Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/solwQxRIJyp7yJ0RhAu4jSOpsIE.roa
File: solwQxRIJyp7yJ0RhAu4jSOpsIE.roa (raw, json)
Hash identifier: zMCP1nZALgBq2JRJaRxJhTsHPfb6uPa4E7NJN15Zq6s=
Subject key identifier: B2:89:70:43:14:48:27:2A:7B:C8:9D:11:84:0B:B8:8D:23:A9:B0:81
Certificate issuer: /CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Certificate serial: 018CC79433D65B444F24EAD6E078D5C53DA5
Authority key identifier: 23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/solwQxRIJyp7yJ0RhAu4jSOpsIE.roa
Signing time: Tue 02 Jan 2024 00:30:27 +0000
ROA not before: Tue 02 Jan 2024 00:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31027
IP address blocks: 185.203.233.0/24 maxlen: 24
185.203.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 16:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:33:d6:5b:44:4f:24:ea:d6:e0:78:d5:c5:3d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Validity
Not Before: Jan 2 00:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b28970431448272a7bc89d11840bb88d23a9b081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5b:c2:a5:65:0f:c1:e5:53:ab:e5:0a:ff:b8:
02:56:fe:65:5b:40:b4:bc:e0:4e:81:b9:eb:56:d7:
31:a7:df:9a:00:2a:04:52:ed:74:8a:12:ab:b7:83:
48:02:04:cf:aa:62:b2:ad:ad:2c:09:3c:94:b7:8d:
c6:8f:e2:bc:79:d7:98:5e:d7:ee:ba:84:53:90:14:
09:12:d6:d3:87:30:5a:5f:39:2c:31:74:13:af:18:
44:de:4a:fe:d3:f2:9a:4b:11:6d:52:68:17:07:ed:
c8:f7:48:80:3b:31:d3:47:f7:8a:4b:46:e4:a1:0e:
c3:fd:d5:fb:b1:aa:1a:e3:b6:9d:5e:29:e3:62:6b:
0b:32:8f:ce:8f:d9:1c:72:a5:ee:fd:15:30:63:6d:
af:1c:fe:47:e1:8f:73:52:b7:d8:ec:c1:66:ab:f4:
6e:b5:4f:f2:51:e5:43:8c:a0:4a:01:1a:90:23:d5:
9e:68:0f:a3:ab:2b:eb:02:86:ee:31:9f:39:2d:a8:
b5:cc:f4:9e:55:5c:a3:62:0e:ed:2d:6e:af:19:68:
62:4b:ea:1f:1f:60:5b:21:ea:74:77:e2:15:bf:04:
b8:a6:52:80:7e:d6:15:95:1c:5b:06:22:b6:fc:60:
49:fb:2b:19:05:ea:e8:8d:1b:af:b9:ed:fc:05:90:
1a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:89:70:43:14:48:27:2A:7B:C8:9D:11:84:0B:B8:8D:23:A9:B0:81
X509v3 Authority Key Identifier:
keyid:23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/solwQxRIJyp7yJ0RhAu4jSOpsIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.233.0-185.203.234.255
Signature Algorithm: sha256WithRSAEncryption
ac:b5:33:7d:ac:63:93:cb:63:12:dc:24:80:3d:b5:26:fb:19:
c1:4f:3c:9b:85:fc:f3:b3:3c:a1:41:2c:b2:5f:c6:c1:a3:71:
7c:59:e4:ff:1a:09:ba:d0:71:29:8b:d8:f0:dc:cd:83:28:66:
59:cc:2b:f3:c9:db:00:b7:e3:f5:64:cd:2d:af:e7:9d:31:22:
78:f7:df:a6:fd:3a:b7:72:8f:9f:ac:1d:f8:0b:47:11:70:9b:
68:6c:87:28:b8:2d:fe:a9:19:0b:f5:91:4e:de:30:8e:4b:6c:
8f:93:35:74:5b:b1:2d:05:cc:c7:89:7b:32:9d:cd:da:53:ee:
0c:08:ff:ac:b5:d5:94:67:57:44:a2:d2:4d:72:1c:61:5a:66:
6b:2f:e8:ba:96:64:9a:1d:fa:5d:ee:b4:08:92:e2:bf:db:6d:
66:ad:7e:af:00:12:0a:ae:d7:82:c6:47:75:98:90:f2:62:d5:
b2:ea:cb:89:79:9c:d5:61:2d:c9:f1:5c:7f:37:96:f3:fb:08:
31:03:18:49:65:99:89:f4:c5:d8:26:17:32:c7:2a:a3:86:fc:
88:2c:17:3f:8a:0a:b8:25:24:70:54:4b:cd:4a:5c:4f:fc:c6:
b9:45:c8:25:d6:a8:4d:c7:bb:89:29:3b:4f:9e:95:62:f2:8c:
6b:1b:98:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:44:05 2024 by rpki-client on console-ams.rpki-client.org