Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/ClMLwyfgXZymK3-Ztz9gx7V99VI.roa
File: ClMLwyfgXZymK3-Ztz9gx7V99VI.roa (raw, json)
Hash identifier: UjgBDtdLpsMbeRNU9UMCjKbyOysJzOLSQx6NVOthjms=
Subject key identifier: 0A:53:0B:C3:27:E0:5D:9C:A6:2B:7F:99:B7:3F:60:C7:B5:7D:F5:52
Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial: 018CC500ACA954689A792B04762A4857C6CD
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/ClMLwyfgXZymK3-Ztz9gx7V99VI.roa
Signing time: Mon 01 Jan 2024 12:30:04 +0000
ROA not before: Mon 01 Jan 2024 12:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49612
IP address blocks: 185.178.211.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:ac:a9:54:68:9a:79:2b:04:76:2a:48:57:c6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Validity
Not Before: Jan 1 12:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a530bc327e05d9ca62b7f99b73f60c7b57df552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:74:76:87:20:db:85:61:17:49:df:5f:0e:e8:
dc:46:99:38:48:f6:53:d3:e8:29:5e:25:02:09:e3:
dc:05:e1:0a:66:d4:2b:db:6b:e6:f5:7d:04:b9:09:
a7:41:f6:8f:44:98:31:7a:d7:91:be:69:e7:fa:24:
43:e4:2b:ca:5b:7c:2b:0d:b2:0d:fc:a1:36:a5:f0:
eb:db:58:24:1d:72:a6:27:e0:0b:e5:0a:55:2d:21:
15:cc:ec:15:55:d8:f9:6d:2f:d6:b1:88:61:8d:84:
f6:ce:2a:d3:a3:44:4c:09:63:45:80:0d:f5:35:fe:
44:73:71:ee:73:56:9c:12:e8:97:31:08:14:41:9d:
45:e1:a6:09:88:82:e0:83:55:e2:3e:44:f7:4b:68:
45:31:f0:99:e8:63:20:7b:2a:81:d4:de:5a:60:9d:
34:be:51:d7:42:51:c7:47:5c:cd:e2:c3:b7:0b:c9:
ef:97:6f:77:c6:30:f0:32:4a:50:8a:1a:a9:9a:ca:
a8:63:c3:92:76:2e:25:16:5c:ca:56:bf:1d:6f:5a:
c3:42:36:a6:7e:cb:ac:09:f0:2a:d7:33:bd:32:e3:
ee:3a:43:f5:db:0b:65:df:b9:ed:b7:5a:c4:9b:c9:
e0:c2:9e:df:3d:66:78:e9:b0:98:ab:8e:61:4b:c3:
84:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:53:0B:C3:27:E0:5D:9C:A6:2B:7F:99:B7:3F:60:C7:B5:7D:F5:52
X509v3 Authority Key Identifier:
keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/ClMLwyfgXZymK3-Ztz9gx7V99VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.211.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:a5:ef:b8:84:dd:93:fc:e0:fd:a2:5d:4b:01:9a:97:0f:de:
26:be:c2:40:3c:67:49:e9:c6:ac:31:24:85:ba:31:de:82:b7:
57:18:aa:35:03:09:a6:33:f9:b2:a4:7c:40:8c:92:34:72:78:
2d:3c:b7:f5:3d:05:1a:61:ef:b2:7d:b3:55:1c:8f:f9:67:2d:
d2:22:3a:1e:a4:a7:b7:01:a0:75:25:1e:87:c5:c3:fd:85:9e:
53:0e:3b:5d:de:bb:2a:8a:6c:1b:36:de:09:3a:7a:54:54:62:
d1:9a:cc:c6:87:3e:fc:61:42:28:e1:ff:97:9c:bf:67:af:45:
51:2e:40:d2:20:e5:8c:60:bd:2d:e3:05:56:6a:6a:38:df:49:
d2:ed:ed:63:4e:49:22:e1:94:b0:24:a4:4a:06:9e:67:a0:c8:
8d:49:be:81:51:e0:1b:a1:f8:79:60:b0:52:ca:98:61:12:99:
69:9b:93:cf:4b:d1:24:a7:9f:84:20:22:e5:f0:f2:f6:5e:27:
90:86:56:ce:e5:c3:46:c4:e1:69:2e:13:6e:5c:97:7c:1f:b4:
02:89:93:69:55:4f:41:c7:43:ff:99:44:b6:07:22:f6:a3:28:
20:c2:bc:2a:29:a2:8a:58:7a:d2:8b:5d:75:e6:74:ad:0b:ed:
aa:16:71:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:04:45 2024 by rpki-client on console-ams.rpki-client.org