Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/3H6DwdNsZkPF08rp7cbidy8OIMY.roa
File: 3H6DwdNsZkPF08rp7cbidy8OIMY.roa (raw, json)
Hash identifier: Dn/HEMzLwfdLQPZQ9pC6Jl/7ErMajOiEnr7SDzRLeTk=
Subject key identifier: DC:7E:83:C1:D3:6C:66:43:C5:D3:CA:E9:ED:C6:E2:77:2F:0E:20:C6
Certificate issuer: /CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Certificate serial: 018CC4247515F8AE1BF19D24B5049785B26F
Authority key identifier: 1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/3H6DwdNsZkPF08rp7cbidy8OIMY.roa
Signing time: Mon 01 Jan 2024 08:29:32 +0000
ROA not before: Mon 01 Jan 2024 08:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35280
IP address blocks: 132.66.0.0/16 maxlen: 16
132.67.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 18:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:75:15:f8:ae:1b:f1:9d:24:b5:04:97:85:b2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Validity
Not Before: Jan 1 08:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc7e83c1d36c6643c5d3cae9edc6e2772f0e20c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b2:b0:74:9e:ec:83:40:3f:e1:ac:43:67:80:
45:24:f5:03:35:91:a3:a3:8e:03:25:2f:44:a6:e8:
73:20:2f:f8:c4:29:b6:53:ad:cd:22:46:47:be:c5:
f2:b0:38:06:19:e8:a2:c6:21:99:e6:5f:89:78:bb:
c4:09:35:e2:db:12:2f:62:cd:52:c7:62:40:e4:5b:
99:f5:d9:38:8b:31:9b:d0:77:04:46:95:62:77:a7:
5c:0d:b1:67:90:b3:c9:08:8c:be:7b:ef:7d:23:2f:
2c:e0:2d:84:83:04:d5:6a:1b:f8:f5:31:8a:cd:8b:
06:b3:de:f9:56:44:e7:6d:91:3c:7d:09:af:5e:76:
06:fa:40:4f:89:a9:f8:ee:10:2d:de:c1:8b:ba:b4:
fb:75:90:3b:19:5d:1d:a4:48:2f:d8:7d:64:ff:7f:
0d:e8:c9:77:dd:f6:b7:77:ad:3a:fb:b0:8b:fb:15:
79:a7:d2:5f:23:ef:c0:23:dc:f8:73:ab:39:e3:e9:
ac:6d:68:92:47:ed:64:e4:53:83:21:77:5b:cf:bd:
31:28:33:2f:8e:c1:81:85:39:3e:ef:1f:2b:6e:bb:
ee:1e:50:ea:b4:2e:f8:d7:fd:75:0b:d0:7f:b8:22:
b6:ce:64:ab:c4:68:90:04:4d:df:67:4e:5b:c6:62:
c4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7E:83:C1:D3:6C:66:43:C5:D3:CA:E9:ED:C6:E2:77:2F:0E:20:C6
X509v3 Authority Key Identifier:
keyid:1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/3H6DwdNsZkPF08rp7cbidy8OIMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.66.0.0/15
Signature Algorithm: sha256WithRSAEncryption
8c:ad:ba:33:01:75:40:4b:98:65:d2:44:b2:f4:bb:b7:14:f1:
53:7e:1a:88:bc:b3:9e:09:8b:99:19:f7:24:32:a0:5e:39:aa:
be:ce:98:9c:14:1d:6b:0b:d3:1f:f4:67:bb:92:a4:48:bb:14:
bf:4a:4c:06:37:cc:7f:bc:29:15:24:b4:03:b3:b0:59:1e:fb:
0f:f3:03:4e:2e:27:35:fe:02:28:2e:ae:19:ed:3c:27:8a:0e:
10:79:da:e3:01:6b:3e:ea:11:13:2b:bb:11:9a:12:89:bb:92:
8f:21:e1:6a:5c:2f:dd:6e:98:98:29:19:43:80:70:a8:96:a6:
0a:5f:a7:04:86:15:8c:bc:17:a2:46:5e:17:c9:d3:8c:0a:19:
44:9e:f3:9f:b7:9e:51:75:57:81:41:ff:2b:30:f8:4b:b3:b6:
65:73:30:91:dd:df:ee:c3:ba:b0:68:fa:15:21:f5:95:fb:74:
4a:29:8c:5a:38:a4:a1:96:5a:1d:dd:4a:0e:57:49:14:45:47:
4f:86:7e:e3:ef:89:1d:f4:f3:6a:de:a2:78:21:b1:8e:17:b1:
82:a6:1e:a1:6f:c0:ac:23:e9:55:78:eb:1e:ea:36:8b:fc:a7:
57:53:12:2d:92:0f:dd:55:09:54:f5:de:e0:52:f1:43:c7:4f:
7f:be:42:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 00:05:39 2024 by rpki-client on console-ams.rpki-client.org