Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/2yWhghijh7SRc-kSmRFfMe7YxYY.roa
File: 2yWhghijh7SRc-kSmRFfMe7YxYY.roa (raw, json)
Hash identifier: fh4AyLzrEkU0l5dy6NwW0xJ+KSU6ToeTSdukRtIomQc=
Subject key identifier: DB:25:A1:82:18:A3:87:B4:91:73:E9:12:99:11:5F:31:EE:D8:C5:86
Certificate issuer: /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial: 018CC6B786FF5A3A62F7CC38521C83298E3D
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/2yWhghijh7SRc-kSmRFfMe7YxYY.roa
Signing time: Mon 01 Jan 2024 20:29:25 +0000
ROA not before: Mon 01 Jan 2024 20:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 378
IP address blocks: 132.76.0.0/16 maxlen: 16
132.76.0.0/15 maxlen: 15
132.77.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:86:ff:5a:3a:62:f7:cc:38:52:1c:83:29:8e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Validity
Not Before: Jan 1 20:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db25a18218a387b49173e91299115f31eed8c586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:ab:b0:32:1c:a5:4f:33:64:18:0b:f5:fe:
49:ac:8d:83:d8:7f:d0:26:1d:15:ed:ed:de:85:6f:
fc:78:e9:2c:ce:79:ce:b2:fd:bc:86:4c:68:86:5c:
f9:0b:ae:bd:15:b4:60:44:61:6a:f2:b3:d4:ac:4f:
c8:6a:dd:f3:bd:46:33:55:cf:bd:be:1d:01:35:d0:
8b:80:31:7b:16:55:92:bc:80:4b:f6:f5:67:8a:69:
ee:0f:50:50:22:1f:34:34:0c:43:f9:f3:b3:df:d6:
4d:f3:d1:11:70:ab:e8:ed:9d:b2:97:4f:1c:d9:6a:
05:07:61:c0:d4:27:ad:73:21:0f:4f:d6:36:8a:02:
fd:90:5c:80:bf:80:8c:64:62:ff:0e:6f:00:2e:4c:
1f:8e:56:36:25:41:b2:14:ff:7f:1b:8d:75:01:33:
68:33:e4:6d:4e:ed:da:b2:9f:25:a4:ad:e5:25:e4:
d6:d7:c2:8f:8a:0c:0a:c2:10:41:28:42:0f:4a:45:
ef:38:1d:4f:ed:50:2e:6c:52:dc:e2:43:30:1f:66:
4d:bf:22:5d:41:05:3e:fc:2b:b7:98:b6:12:88:7d:
57:9d:25:0c:29:40:b2:ea:85:a0:34:cd:51:23:77:
9c:36:76:36:a3:2e:0f:05:61:12:f2:1c:3c:15:cd:
20:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:25:A1:82:18:A3:87:B4:91:73:E9:12:99:11:5F:31:EE:D8:C5:86
X509v3 Authority Key Identifier:
keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/2yWhghijh7SRc-kSmRFfMe7YxYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.76.0.0/15
Signature Algorithm: sha256WithRSAEncryption
91:7e:e6:60:1e:43:97:e3:66:ee:75:4a:b9:15:2f:69:26:31:
1d:14:cd:b4:c9:c8:ce:0b:fb:26:10:e0:d6:ef:01:29:96:80:
83:9a:7b:b4:7e:ac:c9:be:2a:e7:57:59:d1:75:70:31:0f:96:
b4:8a:26:ea:cf:39:2c:0d:50:df:3b:1f:3f:b7:63:42:12:ed:
05:93:46:43:90:65:9b:42:2e:a1:20:90:fc:c9:31:25:b0:17:
b9:58:e2:01:ba:86:a9:75:a4:58:00:94:2a:af:aa:4e:88:a0:
4a:17:12:4f:c5:6e:85:ad:7e:18:53:37:a6:bd:3b:56:07:94:
dd:ef:d7:80:71:45:33:e7:3a:b7:42:fc:f7:00:52:5b:91:bf:
8b:99:41:e6:c2:eb:50:f3:ee:79:1f:f5:2f:e0:b4:3e:9c:30:
6b:32:87:ca:ec:99:63:36:72:12:4d:cb:ab:9d:dc:ea:c8:88:
37:a0:0e:45:95:03:ba:c7:c5:d3:3e:79:1d:8e:c3:fc:64:27:
da:f2:7c:67:92:52:cf:4c:38:f1:26:c3:3e:0c:39:a7:c7:6f:
6c:78:d6:b1:51:74:77:cb:4a:d9:f0:18:50:2d:22:09:07:94:
e9:e3:1a:61:74:e4:ec:54:16:e0:72:8e:dd:0e:9c:ef:b8:5d:
c9:11:22:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:27:43 2024 by rpki-client on console-ams.rpki-client.org