Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/7bJuq7M2jj7LrpZwNmbwW08ywGs.roa
File: 7bJuq7M2jj7LrpZwNmbwW08ywGs.roa (raw, json)
Hash identifier: f5s84rUoSo9dcf3ZosfxwXcPl+NrbtyoljppKo2983k=
Subject key identifier: ED:B2:6E:AB:B3:36:8E:3E:CB:AE:96:70:36:66:F0:5B:4F:32:C0:6B
Certificate issuer: /CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4
Certificate serial: 018CC801EAF44690A8F567B560F380E26CB6
Authority key identifier: 50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/7bJuq7M2jj7LrpZwNmbwW08ywGs.roa
Signing time: Tue 02 Jan 2024 02:30:17 +0000
ROA not before: Tue 02 Jan 2024 02:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43311
IP address blocks: 185.83.189.0/24 maxlen: 24
185.83.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:ea:f4:46:90:a8:f5:67:b5:60:f3:80:e2:6c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4
Validity
Not Before: Jan 2 02:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edb26eabb3368e3ecbae96703666f05b4f32c06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c1:22:2d:73:21:79:16:f4:81:f0:6d:c6:fb:
cb:02:5a:17:0b:a3:db:58:26:9b:b1:62:d8:9b:9e:
76:32:a7:30:61:54:46:de:c6:a7:3a:0b:45:2a:9f:
db:91:be:70:c5:74:a0:68:0b:1b:8b:8d:56:00:5e:
7b:c7:a3:c6:e4:57:1a:5f:02:56:4c:14:f7:94:28:
e3:88:5a:68:39:d2:c9:16:e6:4f:fa:2d:6a:25:cf:
ed:32:52:44:7f:b7:a8:d7:2b:d3:c3:14:ad:07:21:
6c:09:63:23:f1:b0:47:b2:20:c1:3a:59:97:dd:4a:
1a:07:98:da:3f:b8:3e:95:54:10:16:92:95:ab:19:
f0:0c:18:65:85:83:49:38:0f:e2:ac:53:84:60:c9:
89:0a:82:7f:5c:d9:63:aa:f2:b6:cc:ff:5d:2e:e2:
9f:47:ea:c2:a6:5b:94:ec:70:92:ac:93:01:1c:35:
fb:7e:6e:f2:de:bb:93:6a:de:8b:78:fd:19:75:c8:
ce:9b:13:a2:e5:0c:62:7c:44:e4:ec:db:02:65:d5:
f0:ed:e6:0a:2d:e5:10:a8:14:b1:69:82:65:f2:71:
b5:cf:bc:e2:e3:3b:aa:a1:3e:06:5e:e1:e1:0a:f0:
ba:75:fd:d0:83:47:bd:62:3d:a9:bb:93:6d:1f:84:
8b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B2:6E:AB:B3:36:8E:3E:CB:AE:96:70:36:66:F0:5B:4F:32:C0:6B
X509v3 Authority Key Identifier:
keyid:50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/7bJuq7M2jj7LrpZwNmbwW08ywGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.189.0/24
185.83.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:f4:2b:51:db:07:2e:23:d8:2c:9a:49:46:6b:8f:45:1e:c0:
1c:19:da:cd:0c:f9:1c:54:64:5b:31:d6:9a:79:3c:e6:f2:f6:
97:e0:89:20:72:89:d9:45:f0:a2:37:67:0a:72:84:c7:62:25:
3f:e1:ba:f3:ef:32:9f:00:5d:7b:43:e0:f1:a1:27:6f:b0:cc:
a2:8a:d3:41:1d:ab:c2:35:48:bb:70:36:7c:e9:d9:60:a9:61:
e8:93:c6:eb:a1:38:65:5a:51:e4:69:27:83:b5:08:bf:24:ab:
1c:95:f3:6d:81:13:7e:61:ae:ea:00:c8:d6:c7:16:bd:55:cd:
63:89:42:4f:db:68:29:08:ed:a6:5e:5d:9e:71:d0:0c:41:4f:
9f:c3:07:18:91:e5:ed:41:2a:cf:15:ee:08:cb:c9:b0:a9:1b:
db:8c:77:a4:e3:c0:f3:60:48:77:99:1c:79:88:8c:e6:cd:1f:
db:da:23:39:83:20:84:4b:cb:25:b3:e9:21:7e:30:41:73:cb:
12:76:51:ae:1b:b8:f0:27:f7:4c:57:43:7f:30:65:6f:c5:24:
34:de:6c:3e:02:45:df:f4:3a:bd:b3:b6:a7:a0:b8:af:0b:93:
80:88:3e:a3:41:d3:a1:a3:f0:96:5d:fb:84:11:4a:75:42:7b:
f2:27:fc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:14:46 2024 by rpki-client on console-ams.rpki-client.org