Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/KpHgHMa5WTLcdBM8bjg1lhr09Jk.roa
File: KpHgHMa5WTLcdBM8bjg1lhr09Jk.roa (raw, json)
Hash identifier: u0lOlJmYMVwuBR9/H12aj2zIopBt8mnZro8TI7SMsm4=
Subject key identifier: 2A:91:E0:1C:C6:B9:59:32:DC:74:13:3C:6E:38:35:96:1A:F4:F4:99
Certificate issuer: /CN=0b1870c96ef09723811fb89250eea6eba963c0df
Certificate serial: 0191414B128FDE42F52AF5E2630E8FD666C7
Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/KpHgHMa5WTLcdBM8bjg1lhr09Jk.roa
Signing time: Sun 11 Aug 2024 11:55:24 +0000
ROA not before: Sun 11 Aug 2024 11:55:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 132.64.1.0/24 maxlen: 24
132.64.2.0/24 maxlen: 24
132.64.3.0/24 maxlen: 24
132.64.5.0/24 maxlen: 24
132.64.6.0/24 maxlen: 24
132.64.7.0/24 maxlen: 24
132.64.16.0/24 maxlen: 24
132.64.17.0/24 maxlen: 24
132.64.40.0/24 maxlen: 24
132.64.43.0/24 maxlen: 24
132.64.44.0/24 maxlen: 24
132.64.45.0/24 maxlen: 24
132.64.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:41:4b:12:8f:de:42:f5:2a:f5:e2:63:0e:8f:d6:66:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df
Validity
Not Before: Aug 11 11:55:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a91e01cc6b95932dc74133c6e3835961af4f499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:1e:ec:59:47:21:01:01:86:a5:2e:33:08:
95:4b:a0:b5:ba:5a:fd:bd:ac:f2:e8:bd:7f:4c:21:
a8:44:3c:2d:ce:62:d1:99:b7:30:be:9d:68:6e:3f:
e6:df:7a:ec:cf:ae:70:46:62:0b:32:d1:e1:55:98:
2c:cc:9e:a6:c1:a1:b6:22:68:4c:e6:69:8e:43:44:
2c:0d:c8:72:b7:18:40:e9:e5:9f:06:82:39:db:fc:
14:9f:42:34:0b:4c:86:d3:f3:9a:a5:0d:17:35:13:
a4:ec:07:a8:19:5f:6e:7a:45:d8:6a:69:33:cb:ef:
5e:87:76:3d:26:18:58:9c:bd:d1:e1:97:70:5c:8c:
89:1d:e7:13:11:f5:1a:3c:c0:29:1d:ab:bf:37:c1:
51:4e:ac:ad:16:20:f5:88:fe:de:bc:9a:2e:03:99:
f1:7b:a8:9e:0b:c6:63:ba:d9:a8:f8:7f:2c:58:fa:
67:21:0a:e8:96:74:4d:b0:8c:37:20:fb:18:3b:a7:
97:00:85:ca:c9:fd:6b:b6:e4:89:b6:68:2c:4d:84:
59:50:ba:82:c9:d2:23:6d:6d:e8:d5:65:c2:47:b4:
01:a7:91:e2:c2:f5:77:d5:ad:52:b4:8f:ce:85:79:
1a:7d:1b:36:91:33:bf:a8:11:94:09:38:78:1a:78:
64:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:91:E0:1C:C6:B9:59:32:DC:74:13:3C:6E:38:35:96:1A:F4:F4:99
X509v3 Authority Key Identifier:
keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/KpHgHMa5WTLcdBM8bjg1lhr09Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.64.1.0-132.64.3.255
132.64.5.0-132.64.7.255
132.64.16.0/23
132.64.40.0/24
132.64.43.0-132.64.45.255
132.64.254.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:22:b1:89:86:ba:d2:1c:3d:e4:1b:88:1b:84:50:fc:6c:5d:
89:dc:bc:c3:2e:cc:85:f8:eb:4c:d6:15:06:91:1b:f5:c6:01:
84:40:a5:35:35:b4:8d:2d:24:67:72:e5:b2:ce:04:7b:60:ee:
a9:ec:8a:2c:3d:55:1c:a7:43:1e:3a:43:04:7c:8d:54:85:04:
f1:f9:fd:3f:62:b6:33:6c:89:5a:c7:0a:aa:35:3b:4e:43:48:
46:81:7b:48:ca:28:b8:aa:05:60:8d:46:4b:aa:09:27:10:af:
2f:d2:9c:88:1f:35:8c:64:dc:01:21:39:4a:49:19:39:a4:e0:
32:1a:30:10:3b:ea:48:97:08:5a:84:ca:98:ae:84:58:e4:88:
59:e5:7f:fc:74:56:ff:3d:f9:3d:e6:73:33:5b:0b:b7:b7:df:
cb:96:00:53:eb:58:3b:6c:24:ae:e2:25:45:44:09:b5:44:3a:
12:0b:e1:c8:61:b9:48:9c:dd:64:a6:8a:e1:95:1f:28:5e:95:
3b:e4:a9:0d:83:94:dc:80:69:0a:1b:2d:e2:a3:c3:7f:2f:2d:
7e:f3:10:18:27:01:a0:b2:e4:38:c6:28:55:5a:bb:ff:3c:c1:
2d:25:a8:da:f0:0e:3b:7a:f3:27:2f:04:0b:b0:20:36:f3:d0:
92:8c:b4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:12:52 2024 by rpki-client on console-ams.rpki-client.org