Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/D-6C32qSCvE0wASc7t4LsO7rU6w.roa
File: D-6C32qSCvE0wASc7t4LsO7rU6w.roa (raw, json)
Hash identifier: lc1Be0mEo59qmmX2e8pygNzhpF/xtwOVq0a+wifpowE=
Subject key identifier: 0F:EE:82:DF:6A:92:0A:F1:34:C0:04:9C:EE:DE:0B:B0:EE:EB:53:AC
Certificate issuer: /CN=88678ca34c3c6365fb616a66077160a494a6e9d6
Certificate serial: 018DC5F368ABB1AD9CC668662D5ED9B5FEEA
Authority key identifier: 88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/D-6C32qSCvE0wASc7t4LsO7rU6w.roa
Signing time: Tue 20 Feb 2024 09:58:00 +0000
ROA not before: Tue 20 Feb 2024 09:58:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20921
IP address blocks: 62.32.128.0/17 maxlen: 17
62.32.192.0/19 maxlen: 19
83.231.32.0/23 maxlen: 24
213.143.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c5:f3:68:ab:b1:ad:9c:c6:68:66:2d:5e:d9:b5:fe:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88678ca34c3c6365fb616a66077160a494a6e9d6
Validity
Not Before: Feb 20 09:58:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fee82df6a920af134c0049ceede0bb0eeeb53ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3b:29:9b:86:7b:d2:1a:5a:3a:f0:e2:a5:71:
db:01:46:1f:72:a0:e5:35:aa:7b:57:11:c9:9a:8c:
41:94:d5:15:ee:b6:2f:28:70:21:26:c5:29:8c:2a:
45:3c:21:31:a5:32:3d:0b:23:5a:bc:2b:d1:af:ca:
aa:40:61:be:cf:4e:bb:e9:2f:af:01:08:8a:cf:4e:
50:1b:60:c4:48:d1:fd:bc:15:e1:60:c8:2d:57:8f:
2d:36:27:fa:5d:d9:73:e0:fd:d6:bb:e3:fc:74:c9:
9d:a7:e2:27:0f:ca:c7:47:86:19:a1:8a:d1:51:0f:
5e:2e:ff:09:45:61:40:8d:4f:da:b5:c8:39:56:ba:
36:e9:c5:d9:b9:ca:db:fc:28:8e:10:74:46:b5:86:
72:b8:1d:62:7f:66:af:b0:e8:6f:5f:7e:85:d3:60:
7d:96:ed:1b:b6:1e:1b:41:51:27:58:1b:9d:a9:f8:
b7:55:38:58:61:f0:04:fc:bf:5f:53:da:96:ed:4a:
76:33:00:d6:0c:18:a8:d6:a7:ee:ab:a6:66:72:76:
65:0d:ee:6c:c1:56:b0:d7:76:92:a9:0a:86:c6:49:
b8:dc:07:e8:1e:51:33:c8:af:5f:53:50:a4:af:38:
95:64:0b:a5:13:9f:92:5b:b8:ad:fb:49:19:37:b4:
d5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EE:82:DF:6A:92:0A:F1:34:C0:04:9C:EE:DE:0B:B0:EE:EB:53:AC
X509v3 Authority Key Identifier:
keyid:88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/D-6C32qSCvE0wASc7t4LsO7rU6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.32.128.0/17
83.231.32.0/23
213.143.36.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:53:19:d4:ff:86:6f:55:77:df:eb:d7:f2:8d:bb:4a:85:37:
9b:44:05:78:d1:d6:3e:44:4e:d6:59:1b:42:5f:9a:20:f7:37:
c0:ae:99:84:e8:31:bc:df:f3:52:5c:26:9b:60:3a:68:5d:e8:
09:1f:11:18:a9:6e:75:f3:bd:8b:ff:75:d8:4b:c7:40:fa:6f:
cd:f9:98:03:f6:24:ac:ed:06:e4:ba:95:cd:4f:b2:4a:52:9b:
a1:b8:a3:0d:1d:fe:56:cb:75:6d:63:02:c0:86:38:ee:8f:bb:
45:81:39:61:ae:99:1e:15:04:74:65:53:20:63:fb:3f:c0:1c:
9b:90:ba:7b:87:42:9c:d2:d9:6c:f9:51:1f:d2:45:d5:d2:87:
7c:85:a8:8c:0d:75:a9:e2:04:c1:47:24:3d:41:a2:78:0f:46:
c1:05:3b:13:89:df:4b:53:5b:03:c6:32:08:ee:a9:dd:ce:0e:
18:47:05:01:35:ed:d0:0e:fb:bc:06:ac:62:07:98:0c:3e:27:
9f:5b:37:f5:bf:53:ad:fa:04:e3:a0:fb:10:02:56:85:fe:31:
f7:0f:25:a3:1b:17:74:00:04:5f:22:e0:b6:69:cd:4f:19:94:
91:77:11:ff:ba:a7:0f:56:d3:c2:68:a8:fb:99:ef:93:d9:da:
84:0c:ca:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:00:00 2024 by rpki-client on console-ams.rpki-client.org