Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/pPS221J6LzP-znsXgVs0-RHaBPc.roa
File: pPS221J6LzP-znsXgVs0-RHaBPc.roa (raw, json)
Hash identifier: z1XLdVSfEMQs0I3Qw2+erv7VV+HCB5I8ERC+Qc7g8qU=
Subject key identifier: A4:F4:B6:DB:52:7A:2F:33:FE:CE:7B:17:81:5B:34:F9:11:DA:04:F7
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB407739FCD653BEF1281F79C8EF9D
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/pPS221J6LzP-znsXgVs0-RHaBPc.roa
Signing time: Mon 01 Jan 2024 02:29:57 +0000
ROA not before: Mon 01 Jan 2024 02:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400377
IP address blocks: 194.50.201.0/24 maxlen: 24
194.50.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:40:77:39:fc:d6:53:be:f1:28:1f:79:c8:ef:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4f4b6db527a2f33fece7b17815b34f911da04f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1a:b6:a7:9b:79:f6:8f:f5:a3:cf:43:38:59:
0a:f9:00:c7:75:7b:f5:8d:e8:44:45:84:c0:9d:9b:
77:af:89:fe:ce:83:f9:a8:c2:e9:6c:ce:b2:c1:69:
ca:28:2b:a5:02:43:8f:06:37:5b:0d:83:16:55:64:
ba:ec:53:29:1f:6e:12:78:18:c8:3c:d1:62:8b:14:
17:0e:64:f9:41:06:a2:ff:ab:b8:dd:48:fe:61:12:
44:08:b3:c5:af:76:4e:88:d3:9f:00:21:2c:36:d6:
ed:e4:d5:d1:a0:6a:43:71:df:03:10:af:95:bb:74:
e4:58:a0:45:19:7f:3c:d6:18:c3:b5:12:84:24:69:
fa:94:f5:4e:b1:29:4f:91:5c:ee:be:f5:c8:3e:5e:
16:74:04:a0:04:b8:ee:6e:25:09:27:fe:aa:bf:e4:
e9:a1:3c:9b:d9:81:fd:f0:f0:95:b8:64:97:11:26:
b3:47:2c:66:27:a2:5f:41:18:70:5c:93:12:7c:ce:
e2:6d:30:91:78:4c:95:2f:11:a5:66:db:6a:ea:05:
84:54:3a:0a:66:25:08:9b:1d:b9:9e:49:93:93:81:
b8:e2:d0:ef:bd:ae:83:af:54:0d:c0:2b:d9:66:fa:
d6:92:c9:49:df:3c:5f:0c:55:44:4c:83:c7:ee:88:
28:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F4:B6:DB:52:7A:2F:33:FE:CE:7B:17:81:5B:34:F9:11:DA:04:F7
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/pPS221J6LzP-znsXgVs0-RHaBPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.200.0/23
Signature Algorithm: sha256WithRSAEncryption
01:3a:71:b4:7f:07:90:c6:4c:c4:42:90:a2:5e:07:4e:b4:db:
28:e4:7d:89:56:f1:2c:49:aa:7f:c2:0c:13:c2:b4:6c:3c:d8:
a2:0a:d3:8f:ab:70:b4:96:dc:56:05:26:e1:89:1f:86:f2:2b:
c3:d4:8c:2a:e2:09:93:59:15:a9:a1:f3:ed:e6:7f:da:31:7f:
24:0a:9e:e2:22:d8:9c:16:ab:70:21:4f:5c:e1:f4:fb:f0:50:
90:e5:3b:fe:6a:99:08:6f:cf:28:16:32:5a:53:bc:61:03:46:
a1:30:a0:aa:72:59:66:1c:3a:5a:b0:79:ed:19:b7:47:09:64:
9e:bf:6a:f6:3e:a4:fb:bb:4a:3d:f0:cd:81:d4:e0:36:19:9e:
1c:39:5a:cf:d2:1c:36:ea:43:87:01:44:fe:33:78:76:11:8b:
2d:01:d4:69:68:e3:cc:ab:5f:53:2c:61:09:00:51:41:9c:00:
f5:43:dc:83:69:e5:68:76:70:fa:f8:4d:39:93:c0:3e:9a:31:
6d:f6:d5:9b:83:b1:bf:c3:51:b5:c5:60:48:b0:af:76:1f:1a:
d2:b6:da:02:5b:d5:8f:56:34:0e:e9:1f:de:46:b8:95:c3:9f:
f6:aa:cc:44:be:de:8b:0f:60:35:cf:dc:21:54:e6:47:13:61:
b7:94:54:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:48:57 2024 by rpki-client on console-ams.rpki-client.org