Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/v8uLwmSVH2j56BFvD-L3KxMxMo4.roa
File: v8uLwmSVH2j56BFvD-L3KxMxMo4.roa (raw, json)
Hash identifier: B+VKN6wLd5xdQiMxKvh/MzEkcBRrBm2YTCCO+A/fVTY=
Subject key identifier: BF:CB:8B:C2:64:95:1F:68:F9:E8:11:6F:0F:E2:F7:2B:13:31:32:8E
Certificate issuer: /CN=edfe3f6f6d98714e01f08c73b2644368774e8660
Certificate serial: 018CC725DED8B000BF2E4DB1ADEE56FD1FA7
Authority key identifier: ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/v8uLwmSVH2j56BFvD-L3KxMxMo4.roa
Signing time: Mon 01 Jan 2024 22:29:57 +0000
ROA not before: Mon 01 Jan 2024 22:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5650
IP address blocks: 194.50.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:de:d8:b0:00:bf:2e:4d:b1:ad:ee:56:fd:1f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfe3f6f6d98714e01f08c73b2644368774e8660
Validity
Not Before: Jan 1 22:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfcb8bc264951f68f9e8116f0fe2f72b1331328e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:04:13:0f:c1:1f:c6:f0:ed:b2:29:fc:06:33:
f2:2e:60:08:b9:2f:9c:6f:73:51:d0:43:4a:bd:d5:
f4:80:50:50:44:d3:07:35:79:78:70:a7:0b:6b:b0:
ac:e5:83:63:51:0a:8b:a1:44:78:b6:82:f2:b3:4e:
04:7b:0c:52:75:72:de:a0:67:8c:fb:df:24:4d:72:
d8:f8:20:3d:83:0b:5b:73:a1:d6:23:97:ab:bb:54:
9a:91:22:41:65:71:24:e9:16:17:05:9d:01:03:4b:
4d:74:c3:de:77:d4:78:06:a9:57:64:8f:51:8d:12:
28:77:8b:52:05:33:5d:e0:52:86:5f:ff:26:b9:88:
33:f7:5d:99:dd:4d:5c:a4:0b:3f:1f:ea:6e:42:c1:
17:be:bb:65:df:ca:0d:d3:df:b5:69:30:aa:23:f7:
a8:1f:d7:5c:01:16:3f:8e:30:08:09:d0:23:63:34:
ce:f5:15:d1:eb:e9:16:c8:8d:5d:48:c4:b5:af:60:
87:b8:2f:97:9e:06:42:d2:81:91:27:54:af:43:b6:
08:59:c9:53:8b:ee:8e:3b:96:85:b1:60:ea:ef:d6:
64:11:6c:4b:2f:83:91:ce:63:59:3a:fe:f8:b4:6e:
f5:e2:32:bf:00:a6:e0:37:b4:19:28:36:13:1a:0a:
30:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CB:8B:C2:64:95:1F:68:F9:E8:11:6F:0F:E2:F7:2B:13:31:32:8E
X509v3 Authority Key Identifier:
keyid:ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/v8uLwmSVH2j56BFvD-L3KxMxMo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.144.0/22
Signature Algorithm: sha256WithRSAEncryption
89:00:fd:8f:32:a1:b0:ab:ff:78:94:f2:9d:37:57:14:92:1b:
9c:51:df:df:6a:78:c0:b2:ab:c5:22:50:fc:5d:10:91:3a:86:
bb:a2:91:82:b7:b4:0a:57:d3:4b:ed:0b:7f:fa:00:1e:ee:ef:
c8:b3:73:b3:4f:e0:4f:b4:dc:70:78:25:81:e4:2e:64:01:07:
49:ee:5f:d4:d6:0e:20:d3:f5:c0:6b:2a:04:5d:71:90:34:39:
e6:a5:7e:d8:51:b7:2d:98:00:41:3f:7b:0f:44:53:55:79:aa:
53:13:b8:df:da:a1:51:9d:48:02:16:f8:80:e2:fe:5b:25:20:
c4:20:84:9e:18:ed:00:23:1c:2d:48:33:b1:c3:d0:6b:0a:4e:
b5:8e:d1:4c:bf:8b:8f:e3:62:0c:79:c9:b7:c8:ed:33:2a:01:
54:17:9e:0a:e2:be:dd:b6:05:dd:59:bc:d1:41:5e:62:42:1d:
46:7f:46:e8:a9:fd:17:c0:a0:87:dd:b1:a2:9f:6f:11:2a:0b:
3d:83:b4:e2:92:e2:1e:5b:46:57:90:94:f9:d0:0d:27:59:d1:
98:60:e9:bc:6d:41:77:a5:6e:bb:ac:f4:df:a8:eb:b4:7f:48:
2a:98:fb:c6:76:14:19:ad:4b:e3:ca:dd:7f:87:a0:5e:e3:e4:
1d:79:71:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:55:21 2024 by rpki-client on console-ams.rpki-client.org