Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/E7DYYxKISUVbfuceOOQunjtypnA.roa
File: E7DYYxKISUVbfuceOOQunjtypnA.roa (raw, json)
Hash identifier: sWcn0bxF4NA60GzuOXxWvNY2kz1cBGrzn/RTdyb0P7Y=
Subject key identifier: 13:B0:D8:63:12:88:49:45:5B:7E:E7:1E:38:E4:2E:9E:3B:72:A6:70
Certificate issuer: /CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Certificate serial: 018CC5DBE5174F8FFEF64E7313A039A35D2A
Authority key identifier: AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/E7DYYxKISUVbfuceOOQunjtypnA.roa
Signing time: Mon 01 Jan 2024 16:29:31 +0000
ROA not before: Mon 01 Jan 2024 16:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56822
IP address blocks: 176.32.55.0/24 maxlen: 24
176.32.52.0/24 maxlen: 24
176.32.48.0/23 maxlen: 23
176.32.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:e5:17:4f:8f:fe:f6:4e:73:13:a0:39:a3:5d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Validity
Not Before: Jan 1 16:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13b0d863128849455b7ee71e38e42e9e3b72a670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f0:9e:a6:85:b8:b3:5b:58:16:3c:93:e6:88:
12:0c:3d:4a:f4:82:1a:d3:3e:3b:a7:9e:7d:26:7d:
74:40:20:ac:14:3d:5f:01:09:9a:4f:0c:b2:ea:c7:
1d:f1:0a:08:de:e4:ea:8d:01:ff:1e:1a:63:f4:13:
c3:d8:fa:10:93:77:4a:85:ab:c0:ee:4e:c4:40:48:
23:a9:92:61:c7:9a:c0:65:b0:e9:04:b8:2e:ae:ab:
ee:47:0c:99:f6:63:9f:a9:19:b8:bc:fd:bb:af:c0:
a2:4e:b9:37:dd:c0:c4:bf:03:64:48:97:a1:bc:25:
c4:7b:d2:ae:2d:7b:17:f6:9b:b5:0f:c0:d1:eb:b6:
7b:ae:4c:ee:7b:77:33:b2:c8:7c:e1:c5:eb:2f:11:
79:9c:26:77:06:40:f6:f2:1d:37:21:14:05:da:d5:
45:1a:48:10:7e:79:f4:af:bf:1a:df:80:6f:97:d0:
32:cf:ac:21:e9:ff:e2:d6:d1:d5:f0:29:22:e2:4f:
cd:b7:c0:84:7f:f1:c7:42:63:25:dd:6b:f9:dc:7d:
bb:e7:0d:37:fb:26:b8:e1:07:1e:97:c3:36:ca:88:
3e:40:fa:e6:48:55:7b:97:26:65:70:8d:f4:9b:be:
47:ab:12:24:26:52:75:e0:d7:c9:de:c5:25:e7:6c:
2b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B0:D8:63:12:88:49:45:5B:7E:E7:1E:38:E4:2E:9E:3B:72:A6:70
X509v3 Authority Key Identifier:
keyid:AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/E7DYYxKISUVbfuceOOQunjtypnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.48.0/23
176.32.51.0-176.32.52.255
176.32.55.0/24
Signature Algorithm: sha256WithRSAEncryption
30:77:6a:0b:7e:06:f9:4a:14:bc:06:51:ef:fe:a5:52:4a:f1:
a0:90:2b:26:80:b8:7b:34:73:08:b6:d3:4f:90:8f:e5:61:cc:
50:af:98:e8:22:ca:29:bb:4f:ec:db:01:4b:2c:b4:c0:eb:50:
c6:54:bb:b4:a9:5c:65:ba:17:a4:70:aa:de:5f:af:96:bc:33:
a9:63:cc:15:c8:6b:51:73:41:49:c9:2f:a3:f0:50:77:7e:32:
6e:36:f1:b1:0f:14:00:99:14:a0:11:48:9d:98:18:3c:61:3a:
b5:af:83:58:b1:98:cf:16:f3:ef:ad:43:aa:5b:af:e3:f1:6a:
99:cf:68:7d:67:09:f4:74:fa:a6:df:aa:ca:8a:cc:61:58:23:
2c:d8:99:c5:6d:21:1d:b8:2e:a6:01:b3:f4:85:0b:59:18:da:
44:69:48:16:9c:5d:19:f2:f9:1a:43:c3:94:da:47:ac:74:26:
aa:4e:6e:0c:c6:fc:9b:d7:ef:2c:83:6d:c6:51:fe:f0:7e:f0:
e9:fe:68:e9:2c:53:25:f7:73:7c:95:86:33:e4:4c:0d:9e:bc:
e6:49:2d:f4:9e:0d:17:99:8a:ea:d2:27:84:dd:07:78:25:b0:
c5:97:ec:c6:09:b6:94:fe:f5:9b:ae:f4:01:f7:d1:dc:c2:65:
fe:f6:78:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 21:34:34 2024 by rpki-client on console-ams.rpki-client.org