Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/TYWepdwzCmiIVwEz7K8yZe03CRw.roa
File: TYWepdwzCmiIVwEz7K8yZe03CRw.roa (raw, json)
Hash identifier: Gskq7xmpmSlLRwYuMMpLlLQSUWpIBfZkyQHS0PN6dOs=
Subject key identifier: 4D:85:9E:A5:DC:33:0A:68:88:57:01:33:EC:AF:32:65:ED:37:09:1C
Certificate issuer: /CN=1fa12d687c627a182f81d4cccb3f32201861f677
Certificate serial: 019422FB7603187991D81F90290970B38D39
Authority key identifier: 1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/TYWepdwzCmiIVwEz7K8yZe03CRw.roa
Signing time: Wed 01 Jan 2025 17:48:12 +0000
ROA not before: Wed 01 Jan 2025 17:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212572
IP address blocks: 185.50.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:76:03:18:79:91:d8:1f:90:29:09:70:b3:8d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa12d687c627a182f81d4cccb3f32201861f677
Validity
Not Before: Jan 1 17:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d859ea5dc330a6888570133ecaf3265ed37091c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:a2:ca:66:b4:cb:16:91:de:f2:31:8a:26:
2f:73:84:8e:ee:6c:df:47:44:2e:03:85:6f:f7:f2:
00:2b:91:c6:e9:c7:6a:86:d9:21:41:cd:98:66:4d:
27:1f:9a:b4:84:8b:a8:99:b0:9e:c7:2f:8b:32:a0:
1d:48:8f:49:aa:57:aa:fa:b1:c4:5e:a8:e5:67:71:
1f:8c:ea:2e:79:cd:4e:bf:72:da:ce:e8:b6:16:e1:
84:3a:5e:3d:10:45:0f:ae:88:e1:a5:08:71:04:10:
96:05:b4:14:55:ef:28:d1:a7:44:7e:14:a4:03:3f:
26:18:34:f8:98:4f:b3:37:f1:27:27:43:a7:4e:7b:
59:cd:4a:0e:5a:cf:e1:28:08:d4:5d:34:59:fc:05:
36:e6:e5:de:33:5b:4c:5e:53:15:22:d2:1a:c0:72:
df:91:11:d2:ea:2a:d0:0b:3c:60:45:87:24:4c:fd:
8b:2a:0a:a8:63:d7:f0:eb:20:94:61:97:21:11:c2:
34:5d:f4:22:b7:39:56:8a:8b:66:52:41:1e:a0:f2:
49:53:69:2f:32:1d:f3:4f:88:2d:e2:6c:4f:73:25:
46:dd:2d:bc:aa:67:4e:1b:24:57:b2:d6:8f:ed:9b:
59:50:d0:db:38:df:25:89:47:0f:12:cf:7d:36:dc:
cb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:85:9E:A5:DC:33:0A:68:88:57:01:33:EC:AF:32:65:ED:37:09:1C
X509v3 Authority Key Identifier:
keyid:1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/TYWepdwzCmiIVwEz7K8yZe03CRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.56.0/22
Signature Algorithm: sha256WithRSAEncryption
96:0a:da:2f:52:a0:9c:1e:f0:b2:48:35:bd:87:46:a9:dc:27:
c7:0e:31:6c:72:c0:8b:16:8e:df:56:d3:03:fe:5b:33:39:d0:
c6:3f:24:8c:2c:9d:96:2c:ba:a4:18:c6:f5:3d:84:cb:81:e2:
7d:7e:72:5c:fb:64:82:b7:ca:8a:5c:d4:61:ba:ee:d1:63:14:
c3:5e:cc:3e:11:4e:3b:43:1b:07:46:d5:88:fe:8d:69:74:52:
28:da:7e:5b:e2:50:0d:5b:56:98:5e:cb:02:4f:8e:89:be:69:
42:c6:44:40:8e:52:3c:57:9d:e9:e9:7e:49:59:ce:bc:4d:63:
5c:b3:00:7c:b2:69:95:8a:02:51:3c:d7:61:1f:e9:f7:08:3e:
8b:45:17:80:85:98:71:87:31:f4:c9:09:85:21:c2:4f:b1:0f:
a2:d3:81:b5:41:37:25:26:1c:7e:40:dc:96:a0:e8:cd:2c:03:
3b:36:30:24:17:1d:2d:53:ed:d6:d4:48:0d:9c:8e:b6:c5:97:
3f:a2:79:cd:43:56:65:63:23:3e:e8:2f:e8:0a:e4:bc:93:4b:
48:b0:1a:e9:91:38:cd:ce:0c:7f:ad:24:4f:1d:cd:90:7c:11:
b3:40:36:ae:6b:7f:2f:36:1c:0f:6d:31:39:9b:3c:3c:f3:47:
bf:8e:c1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:20 2025 by rpki-client