Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS32780.roa
File: AS32780.roa (raw, json)
Hash identifier: G2k+QByq6ZqO15m9XzN/2+KcOgePNHy8CJdzpNBepmY=
Subject key identifier: B0:3F:2F:D5:DE:C2:80:4F:E7:10:84:B3:71:D8:C0:6A:8C:48:C1:F7
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3425228DCFA57E609A6523B1688E9C92C5EC2486
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS32780.roa
Signing time: Wed 31 Jan 2024 08:05:08 +0000
ROA not before: Wed 31 Jan 2024 08:00:08 +0000
ROA not after: Wed 29 Jan 2025 08:05:08 +0000
asID: 32780
IP address blocks: 191.101.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:25:22:8d:cf:a5:7e:60:9a:65:23:b1:68:8e:9c:92:c5:ec:24:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 31 08:00:08 2024 GMT
Not After : Jan 29 08:05:08 2025 GMT
Subject: CN=B03F2FD5DEC2804FE71084B371D8C06A8C48C1F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:28:3b:11:7b:0f:02:a5:0f:47:2a:94:e2:56:
89:14:22:3a:ed:40:b0:dd:3e:2b:ff:d1:78:c4:2f:
e8:d0:e1:ae:e9:56:45:ce:bd:a9:62:84:28:82:cf:
36:85:9c:86:60:eb:f9:9a:63:dc:0a:03:11:a1:96:
85:f7:af:1d:55:a8:53:a5:2a:ae:e0:a3:7a:af:28:
10:0b:ea:5f:f9:fd:b7:4b:84:03:7f:2f:61:4f:59:
77:a2:22:45:5e:2a:a2:b0:94:b8:b2:48:b8:a0:2b:
3c:cf:3e:3b:1c:e0:58:79:ea:01:b9:65:b0:69:a1:
fd:3d:53:58:ea:62:64:28:9d:d6:3b:64:90:8d:26:
b9:a1:46:10:50:12:99:af:3c:05:4f:3e:64:1d:07:
87:e1:00:fb:63:18:9b:b9:dc:d8:81:1f:e5:09:79:
eb:47:19:a4:04:15:ae:56:ee:ec:81:97:a1:1a:05:
f7:11:28:f8:85:cf:f7:42:bc:a0:6b:a0:59:c2:e5:
9c:4a:45:89:23:8d:19:d3:39:b2:82:39:a3:84:3d:
96:7b:d9:91:a2:61:63:7f:13:ac:00:c7:b6:00:cc:
2a:40:00:d1:1c:98:25:3c:91:b4:94:c9:51:7f:b5:
95:7a:03:f9:2f:ef:86:a9:7e:d1:48:f7:4a:37:9b:
74:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3F:2F:D5:DE:C2:80:4F:E7:10:84:B3:71:D8:C0:6A:8C:48:C1:F7
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS32780.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.174.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:90:c7:47:21:3a:0e:9d:4d:be:58:db:a1:bc:36:28:9c:d2:
0a:96:46:7e:04:78:f1:92:c0:37:e0:45:69:7f:ed:05:54:c4:
d9:90:ae:2e:d3:a6:e5:18:c3:f6:d6:52:4a:7b:6b:b6:05:08:
d0:03:36:3c:e3:79:30:3b:fd:d2:fc:6b:28:72:81:2b:85:77:
b6:bc:25:e4:66:c6:15:58:a8:c4:b2:ec:d3:d1:ab:0a:1b:74:
2d:6f:1e:5d:66:eb:2e:32:b1:4c:1f:16:f5:d2:2d:c1:bc:40:
69:3b:19:fd:93:6f:37:cd:90:6a:9c:64:f6:db:09:66:02:21:
3d:ec:46:c8:2c:6a:56:80:71:e1:88:f5:d0:6c:8f:3c:92:c5:
e8:38:a4:a6:d8:18:ac:db:dc:b4:76:5d:35:21:6f:cd:c3:47:
92:7f:bf:ca:1f:5b:5a:6a:34:e2:90:15:d2:4c:3b:c0:7c:39:
5f:96:1c:23:ee:71:76:00:ed:6b:c9:5f:70:11:a4:0f:00:1b:
90:3c:2b:2b:7c:1e:5a:be:8a:32:17:c3:6e:b1:83:a6:95:55:
2e:0d:31:8a:a2:49:df:b6:d5:1e:f0:8e:8b:31:9f:98:b2:90:
8d:16:ef:d6:d6:f5:24:95:84:58:56:0e:5b:45:c2:6a:fd:15:
97:fb:1e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:58:34 2024 by rpki-client on console-fra.rpki-client.org