Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS37191.roa
File: AS37191.roa (raw, json)
Hash identifier: xM6Up6vbYL1esWcIhxDxETJ3q7D4dsumKhU4CPo4wwI=
Subject key identifier: 25:02:2A:1F:A8:97:15:90:20:DA:82:C3:67:21:D3:63:70:D4:FB:4A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 62BCF89FD387E5A31C7DAB9F8588A63A753EDE97
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS37191.roa
Signing time: Tue 07 May 2024 18:11:15 +0000
ROA not before: Tue 07 May 2024 18:06:15 +0000
ROA not after: Tue 06 May 2025 18:11:15 +0000
asID: 37191
IP address blocks: 146.103.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Jun 2024 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:bc:f8:9f:d3:87:e5:a3:1c:7d:ab:9f:85:88:a6:3a:75:3e:de:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 7 18:06:15 2024 GMT
Not After : May 6 18:11:15 2025 GMT
Subject: CN=25022A1FA897159020DA82C36721D36370D4FB4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:18:2e:91:5c:b9:71:68:7d:91:12:80:22:
35:b1:0d:2b:c3:f0:d0:15:82:e6:3c:2c:6e:e9:ed:
96:80:16:78:dd:1c:a1:03:66:01:f4:c2:26:00:02:
e8:36:1d:7e:2c:a6:ae:07:49:23:b2:94:ab:30:c8:
55:8a:d0:e6:64:75:fa:b7:0c:56:0e:1b:91:60:c7:
52:b1:3e:aa:99:58:56:eb:d6:c2:7e:18:fb:0a:33:
f6:7a:5b:93:9a:f9:5e:6f:08:79:7a:df:86:be:48:
2f:55:12:83:78:c0:de:73:a6:75:bd:17:ff:73:80:
f4:19:c8:14:cc:e4:82:d8:46:cd:6b:e7:26:05:23:
0a:97:25:c3:ea:7e:27:20:c0:cc:95:d9:e7:ab:93:
c5:c8:f9:d2:e9:90:89:ff:e9:e8:07:e9:5a:d6:59:
c6:90:e3:77:b6:25:f6:90:06:9b:a6:e9:23:8e:31:
e6:65:93:59:3d:e9:44:61:b6:88:71:f1:4a:11:19:
a1:36:10:29:56:4b:5d:5c:75:9b:0e:54:a0:96:a6:
9f:98:a1:78:3a:b3:a7:b3:e4:24:90:46:63:13:cb:
b2:83:58:49:2f:e5:4a:ca:a5:76:be:97:42:d4:15:
ca:43:24:9e:83:0f:bf:72:51:f2:fb:19:6f:f9:dd:
39:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:02:2A:1F:A8:97:15:90:20:DA:82:C3:67:21:D3:63:70:D4:FB:4A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS37191.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.32.0/24
Signature Algorithm: sha256WithRSAEncryption
58:8f:a2:e2:c3:7a:ec:cd:0f:f1:b7:4b:d8:31:01:a5:ba:df:
e5:d9:ed:b3:b0:2b:46:fa:e9:46:23:c6:12:dd:19:ca:74:98:
aa:d9:3b:11:e8:48:70:88:43:0c:03:6a:ee:b1:36:c0:8e:d0:
5a:45:2a:f2:07:0f:c3:3c:b2:80:b7:7b:bd:ac:0f:e6:52:88:
95:53:11:57:13:ed:16:d8:d5:25:83:9e:00:02:ba:1a:7c:e5:
cc:23:23:40:9d:79:8a:35:55:85:28:73:26:4d:d1:91:af:4c:
f9:24:6e:51:1f:f5:e0:3a:e4:a8:77:17:1d:bf:4d:8f:e1:1e:
9d:cd:d9:06:4e:1e:e0:c4:a1:12:f5:3f:bf:6f:db:cc:3f:ed:
75:5f:8b:7e:40:13:ef:6c:04:29:c2:8f:ba:fc:6f:39:4c:bf:
d2:eb:54:41:6f:78:d7:64:8e:90:c1:ca:b7:1d:9d:18:46:1e:
7e:8e:f8:ca:eb:fe:b0:c8:d5:5f:7e:b7:aa:5d:dd:50:1f:94:
9e:9d:70:44:0b:03:ea:1e:85:a7:88:3a:0d:3e:b8:0c:4d:87:
53:00:76:c0:e3:2f:2c:8e:76:66:13:23:2d:63:5e:52:36:a2:
9e:10:0e:df:0e:f1:ed:6f:e7:d6:aa:8a:1a:eb:88:93:da:57:
3b:61:4b:5a
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUYrz4n9OH5aMcfaufhYimOnU+3pcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDA1MDcxODA2MTVaFw0yNTA1MDYxODExMTVaMDMxMTAvBgNV
BAMTKDI1MDIyQTFGQTg5NzE1OTAyMERBODJDMzY3MjFEMzYzNzBENEZCNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6hhgukVy5cWh9kRKAIjWxDSvD
8NAVguY8LG7p7ZaAFnjdHKEDZgH0wiYAAug2HX4spq4HSSOylKswyFWK0OZkdfq3
DFYOG5Fgx1KxPqqZWFbr1sJ+GPsKM/Z6W5Oa+V5vCHl634a+SC9VEoN4wN5zpnW9
F/9zgPQZyBTM5ILYRs1r5yYFIwqXJcPqficgwMyV2eerk8XI+dLpkIn/6egH6VrW
WcaQ43e2JfaQBpum6SOOMeZlk1k96URhtohx8UoRGaE2EClWS11cdZsOVKCWpp+Y
oXg6s6ez5CSQRmMTy7KDWEkv5UrKpXa+l0LUFcpDJJ6DD79yUfL7GW/53Tm5AgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUJQIqH6iXFZAg2oLDZyHTY3DU+0owHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMzcxOTEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACSZyAw
DQYJKoZIhvcNAQELBQADggEBAFiPouLDeuzND/G3S9gxAaW63+XZ7bOwK0b66UYj
xhLdGcp0mKrZOxHoSHCIQwwDau6xNsCO0FpFKvIHD8M8soC3e72sD+ZSiJVTEVcT
7RbY1SWDngACuhp85cwjI0CdeYo1VYUocyZN0ZGvTPkkblEf9eA65Kh3Fx2/TY/h
Hp3N2QZOHuDEoRL1P79v28w/7XVfi35AE+9sBCnCj7r8bzlMv9LrVEFveNdkjpDB
yrcdnRhGHn6O+Mrr/rDI1V9+t6pd3VAflJ6dcEQLA+oehaeIOg0+uAxNh1MAdsDj
LyyOdmYTIy1jXlI2op4QDt8O8e1v59aqihrriJPaVzthS1o=
-----END CERTIFICATE-----
Generated at Mon Jun 10 04:01:02 2024 by rpki-client on console-ams.rpki-client.org