Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/rh5necTbUedteXDuc4Rqy01DR-A.roa
File: rh5necTbUedteXDuc4Rqy01DR-A.roa (raw, json)
Hash identifier: XTITnuD2L01KaZwuGgG+t+Pp/F0nV71Vq1K7ks2ujFw=
Subject key identifier: AE:1E:67:79:C4:DB:51:E7:6D:79:70:EE:73:84:6A:CB:4D:43:47:E0
Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial: 018CC3B73CED3B17BCF161CAA06CE28BF9B1
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/rh5necTbUedteXDuc4Rqy01DR-A.roa
Signing time: Mon 01 Jan 2024 06:30:14 +0000
ROA not before: Mon 01 Jan 2024 06:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28787
IP address blocks: 37.32.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3c:ed:3b:17:bc:f1:61:ca:a0:6c:e2:8b:f9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Validity
Not Before: Jan 1 06:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae1e6779c4db51e76d7970ee73846acb4d4347e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6a:34:68:9a:90:2c:e4:f0:31:30:6e:56:5d:
bf:52:1f:36:7b:89:bf:30:28:b3:57:64:d3:74:1d:
f2:c0:f4:5c:3d:07:31:7b:53:f3:7e:71:70:5e:6e:
2b:94:b2:f9:97:77:41:9f:ae:75:fa:cb:18:9f:17:
37:58:10:ed:3d:95:8a:e3:fe:8b:6c:84:1e:f6:d3:
4e:17:21:f7:a8:1f:83:80:02:b0:3e:3b:21:96:d3:
fe:21:b0:66:32:dd:cd:03:85:41:fe:81:0f:68:98:
3a:c2:eb:6f:a8:3b:40:23:c6:89:e0:f1:1e:6a:d4:
84:e8:5b:72:cb:b9:e8:90:85:2d:9e:c2:7a:7a:95:
f2:69:66:eb:d3:ce:bd:34:16:70:ff:fd:a5:32:db:
36:ca:07:25:11:f6:d4:73:47:ca:14:a6:a8:b5:50:
2f:01:a5:38:4f:19:cc:b7:65:9a:8f:fd:2b:d9:e0:
15:0f:b0:db:11:c8:a1:13:22:c2:32:cf:6c:7f:d7:
53:91:bd:82:3f:34:98:ba:c1:6c:ac:b8:54:0c:5b:
c1:5d:97:29:c7:f7:68:c0:2e:a3:f4:79:40:d4:5e:
4d:51:47:5a:ac:8a:7b:7e:51:6f:43:cc:ec:50:0e:
01:a6:39:07:4b:40:f6:3e:ca:27:c3:ca:6f:c6:24:
bb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1E:67:79:C4:DB:51:E7:6D:79:70:EE:73:84:6A:CB:4D:43:47:E0
X509v3 Authority Key Identifier:
keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/rh5necTbUedteXDuc4Rqy01DR-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.75.0/24
Signature Algorithm: sha256WithRSAEncryption
13:55:58:5c:21:0e:54:34:ba:92:9a:fb:94:14:cc:91:84:12:
4e:00:1f:9e:85:7a:03:ad:95:5c:94:10:36:9f:6f:22:8a:18:
f0:8c:54:fe:48:47:bd:ea:5c:64:ee:d5:fe:ae:61:9d:df:e9:
dc:bc:d8:d6:94:60:96:e2:60:1e:32:4f:81:c4:28:0c:d1:84:
32:7b:bf:72:53:c0:87:8b:f7:7b:91:16:b3:16:5f:a6:8b:02:
a3:9a:3f:6b:56:45:1c:b1:52:64:d2:76:44:8f:ac:37:0f:5a:
90:19:d2:98:64:10:2b:0d:b8:e1:a2:e0:c6:c9:72:36:09:a9:
d6:69:e4:ae:e7:ef:1d:b4:50:05:dc:74:e4:c8:91:12:41:b8:
fe:66:da:9c:41:71:60:2a:6f:9f:03:14:9d:59:b9:23:34:64:
b4:f0:82:0a:ad:19:6c:9c:1e:4f:6a:ab:38:37:da:8a:df:c1:
61:d7:71:40:d2:4b:55:df:34:a7:5f:d2:55:fe:4f:0b:a9:74:
a4:71:6a:5e:57:8d:74:5e:1a:ee:f3:48:92:8d:cb:a1:b4:98:
d6:c4:b0:c5:0e:71:23:0d:74:6c:8f:84:f7:2d:7f:35:eb:e6:
5e:ef:b5:81:32:86:97:37:a3:c0:3c:b3:b0:b1:41:4b:1f:10:
16:e0:71:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:05 2024 by rpki-client on console-ams.rpki-client.org