Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/PuuC-HsAwSwp9LKvkvvRnhd-yvg.roa
File: PuuC-HsAwSwp9LKvkvvRnhd-yvg.roa (raw, json)
Hash identifier: kxJBImrwTrDsEU2dj9nn5/1If1Rk8km40KDpjgnL7sU=
Subject key identifier: 3E:EB:82:F8:7B:00:C1:2C:29:F4:B2:AF:92:FB:D1:9E:17:7E:CA:F8
Certificate issuer: /CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Certificate serial: 018CC94E364AD31C456B8F3869A400655B86
Authority key identifier: 52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/PuuC-HsAwSwp9LKvkvvRnhd-yvg.roa
Signing time: Tue 02 Jan 2024 08:33:15 +0000
ROA not before: Tue 02 Jan 2024 08:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42525
IP address blocks: 46.32.128.0/20 maxlen: 20
46.32.128.0/24 maxlen: 24
46.32.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:36:4a:d3:1c:45:6b:8f:38:69:a4:00:65:5b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Validity
Not Before: Jan 2 08:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3eeb82f87b00c12c29f4b2af92fbd19e177ecaf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d7:15:21:6e:1d:96:ac:6f:9b:8b:e5:9d:35:
93:a7:0e:53:33:62:d1:02:7f:bd:c1:bb:c0:f3:66:
5d:13:0f:25:47:b2:52:c4:ba:84:80:22:a9:18:74:
31:d0:42:07:94:cb:5a:ad:92:30:4f:32:db:92:2d:
e3:56:80:31:d7:93:7c:45:5c:5b:14:a6:95:fe:e2:
ec:5a:40:39:43:3e:8c:5d:ef:78:b2:7e:e2:63:0c:
6a:0d:37:86:80:b0:75:d0:6d:bb:f0:38:6b:ec:00:
1b:93:34:42:88:30:c0:69:e4:a3:61:d7:0d:7e:d8:
b7:a7:09:4b:8c:9d:81:b8:c0:12:c2:22:aa:81:92:
eb:94:b9:e9:7f:1f:13:81:9c:7f:bf:b5:3c:a3:3c:
1c:dd:56:8b:55:21:51:fb:7c:d0:4e:3d:59:87:3e:
3a:4e:1c:90:4f:42:6d:2a:59:a8:4b:f7:18:fc:78:
a2:bd:59:9d:24:c0:e3:b8:b0:32:80:43:db:ca:ea:
d5:ab:1e:47:4b:6e:3f:a7:1e:aa:e6:df:8d:6c:3e:
40:85:35:63:3a:7f:0a:1b:3b:5e:87:cc:3c:4a:81:
f1:87:a2:4e:b2:4d:16:56:ad:55:a0:4a:97:d1:cd:
18:09:3b:3f:68:0e:7d:93:2c:02:30:9d:ba:02:5e:
bb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EB:82:F8:7B:00:C1:2C:29:F4:B2:AF:92:FB:D1:9E:17:7E:CA:F8
X509v3 Authority Key Identifier:
keyid:52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/PuuC-HsAwSwp9LKvkvvRnhd-yvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.128.0/20
Signature Algorithm: sha256WithRSAEncryption
24:d6:f6:68:b9:da:e9:3c:68:87:68:28:6d:7d:c0:33:72:23:
3d:d3:08:74:6c:eb:d7:ec:95:be:a4:2a:07:09:df:74:62:d5:
b5:a9:64:82:dd:f4:81:f5:7d:11:a1:71:6b:a9:f3:89:2c:60:
a9:84:78:5d:8e:fa:c3:39:c2:90:6c:4b:18:b4:00:e0:b8:28:
00:ab:e3:1e:f6:bb:bd:a5:a0:d4:99:82:df:59:e5:1a:be:53:
19:47:7d:15:48:a1:f4:e0:b0:7b:b2:12:a5:81:6f:a1:20:6b:
82:91:45:51:fa:a5:b9:ad:86:a7:bd:81:35:93:11:09:b8:83:
08:c9:48:57:d1:fc:9c:ec:0f:83:46:ed:1d:6a:25:b5:d2:11:
82:eb:4c:13:fd:78:53:7d:63:d7:d0:cb:3a:20:f6:25:88:4f:
c9:c6:4c:70:d6:f3:05:99:00:a9:0b:7c:8d:f5:d2:6d:87:e5:
40:52:b3:dc:8f:94:e5:74:d7:b6:c4:e0:bd:4d:d4:77:d0:a4:
c7:af:4b:a9:8d:56:9a:37:3e:da:3a:06:89:b7:b3:33:c7:98:
fe:cf:4e:07:ff:80:e6:af:6c:45:40:58:74:c2:b1:8c:84:b6:
ed:42:aa:e2:7a:93:d7:b5:4e:36:97:ed:24:5c:fa:0c:8b:77:
da:f1:8a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:15:12 2024 by rpki-client on console-fra.rpki-client.org