v3 Authority Key Identifier:
keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/1-ChiW6WQnSVSx-O8IRJLvR83OQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.154.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:3d:a6:d0:8f:99:d6:85:d1:2a:e8:fd:d4:47:85:ef:9e:f4:
1a:97:d4:18:5a:97:c3:42:16:b3:c1:6a:2f:03:fb:b5:df:ae:
a2:be:b7:9d:4b:eb:2c:4d:61:53:0e:30:df:5f:d5:8f:ed:a3:
80:3a:3a:16:4e:a9:ad:8c:76:7c:1e:79:3a:44:dd:80:3c:4a:
4d:13:38:d6:07:31:15:4e:c7:fa:e2:3e:75:c8:ee:8f:e9:e1:
c4:ff:12:e6:cf:b7:bb:61:1c:ed:19:32:e2:4f:60:a1:d4:d1:
69:ca:3b:d7:f1:38:6f:b3:4e:2c:bc:09:79:19:cc:8e:2e:f0:
8b:fc:d9:2a:81:e4:aa:13:58:c5:4c:2d:51:54:cd:35:1b:b8:
09:32:3b:30:84:73:5c:38:39:03:7b:db:3b:c9:8a:30:a9:da:
4c:fb:6d:82:48:38:f5:69:4d:08:a5:4d:cf:80:96:1e:7b:6e:
73:76:25:aa:8f:04:10:0c:fd:51:f7:ad:ce:ae:9b:7d:31:d1:
06:02:f0:58:24:6a:6f:d7:31:ef:e5:2c:bb:84:86:77:a8:b8:
79:bf:35:a5:9c:cf:b5:2c:69:37:25:3c:41:95:7c:ef:27:70:
21:b1:2c:8d:b6:6a:01:c9:3a:2c:b3:89:a0:8e:18:c2:d1:07:
a2:28:82:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 12:51:08 2024 by rpki-client on console-fra.rpki-client.org