Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS32159.roa
File: AS32159.roa (raw, json)
Hash identifier: t52NKh9O9l0Zi/fMPWl6fnWlSDT1DrnKSSzI6W8ZNwo=
Subject key identifier: AC:74:F2:C4:4E:DA:4C:AF:24:9F:12:B4:51:C9:00:33:AA:30:EE:D6
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 19DED039663FCD03A26A54D9511C2F9D8C7EE128
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS32159.roa
Signing time: Sat 12 Aug 2023 00:00:11 +0000
ROA not before: Fri 11 Aug 2023 23:55:11 +0000
ROA not after: Sat 10 Aug 2024 00:00:11 +0000
asID: 32159
IP address blocks: 181.214.182.0/24 maxlen: 24
181.214.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:de:d0:39:66:3f:cd:03:a2:6a:54:d9:51:1c:2f:9d:8c:7e:e1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 11 23:55:11 2023 GMT
Not After : Aug 10 00:00:11 2024 GMT
Subject: CN=AC74F2C44EDA4CAF249F12B451C90033AA30EED6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6d:4a:6d:0e:cb:a4:41:d8:60:54:14:7f:9d:
34:a5:41:9c:80:1c:e9:2b:e1:54:2b:89:39:53:4a:
33:f7:12:2b:7a:38:3e:b4:72:9d:aa:ce:a0:f8:72:
2d:59:bf:7d:26:98:83:ba:a2:b0:8b:7e:70:bc:94:
5c:74:58:6d:63:5a:d2:8a:6e:7a:10:4e:f1:84:a1:
d6:f6:16:17:b5:b0:e9:a8:09:70:35:15:ee:59:ef:
5a:29:1e:03:9c:bd:a1:41:42:02:cc:4c:ee:24:f7:
9f:a6:9c:6d:27:c9:c2:b0:1c:b0:1a:c9:af:37:7a:
47:06:63:70:51:0b:f2:ea:d1:ca:24:22:ae:41:42:
ea:81:0c:86:25:6c:7c:24:4d:14:a2:e4:3e:d5:15:
b3:44:18:f0:0e:77:64:d5:10:20:57:71:bc:64:b9:
70:ec:ff:f0:64:f7:62:2b:9a:26:58:70:a1:d5:3a:
d0:b6:5d:e5:bc:f0:af:ec:b8:50:83:86:3b:6c:1a:
eb:3d:1a:fe:ca:50:e1:09:00:26:0f:2c:58:09:c2:
39:8c:c6:45:54:88:bd:58:68:23:e1:fd:70:f3:9a:
bc:47:60:95:1a:73:4d:1f:6f:86:70:15:60:3c:fb:
1f:9d:7b:e0:8b:26:02:54:e4:db:1f:63:98:a1:51:
24:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:74:F2:C4:4E:DA:4C:AF:24:9F:12:B4:51:C9:00:33:AA:30:EE:D6
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS32159.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.182.0/24
181.214.220.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:6c:b0:2d:3f:ef:95:f3:99:15:ef:6f:46:d5:fd:56:55:b5:
06:83:dc:7b:5d:a4:b8:4e:f7:ba:4b:b7:a3:79:54:24:c0:55:
7e:0c:57:1e:3b:bb:f7:73:76:14:1b:e1:93:9b:71:1c:99:46:
8a:50:07:20:fc:f9:8a:86:69:3e:46:00:48:43:26:35:5b:9a:
9f:0d:f2:78:ca:d2:0a:ac:39:91:93:27:d1:ee:5d:2f:52:ea:
d9:a3:4c:88:b8:91:38:1e:3c:64:c2:43:dc:be:e8:e3:cb:a5:
ff:ca:76:8e:8b:c7:a0:1b:b4:a6:20:51:a6:d3:24:cd:55:60:
d6:c9:ea:1e:38:cf:5e:d8:78:94:fb:b7:d9:06:50:fe:ca:41:
2e:17:c0:da:d4:4c:6b:32:00:ea:8f:e1:fa:9e:09:59:4c:2c:
ad:ec:0f:50:44:82:83:cc:11:83:e0:f1:7b:26:97:25:5f:f8:
b1:c9:c1:4e:2d:15:49:65:86:8a:52:5c:e3:b9:64:8d:b8:39:
c8:b0:b1:00:09:00:55:c3:5f:d4:27:ed:d2:44:aa:ea:a3:c9:
46:f8:c1:29:ac:80:61:07:52:54:fc:21:c0:02:03:6c:af:6f:
8c:d7:31:ca:df:a5:a5:76:bc:05:51:1d:dc:3b:76:23:2c:7f:
c4:f7:cd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 20:13:45 2024 by rpki-client on console-fra.rpki-client.org