Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/rhkHuTmUXOvRl_BkJYLiziaskQY.roa
File: rhkHuTmUXOvRl_BkJYLiziaskQY.roa (raw, json)
Hash identifier: jCYNtfXL6cmoJlmbFrT9iFr4Peud5VpdfNqOZq7wyfY=
Subject key identifier: AE:19:07:B9:39:94:5C:EB:D1:97:F0:64:25:82:E2:CE:26:AC:91:06
Certificate issuer: /CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73
Certificate serial: 018CC86EF05B1ECE600ABBDD918999BE3475
Authority key identifier: 6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/rhkHuTmUXOvRl_BkJYLiziaskQY.roa
Signing time: Tue 02 Jan 2024 04:29:22 +0000
ROA not before: Tue 02 Jan 2024 04:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62749
IP address blocks: 185.32.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:f0:5b:1e:ce:60:0a:bb:dd:91:89:99:be:34:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73
Validity
Not Before: Jan 2 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae1907b939945cebd197f0642582e2ce26ac9106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:a3:3b:8e:08:3c:3a:80:82:bb:74:9e:e1:
a2:e4:43:48:cb:fa:fa:6c:50:db:21:be:5a:59:a1:
2f:0a:f4:84:26:49:7c:2a:de:8d:d3:9b:7e:66:c3:
b9:f9:5f:6f:5e:13:c2:ed:93:ef:55:d4:fb:70:61:
1b:fe:bc:68:78:f0:39:14:c8:a9:80:e1:46:1d:a5:
a1:50:80:a5:28:f6:ba:e3:22:a8:2b:29:f9:18:9c:
2a:37:04:c1:5e:99:22:e1:7a:83:5a:05:7f:01:15:
ba:83:75:fb:2f:3d:b5:08:06:10:2c:37:ab:3b:9c:
69:e1:b5:45:4e:e8:cc:b3:8c:d1:ba:7c:75:96:fd:
19:7f:d9:e5:59:44:d9:76:c2:2d:60:7c:f1:ff:a1:
16:eb:d5:d5:36:64:1d:10:96:0a:12:64:25:34:5a:
a9:57:ef:2f:d9:34:04:61:48:7a:f5:f8:b5:0d:75:
6c:8e:70:c8:58:27:c0:71:ec:f0:a3:b6:1a:b6:1b:
96:05:ae:6a:e3:0e:77:8d:87:11:38:f1:b9:1d:13:
f7:47:dc:21:0e:3d:ca:2c:4a:8c:6b:08:59:66:e7:
f8:7e:7d:31:62:e6:88:22:78:39:2e:81:ac:1c:09:
4b:3b:25:32:f7:77:ec:74:3d:f3:76:2e:33:7d:23:
9b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:19:07:B9:39:94:5C:EB:D1:97:F0:64:25:82:E2:CE:26:AC:91:06
X509v3 Authority Key Identifier:
keyid:6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/rhkHuTmUXOvRl_BkJYLiziaskQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.76.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:f4:a8:2d:ae:80:08:e6:c1:06:54:b2:ec:40:7a:b4:a9:4c:
51:3f:90:e0:93:b5:a6:48:e7:4b:d9:77:9e:00:e6:b2:49:cd:
a7:7a:41:05:56:11:cd:e9:4e:46:dd:70:9c:4d:72:a0:eb:a5:
85:60:87:86:e2:a8:3d:66:f8:6c:b6:04:22:95:a8:a5:b8:70:
f9:ec:21:4d:d7:5d:e4:64:95:8a:0c:59:03:41:49:db:83:de:
59:b1:da:e1:b3:54:e9:33:28:c6:7e:57:49:0e:05:9d:2f:88:
2f:a5:d6:ce:f1:bb:7e:e8:07:7e:3b:2c:f4:be:88:63:dd:94:
ab:81:2f:5f:66:67:c0:30:be:62:eb:0b:0a:2e:c3:68:15:6e:
d3:3e:40:f7:3c:f5:fc:53:c3:e2:37:1d:4c:43:2d:3d:71:a1:
e4:df:15:e7:0f:3e:cb:7e:b7:5a:1f:ec:c1:4b:c0:35:b1:6e:
46:15:b2:be:8d:2b:c0:e9:6a:d6:6a:21:d3:f4:44:39:76:3a:
26:86:66:5b:96:a5:a1:8b:02:b0:83:01:71:2a:51:2f:36:a3:
2c:0e:4b:f3:54:5a:fd:a8:c7:7d:69:3d:0d:3d:76:21:9c:9a:
c1:35:28:2b:41:5f:0f:19:d9:b2:33:0b:fc:8f:e1:73:73:0c:
e5:7d:1a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 00:05:16 2024 by rpki-client on console-fra.rpki-client.org