Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/IhaLf8FMgMeXAzDcxPWZE58neMQ.roa
File: IhaLf8FMgMeXAzDcxPWZE58neMQ.roa (raw, json)
Hash identifier: 0ZltV+x4pUuiHaZ+lMR1SLb2X9Dq+eH4rLWb3H04aDk=
Subject key identifier: 22:16:8B:7F:C1:4C:80:C7:97:03:30:DC:C4:F5:99:13:9F:27:78:C4
Certificate issuer: /CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Certificate serial: 018CC5DBE49F79F2759446506C324390BE03
Authority key identifier: AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/IhaLf8FMgMeXAzDcxPWZE58neMQ.roa
Signing time: Mon 01 Jan 2024 16:29:31 +0000
ROA not before: Mon 01 Jan 2024 16:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43160
IP address blocks: 176.32.52.0/23 maxlen: 23
176.32.48.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:e4:9f:79:f2:75:94:46:50:6c:32:43:90:be:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Validity
Not Before: Jan 1 16:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22168b7fc14c80c7970330dcc4f599139f2778c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1e:ed:d6:3b:ba:c3:f9:0f:41:ff:30:44:88:
d6:34:ea:0b:6b:32:be:ac:82:c8:06:20:8b:58:01:
cd:3e:e6:54:07:66:eb:8b:44:d4:f6:4a:5e:92:d1:
4f:b0:1e:06:5f:c2:ae:36:80:dd:53:07:9e:fd:75:
d6:8c:a6:f3:7d:11:c9:fb:b5:12:d4:81:06:09:53:
88:0e:d9:96:c7:af:c2:17:7c:e3:2e:03:36:ff:b2:
16:d3:d0:cf:5c:e1:b2:6a:69:13:23:5e:29:77:ad:
8c:1f:bf:fc:c1:c6:e9:fb:fa:24:da:4e:f5:3a:26:
2a:82:9f:68:a6:cd:36:bf:93:6a:d1:05:9e:73:21:
51:96:47:e7:82:cb:ee:ea:96:9d:16:34:b9:44:22:
2f:1a:10:05:d8:84:21:c6:56:f2:ca:35:fe:9d:96:
cf:4c:27:4b:bd:f4:99:8d:5c:42:bf:db:c6:9f:65:
47:8f:1f:c9:a9:20:9a:a8:6c:36:8a:65:55:27:dc:
57:43:76:18:90:80:25:77:20:31:50:21:f0:9d:db:
ee:2a:60:b8:c9:80:a7:4d:6f:f3:32:e8:34:d8:7a:
fa:b3:e8:b8:0b:5d:80:5f:15:e7:27:60:95:02:93:
e9:bb:0b:50:9b:a8:20:e7:b2:60:da:67:af:66:be:
6a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:16:8B:7F:C1:4C:80:C7:97:03:30:DC:C4:F5:99:13:9F:27:78:C4
X509v3 Authority Key Identifier:
keyid:AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/IhaLf8FMgMeXAzDcxPWZE58neMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.48.0/23
176.32.52.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:86:5f:94:83:df:6f:70:f1:67:a7:61:cd:32:e7:7f:0b:91:
d5:b2:06:b5:cb:50:be:44:3a:ba:da:cc:ce:d8:69:18:30:3e:
38:1c:06:5a:5d:52:19:25:74:27:58:d8:56:55:f4:92:e4:46:
12:8f:a3:c0:65:de:87:0f:37:52:c5:f3:c7:5d:29:83:81:15:
4c:03:ee:79:96:4d:c2:ac:04:e8:b3:35:e6:96:c9:4e:21:b1:
d1:23:b6:dc:51:91:a3:c7:84:5d:88:f7:f4:75:0b:5b:1a:1b:
55:0b:8c:1a:a6:f0:65:9f:89:94:38:61:44:72:b9:40:80:9d:
9f:83:69:7f:5e:dc:20:94:fe:9c:e7:f4:10:8a:6a:a7:91:e0:
59:f5:c7:64:20:82:63:48:32:40:51:a9:bb:a5:f7:12:30:07:
d9:fe:59:bf:78:33:56:57:b6:6a:9d:e1:4a:11:5c:a5:ed:34:
fc:ea:e8:8d:6a:d6:25:6d:70:1f:11:ee:d5:5c:d0:b8:bc:fb:
3d:4a:ee:00:57:21:ad:4d:b5:39:90:3f:bc:db:00:31:76:aa:
db:af:65:fe:11:f0:07:8f:b0:d0:c1:e4:d9:f1:92:ac:03:8b:
74:78:c0:71:d4:b0:d4:fd:9c:1a:51:b2:d2:a3:a8:7c:02:38:
7e:ca:9b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:14:37 2024 by rpki-client on console-fra.rpki-client.org