Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/WSuQLa41G4HKHMbUtqLU9g_p5GU.roa
File: WSuQLa41G4HKHMbUtqLU9g_p5GU.roa (raw, json)
Hash identifier: svYWtcxAowGig19BvyuNpLnehdO6uD56FneI9l0YLO0=
Subject key identifier: 59:2B:90:2D:AE:35:1B:81:CA:1C:C6:D4:B6:A2:D4:F6:0F:E9:E4:65
Certificate issuer: /CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
Certificate serial: 018CC3B7063163A59D5A57E54E7C57577E73
Authority key identifier: 50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/WSuQLa41G4HKHMbUtqLU9g_p5GU.roa
Signing time: Mon 01 Jan 2024 06:30:00 +0000
ROA not before: Mon 01 Jan 2024 06:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25512
IP address blocks: 85.13.64.0/18 maxlen: 18
195.146.96.0/19 maxlen: 19
131.117.192.0/21 maxlen: 21
212.11.96.0/19 maxlen: 19
82.117.128.0/19 maxlen: 19
85.184.16.0/20 maxlen: 20
185.134.0.0/22 maxlen: 22
213.235.128.0/18 maxlen: 18
89.203.128.0/17 maxlen: 17
82.202.64.0/18 maxlen: 18
81.19.32.0/20 maxlen: 20
2001:1a48::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:06:31:63:a5:9d:5a:57:e5:4e:7c:57:57:7e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
Validity
Not Before: Jan 1 06:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=592b902dae351b81ca1cc6d4b6a2d4f60fe9e465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ef:c0:ce:be:56:1b:98:a5:3f:7d:00:78:4e:
53:b7:7a:d3:88:3e:f9:e5:e9:ce:b7:eb:99:a7:6b:
72:1b:46:2a:83:97:b2:f5:93:db:17:f4:a0:be:0d:
f4:88:fb:91:35:10:d5:a4:c5:ae:61:2e:d0:3c:19:
9a:9a:30:12:a8:4d:df:e1:ca:56:b5:f6:2b:48:c9:
73:1b:41:ea:d4:16:16:e6:1e:17:2d:09:79:e1:f7:
3c:06:ff:e5:66:f5:83:1c:57:8b:fc:1b:d0:55:e2:
41:1a:79:6d:a8:c5:bd:fe:b1:ba:bc:c6:10:cb:f5:
e1:24:ed:29:17:ed:65:b9:a4:ed:55:17:d0:61:29:
ba:45:66:fb:be:d4:be:46:11:57:88:cb:4d:1e:1e:
2f:61:33:1b:f8:de:00:2e:29:b4:07:e9:26:1a:d1:
ed:88:6f:7f:09:79:93:9b:d5:20:ce:0a:28:29:8f:
17:c6:8c:3a:89:72:9c:3d:a3:aa:e4:d9:7f:7c:85:
c8:05:88:89:11:2e:1d:d3:31:51:1b:8b:cd:a7:81:
5b:6c:96:c0:f0:cf:c7:98:af:4f:c3:d1:db:ee:b2:
a7:29:8f:ae:04:10:d2:52:2e:76:e2:34:c2:36:f4:
6f:4f:28:6a:68:67:97:7e:57:b1:8e:70:4c:f9:89:
fc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2B:90:2D:AE:35:1B:81:CA:1C:C6:D4:B6:A2:D4:F6:0F:E9:E4:65
X509v3 Authority Key Identifier:
keyid:50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/WSuQLa41G4HKHMbUtqLU9g_p5GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.32.0/20
82.117.128.0/19
82.202.64.0/18
85.13.64.0/18
85.184.16.0/20
89.203.128.0/17
131.117.192.0/21
185.134.0.0/22
195.146.96.0/19
212.11.96.0/19
213.235.128.0/18
IPv6:
2001:1a48::/32
Signature Algorithm: sha256WithRSAEncryption
39:ed:af:e0:cf:de:16:01:e4:47:05:7a:92:01:fb:e9:02:23:
3a:f7:98:e6:2f:b2:a1:d9:6f:f6:70:9f:49:6f:25:67:9e:33:
52:57:39:f9:d4:54:fb:f6:5a:26:d9:6d:5e:3f:b7:e1:44:60:
4e:59:e9:c1:a5:88:e4:d0:9e:89:2e:fe:ca:27:be:05:83:a1:
cf:f2:c3:db:81:7d:c9:9c:1f:45:14:7a:5f:40:3b:f9:1e:25:
46:45:7d:46:6a:29:d1:45:33:7e:a7:7c:79:fc:f5:2b:f0:bd:
40:34:92:59:15:f6:93:b5:f8:46:9b:de:7e:ef:ed:1e:58:97:
b4:a5:3f:ce:f7:fc:3b:f6:a4:ef:4c:6f:6e:f7:bb:04:4f:1c:
f5:d5:54:78:d6:45:e0:af:15:d3:f3:d0:a3:55:b7:f6:19:48:
70:7b:4c:a4:d8:d6:0d:be:88:13:cf:55:ed:52:84:67:d2:74:
36:cd:6d:43:2d:e5:3e:5f:df:8b:93:9b:35:e4:d0:9d:df:b5:
a7:d3:c4:46:e2:17:82:5b:f3:c1:ff:d5:48:9b:bb:90:fc:b9:
47:fa:0f:ea:07:d2:90:be:fb:75:ca:7e:05:6f:8c:67:82:2b:
74:88:db:25:69:3f:50:6a:49:c5:cc:05:da:1a:20:b8:32:48:
3d:e8:79:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 20:46:53 2024 by rpki-client on console-ams.rpki-client.org