Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/28vMx22TVnLfIBGnW3KKKyD-4ak.roa
File: 28vMx22TVnLfIBGnW3KKKyD-4ak.roa (raw, json)
Hash identifier: w1Vn/H+5hhuR3KJgaITsrJC9A/Fs42C1SdmOz9UdkWM=
Subject key identifier: DB:CB:CC:C7:6D:93:56:72:DF:20:11:A7:5B:72:8A:2B:20:FE:E1:A9
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 018F10A57003427979D5EA76435838B19EF6
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/28vMx22TVnLfIBGnW3KKKyD-4ak.roa
Signing time: Wed 24 Apr 2024 15:07:08 +0000
ROA not before: Wed 24 Apr 2024 15:07:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200154
IP address blocks: 46.32.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 May 2024 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:10:a5:70:03:42:79:79:d5:ea:76:43:58:38:b1:9e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Apr 24 15:07:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbcbccc76d935672df2011a75b728a2b20fee1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1d:fd:bb:2b:66:97:83:64:c3:d5:b6:de:f8:
62:14:7c:26:3c:f9:29:96:ca:d3:70:89:df:ca:58:
9a:50:fd:9e:86:a5:11:df:ef:75:c9:3f:e0:3e:4c:
a4:ce:c4:02:d3:aa:33:c8:1d:de:7a:c9:31:7e:96:
98:40:11:37:40:cf:a6:38:82:93:07:03:39:58:aa:
04:38:d7:e5:09:4e:c8:48:a0:61:88:d2:7f:cc:69:
c4:e5:bf:9a:4b:f1:69:2f:71:41:06:c6:20:a6:29:
f9:94:e6:f9:1c:6e:db:61:1a:d8:34:b4:af:02:98:
5a:35:20:7f:58:d8:99:75:ce:71:52:e0:19:5c:f7:
c3:a6:ab:6b:0a:14:bc:de:2d:94:db:be:d6:d1:2a:
80:58:b1:20:25:6a:ad:be:43:39:44:28:9e:7e:3c:
bd:97:ee:48:05:5d:93:63:d3:ca:02:76:eb:e6:6b:
c5:d1:2e:34:dc:0c:23:c7:48:a3:be:0e:1e:8e:c2:
dc:00:c1:90:d2:cb:dc:93:f1:68:2e:68:78:2d:7c:
7b:94:b1:0c:b8:aa:24:6b:33:62:61:10:9e:ee:62:
c3:2a:9a:a5:0f:d8:d7:8f:5e:a8:34:c1:d8:39:30:
04:15:d4:d0:05:15:27:c7:45:66:1d:48:fe:85:11:
1c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CB:CC:C7:6D:93:56:72:DF:20:11:A7:5B:72:8A:2B:20:FE:E1:A9
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/28vMx22TVnLfIBGnW3KKKyD-4ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.163.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ab:b8:84:0a:43:5c:65:13:b8:c9:31:d2:8e:98:ae:3c:36:
89:50:ea:90:5e:dd:d3:64:81:5c:d3:da:68:00:25:d6:0c:85:
ec:07:14:11:33:c0:cb:79:60:9a:41:81:7f:a4:9c:dd:45:0e:
17:c8:cc:a8:20:f9:be:a4:3f:f5:31:91:49:ed:c1:b3:95:07:
69:bb:d9:cc:68:4f:c6:8e:d6:0b:b2:71:c3:59:d5:8d:9f:27:
26:2a:59:72:55:8b:15:34:ac:67:51:ad:80:78:1b:a2:fd:e9:
98:40:da:fc:b3:68:0e:bf:09:41:3f:23:9e:a3:b0:24:22:25:
8e:ca:09:db:98:a4:2a:47:75:7e:f7:60:6c:d8:e9:1e:2a:ad:
95:72:85:76:38:ed:e6:38:22:f5:66:50:83:54:65:13:5a:b7:
79:bc:f2:6d:bc:c3:63:5d:17:8b:50:c0:66:e6:df:e2:44:b4:
ca:f5:14:38:4e:ce:f0:52:61:f4:16:04:74:71:da:d4:5c:12:
80:6d:15:e9:1a:0f:cb:b0:0a:9f:20:0c:ea:d5:a3:df:e2:e4:
4a:49:07:bc:3e:dc:30:08:d6:88:4c:bc:92:93:81:53:4a:3f:
6f:12:36:74:9d:15:55:86:45:33:a4:dd:43:78:a9:87:76:bb:
c2:06:73:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 08:22:04 2024 by rpki-client on console-fra.rpki-client.org