Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/1dY32L0GnOL37LmUkfrBg0w1FGI.roa
File: 1dY32L0GnOL37LmUkfrBg0w1FGI.roa (raw, json)
Hash identifier: 7C7TiU3kGLOR5S7CEL8GH0PUhlAny0cWW385ZAc69oA=
Subject key identifier: D5:D6:37:D8:BD:06:9C:E2:F7:EC:B9:94:91:FA:C1:83:4C:35:14:62
Certificate issuer: /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial: 018CC26CF69A475058E56F929D2AC557FA24
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/1dY32L0GnOL37LmUkfrBg0w1FGI.roa
Signing time: Mon 01 Jan 2024 00:29:30 +0000
ROA not before: Mon 01 Jan 2024 00:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207974
IP address blocks: 146.19.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f6:9a:47:50:58:e5:6f:92:9d:2a:c5:57:fa:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Validity
Not Before: Jan 1 00:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5d637d8bd069ce2f7ecb99491fac1834c351462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:f9:6d:60:f6:bb:1f:c7:8c:a1:9e:d8:c5:
b8:bc:c6:b3:e2:f9:89:36:88:f2:06:d4:c8:0d:e2:
f7:8d:18:3f:f2:45:d1:9f:14:77:16:bc:74:9b:10:
09:bc:58:24:51:81:63:ae:1f:09:5e:c3:7b:ef:aa:
82:cc:68:21:08:9f:80:76:8d:b6:50:b8:c8:ca:81:
f5:f1:89:d9:10:b7:ae:2a:5c:4d:c0:0c:57:0f:14:
e0:99:09:61:91:ac:f9:13:62:9a:78:e4:ef:e2:3c:
1b:5e:ba:4e:37:b7:cd:96:62:66:cd:2e:06:86:da:
6a:9f:23:42:40:c1:18:29:a9:0e:8a:3b:4e:24:1a:
e9:89:56:30:d1:3b:5e:c9:c3:8f:5d:be:a9:1a:3c:
f0:d3:78:6d:a3:c2:14:45:38:06:9f:9c:14:a0:65:
da:95:4a:45:21:cb:82:a6:a7:b5:45:86:85:6e:cd:
07:70:e7:74:16:bf:49:68:bb:c5:a8:ab:2f:b2:77:
c3:44:c7:06:05:a6:f6:06:23:3d:c7:61:f3:cc:3a:
bf:bf:60:39:71:5b:95:70:71:6a:ad:36:77:be:b4:
fa:89:b4:41:6a:e5:dc:16:f1:f1:3e:f2:04:e7:16:
6b:56:74:94:de:e3:15:ad:3c:22:e3:58:06:50:a9:
b3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D6:37:D8:BD:06:9C:E2:F7:EC:B9:94:91:FA:C1:83:4C:35:14:62
X509v3 Authority Key Identifier:
keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/1dY32L0GnOL37LmUkfrBg0w1FGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.117.0/24
Signature Algorithm: sha256WithRSAEncryption
43:10:12:fe:5b:42:58:ae:bf:66:d9:3e:91:11:1d:76:83:4c:
f9:ef:c5:29:fb:ef:df:e1:2c:c0:c5:f8:42:72:44:ce:cb:7e:
89:93:e3:ab:73:5f:e7:07:86:3b:ed:a3:58:f4:d4:46:a7:03:
a0:a7:c2:2a:4d:f3:01:db:57:06:04:2e:fd:1b:a5:88:b1:e0:
02:b1:4e:31:be:42:7d:4a:ea:5c:14:0d:2b:33:15:ac:54:96:
e2:66:06:06:35:ff:0c:f7:9a:1d:7e:6f:ac:e8:e3:a7:d6:63:
e1:15:af:91:e2:60:49:06:d6:52:60:1c:c5:84:7d:3e:14:03:
10:90:d2:f5:b7:59:7f:79:ae:7c:36:41:87:f4:3c:2c:9b:35:
63:a1:d6:db:6e:16:c5:ef:a8:6a:a3:93:22:f0:dc:91:1c:3c:
33:2f:db:01:10:b8:2d:71:42:6f:d3:5e:b1:85:e3:e1:c1:ef:
11:b8:65:0f:dd:bc:c6:d7:c6:0a:cd:b9:62:05:b2:78:ee:02:
01:f1:7b:8c:0e:2c:2b:74:93:10:ec:5c:a6:b0:53:41:e4:3b:
16:53:31:4a:a0:9f:2c:0f:0e:98:86:11:de:87:48:a6:2b:a2:
2c:2b:91:45:15:02:5b:1b:f0:be:1c:45:ac:e2:5c:4a:63:49:
b8:81:0c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:52:52 2024 by rpki-client on console-ams.rpki-client.org