Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/fWRsPXOYe75akFdASu48hQlNLsQ.roa
File: fWRsPXOYe75akFdASu48hQlNLsQ.roa (raw, json)
Hash identifier: Oy01Hsik2KDq2pokTAR8UK4Z37qj6o1KasRKbikm3LY=
Subject key identifier: 7D:64:6C:3D:73:98:7B:BE:5A:90:57:40:4A:EE:3C:85:09:4D:2E:C4
Certificate issuer: /CN=6c09ab0751fea4b292a9afd14dbec3b83a077870
Certificate serial: 018CC5013F440C52C81D7388A286880FAE24
Authority key identifier: 6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/fWRsPXOYe75akFdASu48hQlNLsQ.roa
Signing time: Mon 01 Jan 2024 12:30:42 +0000
ROA not before: Mon 01 Jan 2024 12:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44536
IP address blocks: 66.132.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:3f:44:0c:52:c8:1d:73:88:a2:86:88:0f:ae:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c09ab0751fea4b292a9afd14dbec3b83a077870
Validity
Not Before: Jan 1 12:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d646c3d73987bbe5a9057404aee3c85094d2ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:32:59:fe:45:88:37:68:ef:85:ca:94:fb:48:
5d:2f:c3:93:18:41:30:a4:23:25:60:8c:a1:d7:df:
70:78:46:ee:cd:56:e1:25:cb:ba:b4:dc:1c:79:d7:
eb:82:2d:2f:8e:91:94:a5:7b:3c:f2:e1:ec:55:ac:
ae:e4:30:50:b9:6d:3b:cf:f4:f7:e7:dd:62:1b:6f:
dd:09:35:3c:cc:bd:3a:de:2b:7e:68:10:42:71:f4:
44:0b:6e:a3:61:d4:60:c6:95:c1:03:d2:f1:4d:3e:
98:fe:ca:94:36:8b:b0:07:1d:eb:4b:fb:7f:c1:18:
93:d3:8f:2e:b2:4b:62:31:cc:5a:62:4c:5e:48:04:
60:b1:22:b3:62:93:4d:66:30:cf:11:91:26:02:50:
ae:1a:de:bf:c2:ae:05:35:c7:43:2c:11:d6:72:c8:
db:5c:0f:97:ea:fd:b4:58:da:5b:f8:12:68:a4:08:
9a:08:74:e8:a6:8e:e4:99:70:8d:52:91:a5:a8:5e:
b1:eb:f7:30:14:a2:14:97:d7:bf:6c:d6:26:99:38:
24:93:8b:9e:4d:d8:b7:7c:13:5a:2e:78:82:93:f5:
6c:62:e5:c6:f6:7b:ae:bd:98:c1:e2:da:bf:c2:fc:
2f:94:44:14:a5:68:8f:a1:ee:7d:ec:91:28:8e:96:
b5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:64:6C:3D:73:98:7B:BE:5A:90:57:40:4A:EE:3C:85:09:4D:2E:C4
X509v3 Authority Key Identifier:
keyid:6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/fWRsPXOYe75akFdASu48hQlNLsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.132.134.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:08:ca:66:36:e4:1c:c1:f6:9e:4b:16:43:f8:95:c7:cc:bf:
4c:8f:16:d6:f8:49:50:39:88:46:ce:f3:36:f7:3f:d4:d0:8b:
2d:dd:c7:d2:99:b0:e5:92:61:06:c2:a3:99:21:f9:5d:9d:ee:
22:62:9a:96:98:04:06:43:95:90:b6:b3:65:a8:6b:51:6f:de:
f9:fe:33:31:db:76:2a:26:9b:1f:49:a3:61:f1:ea:2b:db:61:
62:07:67:c2:7d:47:6d:b5:15:23:bd:c0:e2:c3:c2:57:d7:5b:
d2:fb:f2:d3:ef:0e:e1:58:a6:8b:88:65:78:73:79:37:0e:bf:
83:af:2e:97:94:2d:98:d4:aa:81:10:ec:2f:65:87:2d:97:2b:
01:8e:8b:57:b8:29:9c:e4:29:44:51:86:e6:f4:bd:70:80:1f:
0a:12:86:85:fb:9b:2d:27:94:6c:b9:ee:35:b2:25:b6:27:47:
5f:f4:ec:40:0b:95:d6:25:f2:f7:7a:4a:6d:9b:b5:00:31:8c:
40:da:8f:f7:a9:62:2a:e0:5f:85:e1:90:31:e3:f8:c4:c6:b6:
7b:a6:c3:97:40:de:0a:31:fe:4d:f1:30:d3:f7:19:3d:df:50:
26:8b:7f:a4:58:1c:cd:01:dc:6f:e7:2b:a1:cc:d3:f0:d0:fc:
59:f8:0a:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAT9EDFLIHXOIooaID64kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMDlhYjA3NTFmZWE0YjI5MmE5YWZkMTRkYmVjM2I4M2Ew
Nzc4NzAwHhcNMjQwMTAxMTIzMDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDY0NmMzZDczOTg3YmJlNWE5MDU3NDA0YWVlM2M4NTA5NGQyZWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjJZ/kWIN2jvhcqU+0hdL8OTGEEw
pCMlYIyh199weEbuzVbhJcu6tNwcedfrgi0vjpGUpXs88uHsVayu5DBQuW07z/T3
591iG2/dCTU8zL063it+aBBCcfREC26jYdRgxpXBA9LxTT6Y/sqUNouwBx3rS/t/
wRiT048usktiMcxaYkxeSARgsSKzYpNNZjDPEZEmAlCuGt6/wq4FNcdDLBHWcsjb
XA+X6v20WNpb+BJopAiaCHTopo7kmXCNUpGlqF6x6/cwFKIUl9e/bNYmmTgkk4ue
Tdi3fBNaLniCk/VsYuXG9nuuvZjB4tq/wvwvlEQUpWiPoe597JEojpa1ZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH1kbD1zmHu+WpBXQEruPIUJTS7EMB8GA1UdIwQY
MBaAFGwJqwdR/qSykqmv0U2+w7g6B3hwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkFtckIxSC1wTEtTcWFfUlRiN0R1RG9IZUhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wNzYyNzItMjk2ZC00NmFmLTg1ZDEt
NDQ5NzNhNjAyZDlmLzEvZldSc1BYT1llNzVha0ZkQVN1NDhoUWxOTHNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wNzYyNzItMjk2ZC00NmFmLTg1ZDEtNDQ5NzNhNjAyZDlm
LzEvYkFtckIxSC1wTEtTcWFfUlRiN0R1RG9IZUhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoSGMA0G
CSqGSIb3DQEBCwUAA4IBAQCdCMpmNuQcwfaeSxZD+JXHzL9MjxbW+ElQOYhGzvM2
9z/U0Ist3cfSmbDlkmEGwqOZIfldne4iYpqWmAQGQ5WQtrNlqGtRb975/jMx23Yq
JpsfSaNh8eor22FiB2fCfUdttRUjvcDiw8JX11vS+/LT7w7hWKaLiGV4c3k3Dr+D
ry6XlC2Y1KqBEOwvZYctlysBjotXuCmc5ClEUYbm9L1wgB8KEoaF+5stJ5Rsue41
siW2J0df9OxAC5XWJfL3ekptm7UAMYxA2o/3qWIq4F+F4ZAx4/jExrZ7psOXQN4K
Mf5N8TDT9xk931Ami3+kWBzNAdxv5yuhzNPw0PxZ+Ap5
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:47:51 2024 by rpki-client on console-ams.rpki-client.org