Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/6ijDtJkuoccCgLkguN9W1JJhdPo.roa
File: 6ijDtJkuoccCgLkguN9W1JJhdPo.roa (raw, json)
Hash identifier: Sp0vA+9FLAdG8kzazXtCjmipaXXNSCP/zgC375qVZ5o=
Subject key identifier: EA:28:C3:B4:99:2E:A1:C7:02:80:B9:20:B8:DF:56:D4:92:61:74:FA
Certificate issuer: /CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Certificate serial: 019428230A26339EF5A86E8D230A4B1E0E39
Authority key identifier: 30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/6ijDtJkuoccCgLkguN9W1JJhdPo.roa
Signing time: Thu 02 Jan 2025 17:49:32 +0000
ROA not before: Thu 02 Jan 2025 17:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205083
IP address blocks: 185.231.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:0a:26:33:9e:f5:a8:6e:8d:23:0a:4b:1e:0e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Validity
Not Before: Jan 2 17:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea28c3b4992ea1c70280b920b8df56d4926174fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b7:ee:e3:45:8e:dc:a5:c4:45:a0:bf:52:4e:
bb:98:62:04:13:be:37:2a:9d:9b:00:89:85:cd:38:
04:87:62:f9:78:81:b2:e1:0e:30:c9:80:f4:26:86:
12:7d:11:36:78:73:95:39:f5:07:f1:45:9f:ae:3b:
df:66:18:41:b6:31:86:a2:24:fd:c4:31:73:8b:3b:
fb:1f:bf:36:f3:8b:3a:63:a1:8d:e1:75:d3:6c:bb:
30:8a:fe:50:22:09:97:0a:3e:e4:f4:02:af:6f:08:
b7:53:52:cd:ef:e4:55:a6:a3:0e:cd:a0:dc:e3:d9:
a1:6a:bd:9c:9e:26:f2:78:7f:33:0e:88:f2:51:c2:
6a:9a:cf:cd:53:aa:4c:6f:f7:66:72:12:79:0f:c7:
08:cb:49:c1:ec:fb:ad:45:21:a4:70:25:3b:d1:88:
6d:1f:1c:d5:07:fa:40:83:34:2c:7b:c5:be:63:2a:
49:f6:a0:bb:a6:83:e4:8e:b1:c4:0b:4a:d8:d4:d9:
58:8e:3c:a0:b6:71:24:e0:87:f9:0e:c7:a8:70:2d:
a3:14:9b:47:34:38:f0:0d:3c:b8:e2:86:53:f5:e7:
c7:e7:1b:75:13:dc:6a:80:f7:fe:70:51:aa:70:15:
32:c7:dd:33:58:72:49:4c:4c:93:f8:b0:4e:54:af:
f7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:28:C3:B4:99:2E:A1:C7:02:80:B9:20:B8:DF:56:D4:92:61:74:FA
X509v3 Authority Key Identifier:
keyid:30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/6ijDtJkuoccCgLkguN9W1JJhdPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.32.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:00:b5:2d:af:62:c6:6c:2b:9e:36:49:d2:0c:05:46:bb:f8:
a7:f1:3b:d2:4d:0a:7b:19:dc:4d:ca:54:03:b3:fe:80:1d:d0:
45:9f:04:c9:16:c6:f6:40:51:78:55:a7:e3:33:af:33:71:20:
3e:21:c4:1f:d5:d3:60:08:a6:be:9e:60:aa:29:92:82:90:d5:
01:a4:d6:99:a7:e4:48:3d:0a:c9:16:30:ea:fc:65:2f:17:89:
d2:5d:4a:e7:a6:fc:07:68:ad:bf:34:28:50:e2:5a:b0:29:28:
5b:27:db:ac:b9:4f:72:92:7d:53:ee:e3:4e:8d:0a:0b:70:ed:
4a:99:56:7b:0e:9f:71:42:4d:65:f1:17:f5:14:24:75:39:6b:
34:c7:19:9a:5a:c2:ae:f2:04:8a:25:a2:6a:02:37:f6:82:89:
4c:2f:a7:fb:1c:be:f7:bd:cc:52:db:98:6f:c7:80:6a:8d:29:
d2:c0:3c:0b:ec:90:8a:09:e7:b4:9f:f8:b8:88:5b:e0:c8:04:
aa:02:30:d0:fd:69:62:7b:64:57:71:42:d3:a4:60:8c:e7:84:
95:73:cb:08:df:88:1f:2c:55:05:1a:e3:ab:fc:44:b7:48:fc:
c6:5f:26:7e:5f:2a:ef:26:3c:eb:8c:da:e0:4e:b1:c4:84:af:
54:c1:cc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:36 2025 by rpki-client