Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/C3Ye8BVWunhqKy1Z9BgtJL5ksLU.roa
File: C3Ye8BVWunhqKy1Z9BgtJL5ksLU.roa (raw, json)
Hash identifier: 5mxTDuhv0CraTCOesKU7o3VosKd5TSTLIwnqGo4xImo=
Subject key identifier: 0B:76:1E:F0:15:56:BA:78:6A:2B:2D:59:F4:18:2D:24:BE:64:B0:B5
Certificate issuer: /CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Certificate serial: 018CC94D9EE89E3215096A73E3B9296E197D
Authority key identifier: 30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/C3Ye8BVWunhqKy1Z9BgtJL5ksLU.roa
Signing time: Tue 02 Jan 2024 08:32:36 +0000
ROA not before: Tue 02 Jan 2024 08:32:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47674
IP address blocks: 185.231.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:9e:e8:9e:32:15:09:6a:73:e3:b9:29:6e:19:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Validity
Not Before: Jan 2 08:32:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b761ef01556ba786a2b2d59f4182d24be64b0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:74:32:b8:53:63:8e:c6:d7:96:d9:4b:01:ad:
15:ca:1b:3a:df:8f:13:30:5d:f8:fe:67:02:34:74:
46:23:e0:1b:32:f2:ec:78:1f:2c:95:31:bd:4a:31:
73:5c:5f:e5:77:0a:d8:40:7e:2d:31:f7:6e:7d:62:
ef:1e:7c:8b:73:4e:fa:ae:05:14:75:75:7f:88:25:
af:68:a4:4e:df:69:bc:9a:40:57:8a:ea:d9:5a:59:
9d:4c:8d:32:bf:2b:5a:91:11:77:83:2d:33:38:6d:
a0:e5:0d:ac:5e:8b:23:11:97:eb:52:4a:9b:49:ba:
5e:da:53:7d:96:12:7c:18:9b:3f:0c:9b:e8:c4:81:
f5:41:14:ae:63:60:ae:17:7f:ab:09:a4:32:10:35:
41:f2:15:18:30:04:77:66:e3:39:f8:3b:e3:85:01:
39:d4:74:24:95:a5:6a:b2:b3:70:54:76:df:6b:58:
89:b5:67:4d:ab:7c:b0:d5:fb:17:3d:97:96:55:fe:
24:04:a0:b8:58:a0:c5:b1:d8:cd:cb:aa:82:c4:72:
bd:41:36:e9:c6:0a:c8:71:0c:d9:bd:05:64:a3:71:
40:c4:74:93:b6:83:bc:e6:49:32:74:57:84:63:67:
1d:47:0a:29:df:2f:99:7d:49:fb:46:03:3c:a6:19:
86:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:76:1E:F0:15:56:BA:78:6A:2B:2D:59:F4:18:2D:24:BE:64:B0:B5
X509v3 Authority Key Identifier:
keyid:30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/C3Ye8BVWunhqKy1Z9BgtJL5ksLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.32.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:dc:17:a1:6f:d6:d9:ef:fa:81:29:41:9d:ad:26:64:09:39:
57:e4:ae:a1:dc:e8:1a:35:fd:5b:41:4f:54:d4:7d:fd:c0:fd:
cd:94:89:67:1d:2e:7d:2b:e8:36:ec:34:74:f6:52:eb:32:53:
c7:2c:3a:8f:2f:9c:72:cd:94:39:52:4e:d1:bf:c4:77:5c:b0:
94:76:ad:b8:95:fb:92:b6:23:f2:9f:b4:9d:e5:3c:a0:62:61:
69:79:e2:48:b8:54:d4:56:94:0b:2c:d5:0f:04:17:a3:81:cc:
47:b7:26:68:17:57:5e:8f:b8:10:84:a1:c3:0d:b4:3c:70:76:
b4:b4:90:2a:a0:c3:98:be:cb:cb:da:04:10:de:13:2d:32:be:
b4:cc:ec:a8:84:d1:6c:3b:60:dd:50:ca:f2:2d:8e:03:7c:47:
df:80:9b:a7:0b:c0:d0:6b:89:72:60:d1:92:f9:a5:0c:ff:71:
ef:0b:24:1a:68:1b:5b:11:66:9d:ba:c0:76:02:2f:f2:03:3b:
b7:c3:87:5b:dd:26:d1:75:b6:26:b5:8f:5b:16:92:fc:b1:1e:
bc:d6:82:f1:b1:79:4e:ed:ca:7d:e2:3e:34:d1:87:66:ef:4a:
d7:40:88:ca:7c:0d:df:e7:fa:e5:cb:f6:53:87:78:de:06:3f:
2b:66:50:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:26:42 2024 by rpki-client on console-ams.rpki-client.org