Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/RnBVy_fSsybjM_pFGNZ0hKnFP4w.roa
File: RnBVy_fSsybjM_pFGNZ0hKnFP4w.roa (raw, json)
Hash identifier: wzwPphHqW6bXs8J7Kd8P40OMWEyhyiH2Pn1dzUacn0I=
Subject key identifier: 46:70:55:CB:F7:D2:B3:26:E3:33:FA:45:18:D6:74:84:A9:C5:3F:8C
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 018CC64B36EBF5CD476A2081DC995B51EA60
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/RnBVy_fSsybjM_pFGNZ0hKnFP4w.roa
Signing time: Mon 01 Jan 2024 18:31:07 +0000
ROA not before: Mon 01 Jan 2024 18:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201803
IP address blocks: 185.63.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:36:eb:f5:cd:47:6a:20:81:dc:99:5b:51:ea:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Jan 1 18:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=467055cbf7d2b326e333fa4518d67484a9c53f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:c6:e7:9c:8b:8c:8d:7a:93:0d:90:da:04:
c1:41:40:7e:b2:29:51:a2:f3:94:ae:8d:1e:b1:11:
06:6d:3a:ae:0c:93:dd:ab:78:29:05:65:c3:d8:c4:
30:02:bb:cb:7c:91:59:98:60:2a:a9:84:e8:6f:29:
e4:8c:2f:fc:1a:21:49:4e:0d:53:93:a7:8d:19:56:
b5:ba:77:c4:f1:10:5c:87:fc:bd:93:74:bf:bd:61:
7f:8e:12:a9:4e:78:21:1b:90:fd:68:8a:0f:5b:e9:
e0:13:ff:e7:94:3c:be:fa:d5:d9:2a:4e:d7:14:79:
82:56:f2:71:d8:b6:05:fa:c2:a9:38:10:29:59:93:
7e:16:2c:d8:8b:b1:2e:39:c4:d6:60:4e:86:4d:d3:
a3:af:cd:72:92:27:6d:bb:f6:6a:64:f9:70:d0:e5:
55:01:08:c4:b6:c8:6f:e3:78:3f:14:7b:71:0b:95:
76:42:c6:2f:6a:91:f5:e6:f5:c9:47:cb:cf:f9:4d:
6a:a9:b2:a8:d2:b0:41:a1:32:77:59:63:5f:67:52:
f9:34:bf:e1:7d:3c:52:09:e3:6f:ab:1c:3b:0d:6c:
6e:99:96:3c:4e:77:04:c3:6e:b9:c0:a4:b8:ed:8a:
32:a8:f5:f0:e6:bf:fa:d5:47:8d:5f:31:6b:47:e2:
56:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:70:55:CB:F7:D2:B3:26:E3:33:FA:45:18:D6:74:84:A9:C5:3F:8C
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/RnBVy_fSsybjM_pFGNZ0hKnFP4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.32.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:6d:aa:6b:3c:24:aa:16:50:f7:7d:27:e0:80:3f:0d:12:4d:
38:4c:a4:f8:15:41:56:97:85:54:b7:ab:9d:e5:7c:1a:d0:d0:
b2:b9:81:5d:1c:ee:ef:9a:ca:1e:38:6a:16:a4:c3:36:f4:53:
46:30:5c:df:29:db:a7:07:db:0c:61:87:ef:ec:0f:1f:74:da:
83:85:2c:2d:fc:1d:a3:78:1e:7b:7e:6a:d8:0c:ac:81:46:c8:
ce:3b:f9:43:5d:c6:85:76:ab:87:f7:2e:d2:be:90:9f:b8:4b:
93:d4:b6:ab:26:19:a2:54:2a:7e:26:95:c2:68:93:96:96:92:
79:7d:70:fc:4b:8c:db:05:c8:29:d0:04:63:93:8e:6c:5b:00:
55:99:56:60:63:42:a1:51:e6:d7:37:79:39:37:9c:d4:78:75:
bb:36:04:2a:a1:82:36:4e:e0:e8:14:b6:2c:9c:cc:2e:21:6c:
77:fe:e4:3f:40:7d:39:ac:83:93:13:c7:cf:7f:1c:b2:1f:c3:
f8:2b:5a:5a:c4:d7:7e:f3:78:0b:c6:c9:18:d7:36:be:77:72:
d9:7a:d2:2a:ce:39:b0:92:e1:3a:f8:7d:81:5e:bd:94:51:f4:
9f:e6:68:60:f8:12:62:01:9e:36:ea:2a:b9:b6:77:a2:6d:76:
5f:d3:52:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 21:28:22 2024 by rpki-client on console-ams.rpki-client.org