Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/cyeA6nty9fcxVXjbQKFC5m2JOwo.roa
File: cyeA6nty9fcxVXjbQKFC5m2JOwo.roa (raw, json)
Hash identifier: mOI8UmravXYrx49069STG/MxM1DYlFDpHDvw05uRaPw=
Subject key identifier: 73:27:80:EA:7B:72:F5:F7:31:55:78:DB:40:A1:42:E6:6D:89:3B:0A
Certificate issuer: /CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Certificate serial: 018CC94D9FEC68ADA3E7DB7F0644BB244FA1
Authority key identifier: 30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/cyeA6nty9fcxVXjbQKFC5m2JOwo.roa
Signing time: Tue 02 Jan 2024 08:32:36 +0000
ROA not before: Tue 02 Jan 2024 08:32:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211720
IP address blocks: 185.56.83.0/24 maxlen: 24
2a06:e80:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:9f:ec:68:ad:a3:e7:db:7f:06:44:bb:24:4f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Validity
Not Before: Jan 2 08:32:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=732780ea7b72f5f7315578db40a142e66d893b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:33:20:a0:e1:21:f2:42:b7:2c:7c:e3:c2:86:
6c:d8:4f:58:5d:aa:65:f3:fd:e2:98:56:76:d6:4e:
4f:3d:a9:2e:2a:0a:88:8e:2e:20:8a:8a:11:0d:66:
d8:af:c8:6b:ee:92:85:23:f6:b4:b0:5a:f9:98:98:
8f:80:6e:4e:e1:a9:34:ef:13:fc:87:7a:c7:1e:65:
0a:9b:f5:a1:70:bd:10:a5:a4:cc:81:02:18:10:98:
bf:f8:33:c6:c4:c7:d7:98:fc:08:cf:89:e8:52:3a:
a1:43:5a:7d:98:d0:51:18:ce:7e:01:7f:a0:75:19:
44:37:b3:7d:18:f0:f1:e3:18:0d:88:fc:7a:77:04:
c8:7d:f8:34:78:12:5d:00:0a:2b:0f:cf:2a:3b:37:
d6:da:4a:7d:ed:c7:32:54:13:b4:1c:02:e5:03:28:
08:a9:e3:c9:e9:80:94:2c:62:c4:04:93:20:1f:14:
96:72:2a:60:9f:ff:66:94:b9:bc:f0:38:bb:f8:92:
f9:e0:98:d1:f1:05:4a:5e:94:5b:cd:31:65:f3:18:
32:d6:88:a0:a7:e8:c4:7c:53:7e:e7:3d:90:95:9e:
08:b2:83:86:d3:16:09:e8:0c:ca:09:12:c0:b5:34:
dd:5f:3e:0c:b8:5b:68:22:27:f2:cf:f3:c6:d5:e7:
0f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:27:80:EA:7B:72:F5:F7:31:55:78:DB:40:A1:42:E6:6D:89:3B:0A
X509v3 Authority Key Identifier:
keyid:30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/cyeA6nty9fcxVXjbQKFC5m2JOwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.83.0/24
IPv6:
2a06:e80:3000::/36
Signature Algorithm: sha256WithRSAEncryption
10:78:87:6d:8d:58:56:a9:67:2a:78:cf:3f:96:74:90:f4:5d:
f0:59:53:20:80:c5:9e:82:c6:6e:5f:a4:24:88:b3:ff:56:09:
a8:92:a9:88:8b:80:0c:db:9f:8b:56:5b:f4:ed:16:f0:4d:5b:
f1:b5:35:9d:8c:76:3e:7d:6d:c6:80:0b:9f:0d:35:91:1a:87:
af:b9:67:0d:9b:64:95:7c:38:ae:89:3f:52:fc:f1:94:f1:b0:
31:08:83:38:ef:ab:2f:b4:68:a9:e8:2c:15:b5:75:2e:97:24:
95:ae:05:64:90:98:3e:fb:9d:c7:39:fc:df:d3:f6:49:a6:ce:
41:2d:94:0b:09:8c:50:7b:95:5c:a1:5e:5b:1f:c4:aa:e9:a1:
e6:30:e3:51:b8:8b:cc:68:0f:c5:95:23:e3:d4:b8:db:4c:10:
80:6a:ab:1b:03:83:d1:e1:f6:3f:22:92:c6:10:06:30:f5:03:
d6:60:a3:4a:e5:91:ac:44:af:d3:7f:fa:fb:57:6d:97:80:8b:
75:04:e2:cc:c1:ed:fb:89:7f:73:e4:38:05:17:be:54:e2:7e:
4c:7c:3e:c8:4b:9b:a5:af:39:73:de:1a:a3:3d:d7:90:4f:f4:
29:7e:d1:6a:85:cf:ff:b8:5e:ff:9b:74:6b:a2:93:f2:05:2c:
53:69:02:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:52 2024 by rpki-client on console-fra.rpki-client.org