Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/MNfFSu7NuNBl8UrrhEdJJ3utOE8.roa
File: MNfFSu7NuNBl8UrrhEdJJ3utOE8.roa (raw, json)
Hash identifier: Wi40bCNdU1orcW5TI91lMEvYgOaB5lVFUoaSDg/B4RQ=
Subject key identifier: 30:D7:C5:4A:EE:CD:B8:D0:65:F1:4A:EB:84:47:49:27:7B:AD:38:4F
Certificate issuer: /CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Certificate serial: 018CC726E6FF6857429D9DF6A137CE3652BC
Authority key identifier: 93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/MNfFSu7NuNBl8UrrhEdJJ3utOE8.roa
Signing time: Mon 01 Jan 2024 22:31:04 +0000
ROA not before: Mon 01 Jan 2024 22:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58281
IP address blocks: 185.30.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:e6:ff:68:57:42:9d:9d:f6:a1:37:ce:36:52:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Validity
Not Before: Jan 1 22:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30d7c54aeecdb8d065f14aeb844749277bad384f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6a:96:1a:1a:80:82:7b:cf:eb:f6:a2:ae:e5:
25:f8:32:b0:f2:04:bc:f1:68:c5:ed:b7:84:c4:14:
49:b3:e2:7f:fb:33:69:14:65:30:1f:69:7d:23:07:
d3:9c:20:2b:dc:f2:df:9a:ce:e6:6d:d3:64:8d:e7:
38:5d:4c:25:cd:56:c4:61:6e:52:41:69:d2:e5:fa:
dc:f5:de:38:74:b3:bc:53:d9:8e:07:a1:83:db:34:
b2:0d:a3:2c:cf:99:2e:86:a7:52:f6:0f:68:df:29:
6f:84:ca:1c:cf:d9:02:04:83:54:d4:ab:c2:12:31:
2b:0b:0a:cc:5e:78:1f:ba:89:36:48:0d:b6:99:45:
40:2d:4b:32:ff:e7:b4:ce:2d:50:2f:05:f1:6f:e9:
7c:cc:05:86:dc:d2:b3:f9:1e:35:d9:42:e5:e5:b8:
0f:fd:c8:53:ac:d5:a7:e4:35:0a:55:94:c0:56:f2:
3f:18:bf:cc:a4:6d:42:3d:3f:39:1d:01:d3:f9:3a:
36:b7:77:9f:5a:13:1f:d2:61:07:ac:e6:54:c4:a0:
ff:f4:4e:21:57:da:db:7a:0c:d8:63:79:5b:db:85:
1a:c6:d9:93:3d:43:18:2b:f0:e3:11:30:e8:1a:a7:
84:e6:6b:c2:38:cf:55:b9:65:82:a2:a4:a3:5b:fb:
21:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D7:C5:4A:EE:CD:B8:D0:65:F1:4A:EB:84:47:49:27:7B:AD:38:4F
X509v3 Authority Key Identifier:
keyid:93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/MNfFSu7NuNBl8UrrhEdJJ3utOE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.36.0/24
Signature Algorithm: sha256WithRSAEncryption
67:b8:30:80:e4:2c:0f:26:99:a9:c7:47:d9:93:c8:9a:b4:03:
31:c6:75:7d:fb:6e:85:39:59:f6:e8:70:85:14:8e:43:83:c9:
d2:6b:4d:91:5e:84:69:1b:6b:4e:e4:74:2c:57:40:b1:17:e9:
39:2a:4c:b1:ed:bd:92:4e:6b:93:96:ec:2c:54:56:e6:af:dc:
a5:a7:4f:df:85:04:78:90:5e:95:2c:8f:15:ea:5e:66:39:f5:
a6:bb:00:31:8d:f8:9d:07:0e:1c:e1:c8:69:a9:3b:89:45:ff:
39:1f:57:e6:20:62:19:a7:e2:61:da:8b:6c:88:43:84:d5:8a:
23:a4:fa:5d:97:5f:85:49:c0:42:63:25:2c:76:24:36:fe:fc:
af:ed:52:15:10:37:c2:48:8a:fe:88:bf:9b:53:66:ae:a9:50:
b1:43:dd:d7:10:f9:51:10:99:87:8f:8f:5f:73:78:0b:03:5b:
eb:0a:c6:47:5e:71:d5:59:3a:35:3e:80:aa:03:04:52:bb:49:
ce:28:b6:56:5c:39:39:b4:05:1d:7b:eb:c0:a3:6a:0c:0c:d3:
6e:55:3d:68:fa:a1:a2:ca:a5:b6:17:b6:22:c4:e0:ce:9c:a9:
a7:8f:1e:ec:5c:59:91:7e:0f:90:63:fc:b3:34:6e:9c:ae:64:
2f:05:e8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:14:40 2024 by rpki-client on console-ams.rpki-client.org