Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/AJPDFtL8l1fK-R7-SIANZ6bxS7M.roa
File: AJPDFtL8l1fK-R7-SIANZ6bxS7M.roa (raw, json)
Hash identifier: r1hVKLF0jUr7d4TSoWeqsbJ4fIgcjo4/1hCYNSGE0Pk=
Subject key identifier: 00:93:C3:16:D2:FC:97:57:CA:F9:1E:FE:48:80:0D:67:A6:F1:4B:B3
Certificate issuer: /CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
Certificate serial: 018CC726798501A0ACE15FCE8CE887ABD128
Authority key identifier: 37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/AJPDFtL8l1fK-R7-SIANZ6bxS7M.roa
Signing time: Mon 01 Jan 2024 22:30:36 +0000
ROA not before: Mon 01 Jan 2024 22:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 702
IP address blocks: 145.32.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:79:85:01:a0:ac:e1:5f:ce:8c:e8:87:ab:d1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
Validity
Not Before: Jan 1 22:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0093c316d2fc9757caf91efe48800d67a6f14bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:00:c6:69:a3:1b:f0:25:6f:31:3b:cc:b2:6f:
72:bd:df:31:6a:49:77:92:59:a1:c4:39:a1:21:5a:
a6:64:86:fb:a6:af:28:d0:a8:56:3d:8d:c0:ad:6b:
75:75:c0:2b:57:66:1b:c4:12:5f:f3:e3:fe:80:9e:
26:9a:a7:8e:d9:e9:01:88:0b:db:cb:d6:e4:3a:40:
90:75:90:ab:06:9a:2e:cd:4a:91:29:0c:7d:70:31:
1a:ca:30:58:29:86:3b:a1:62:d8:5c:31:b4:3b:34:
86:bd:a1:34:ba:7d:18:0a:4e:d5:2f:78:fd:e9:33:
d8:7d:ba:af:1e:ff:ae:9d:d7:08:d3:9d:f1:ce:3d:
6f:ca:d1:fa:5b:89:52:20:93:0f:18:eb:7f:24:29:
c1:83:04:f6:1f:9d:2a:b1:9f:6a:d4:1d:28:26:74:
74:9a:43:ca:c3:6d:8e:f3:12:3a:d6:a0:96:7d:90:
cc:32:b1:a5:e4:3c:8f:d4:e8:b5:94:45:1e:5f:13:
7b:cb:3f:cc:a2:32:b2:a8:bb:50:b3:6e:54:99:d6:
8c:71:13:2e:58:75:93:c9:a1:48:aa:49:c2:19:8a:
13:eb:c3:50:10:e1:93:9a:4a:d8:2b:b8:02:10:2c:
3b:30:9f:0c:78:ec:3a:71:a5:d6:7f:b8:d4:9d:ea:
33:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:93:C3:16:D2:FC:97:57:CA:F9:1E:FE:48:80:0D:67:A6:F1:4B:B3
X509v3 Authority Key Identifier:
keyid:37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/AJPDFtL8l1fK-R7-SIANZ6bxS7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.32.0.0/16
Signature Algorithm: sha256WithRSAEncryption
99:db:c9:f8:ac:4d:5d:96:54:bc:e5:b3:ce:0f:4e:90:54:37:
44:99:0c:74:41:9e:72:1a:8a:d3:4e:09:bc:66:43:4a:8d:df:
51:ce:76:d9:0b:65:a9:01:18:4b:2e:f8:a1:ee:2d:cc:48:a9:
66:29:5e:cb:55:5d:0d:61:21:98:88:fd:a8:f8:f8:ec:04:1d:
af:8b:c7:ed:74:39:62:0f:e7:d6:ec:ad:9c:dc:f0:70:66:59:
8b:42:57:cb:ed:90:bb:d4:2f:d6:ab:02:b3:b3:93:50:da:25:
39:cd:74:62:7f:c6:1f:c4:cf:ee:83:8b:f2:57:54:68:36:df:
68:17:fa:ab:e0:64:bb:d0:c0:b4:40:7f:38:e2:f9:49:77:76:
b8:5c:68:62:8b:3d:a6:70:1d:14:07:d9:3c:21:eb:e8:ed:88:
63:ec:41:93:46:98:32:94:e3:ca:df:6e:64:cf:0b:b8:07:e4:
fd:a8:b6:0d:46:ac:1a:60:f2:a3:b7:e3:87:8a:eb:b3:c2:80:
6e:81:bc:1d:b7:f4:5d:67:40:37:dc:b2:79:0f:50:bf:c9:35:
18:ff:15:ea:e8:f4:30:ad:75:9c:cb:bc:90:8b:46:4e:f4:48:
63:db:d7:26:a4:f6:c4:f7:0d:42:cb:50:85:d8:01:77:42:b7:
c1:d2:f4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:46:39 2024 by rpki-client on console-ams.rpki-client.org