Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/Yc36-tpgWIx3ErpaWflPmoCjrdo.roa
File: Yc36-tpgWIx3ErpaWflPmoCjrdo.roa (raw, json)
Hash identifier: 83TISA5agrnDpTYhItJVqDHNq0EnMTIbvGPkGCpfuQQ=
Subject key identifier: 61:CD:FA:FA:DA:60:58:8C:77:12:BA:5A:59:F9:4F:9A:80:A3:AD:DA
Certificate issuer: /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Certificate serial: 018CC794750A5CE13498B724ECE33514FDEA
Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/Yc36-tpgWIx3ErpaWflPmoCjrdo.roa
Signing time: Tue 02 Jan 2024 00:30:44 +0000
ROA not before: Tue 02 Jan 2024 00:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35280
IP address blocks: 132.74.0.0/16 maxlen: 16
132.75.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:75:0a:5c:e1:34:98:b7:24:ec:e3:35:14:fd:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Validity
Not Before: Jan 2 00:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61cdfafada60588c7712ba5a59f94f9a80a3adda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:01:00:9a:e8:9b:fc:83:fb:5d:09:cd:27:62:
82:be:04:99:26:33:71:1d:65:df:c1:4a:e0:fe:14:
8e:b1:f0:f3:a6:77:84:05:74:f6:62:05:c9:1b:db:
5f:bf:82:8a:e7:ff:c8:fc:43:59:c7:69:1f:f8:61:
fa:90:b3:22:e5:56:1b:da:45:8b:ab:4a:6f:77:f7:
44:cd:dc:57:39:33:ee:e7:ea:0f:9f:f7:9c:c8:3e:
00:b9:68:b7:7f:f3:9d:42:4b:86:e8:65:c4:18:dc:
b6:b0:56:a5:fb:54:1a:e6:80:fd:1d:24:0e:a2:c4:
bd:59:9e:23:f6:87:ca:b3:59:05:fb:e1:6b:c5:af:
7c:4b:c0:6b:08:62:81:5b:06:52:b3:9d:c4:9e:4a:
5d:2c:54:55:65:38:10:03:45:8a:bb:2a:46:ed:89:
de:3c:2c:66:4e:54:60:81:f4:53:8f:ae:5c:27:79:
11:ce:76:ed:d7:51:38:b2:36:41:7f:58:80:3a:28:
af:8d:b6:0b:a9:ad:99:13:76:1d:97:81:dd:e1:3b:
3f:e0:b3:6d:a6:f0:bd:d1:23:f4:da:7f:6b:b7:f4:
2c:43:f1:d6:95:9e:93:13:32:31:df:76:ad:af:6c:
df:2f:fd:62:71:48:c5:bd:8e:07:67:04:0e:40:75:
4e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CD:FA:FA:DA:60:58:8C:77:12:BA:5A:59:F9:4F:9A:80:A3:AD:DA
X509v3 Authority Key Identifier:
keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/Yc36-tpgWIx3ErpaWflPmoCjrdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.74.0.0/15
Signature Algorithm: sha256WithRSAEncryption
8e:de:fe:75:ad:ae:6a:11:86:47:13:ee:65:34:0d:78:ba:4f:
ac:d1:2b:7b:e0:8a:d0:47:57:ef:63:82:8a:75:d5:bf:0a:c6:
78:aa:b5:8c:ce:58:06:0f:38:e0:64:d9:18:39:39:d1:40:c2:
a3:77:a0:24:c4:85:ba:68:77:ae:9f:ca:63:da:49:46:3a:08:
68:c1:1e:63:a3:93:64:df:27:e5:ca:5d:6c:cb:b6:df:7b:ce:
84:a8:74:97:c6:76:12:3b:dc:e0:7e:26:55:6a:25:11:04:c4:
7c:89:33:65:2f:97:34:bb:b8:c6:8f:7e:7c:4e:d3:ad:76:7c:
13:b7:f0:2b:1e:34:8c:de:f7:7a:46:26:01:c9:a6:c3:97:83:
54:f3:80:b2:72:4d:08:c0:dc:bf:56:4d:0c:d4:80:46:79:54:
dc:68:e1:0e:c8:0f:15:13:e2:35:3b:93:3d:0c:7e:9b:29:2b:
e3:b2:db:98:5e:6d:72:7b:07:d6:d0:4a:a3:5f:64:ce:e0:4c:
55:29:60:11:f0:45:3c:81:df:5a:a6:32:81:92:b1:f5:89:eb:
e7:68:41:c3:ae:5d:b9:50:ff:d8:8b:8d:04:8e:4b:30:4a:f8:
5d:80:63:d5:e5:cb:3d:25:ec:8d:2d:27:91:ef:ed:e1:fb:54:
31:96:00:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:30:31 2024 by rpki-client on console-ams.rpki-client.org