Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/g_XzhYK_F03VjR9bvWlU1jF-Z50.roa
File: g_XzhYK_F03VjR9bvWlU1jF-Z50.roa (raw, json)
Hash identifier: ncibWC7f4F7EAqAuohBbP1sHDmPsoPuD5J5qdDnZdOA=
Subject key identifier: 83:F5:F3:85:82:BF:17:4D:D5:8D:1F:5B:BD:69:54:D6:31:7E:67:9D
Certificate issuer: /CN=14c51262fe87f4e295ef9e7f87a1f9e49f57c300
Certificate serial: 0194266C316F4B255B79384D34CA0CFAEAB2
Authority key identifier: 14:C5:12:62:FE:87:F4:E2:95:EF:9E:7F:87:A1:F9:E4:9F:57:C3:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMUSYv6H9OKV755_h6H55J9XwwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/g_XzhYK_F03VjR9bvWlU1jF-Z50.roa
Signing time: Thu 02 Jan 2025 09:50:12 +0000
ROA not before: Thu 02 Jan 2025 09:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203906
IP address blocks: 185.50.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/FMUSYv6H9OKV755_h6H55J9XwwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/FMUSYv6H9OKV755_h6H55J9XwwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMUSYv6H9OKV755_h6H55J9XwwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:31:6f:4b:25:5b:79:38:4d:34:ca:0c:fa:ea:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c51262fe87f4e295ef9e7f87a1f9e49f57c300
Validity
Not Before: Jan 2 09:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83f5f38582bf174dd58d1f5bbd6954d6317e679d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:9c:2c:b0:32:25:bc:95:90:8a:9c:c9:c4:
b5:b7:c0:d3:b2:93:8c:b4:7b:42:d8:66:70:a7:ae:
7d:89:03:11:52:82:94:54:8d:54:a9:ec:b5:42:0d:
91:ff:0c:e1:be:3d:c6:b7:67:c0:22:c6:e4:1c:c1:
44:c0:46:1d:da:50:72:1f:f0:ed:b6:a0:67:7f:4e:
e7:69:a2:34:c9:c3:f4:7d:e3:bb:b0:0a:60:a1:57:
82:c8:51:99:f5:e1:1d:a2:73:82:06:f6:0b:0a:61:
12:2a:9a:d7:14:0c:45:b1:43:e6:fa:aa:67:fc:9a:
cd:26:d7:77:e5:54:68:53:c0:8d:51:54:89:63:74:
3d:d0:93:5d:d0:51:c0:7c:81:6e:0a:87:10:66:c2:
93:c9:1e:53:76:38:1c:a2:92:21:fd:00:2a:23:a7:
96:60:14:85:77:2e:da:c8:de:04:1d:95:ba:f3:a3:
d7:3d:78:74:3b:18:e8:ce:f2:3b:61:9f:91:9c:30:
0e:c5:47:42:58:b4:66:5a:a9:49:ea:db:b7:77:2a:
c9:3a:25:e6:ac:ec:97:8f:60:40:ad:1d:1b:7e:e7:
d5:d2:c1:1b:46:c5:76:fb:af:3b:c0:b9:47:70:68:
b9:1d:c3:ba:0e:95:dd:48:a1:2c:b8:fd:02:d0:0c:
fa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F5:F3:85:82:BF:17:4D:D5:8D:1F:5B:BD:69:54:D6:31:7E:67:9D
X509v3 Authority Key Identifier:
keyid:14:C5:12:62:FE:87:F4:E2:95:EF:9E:7F:87:A1:F9:E4:9F:57:C3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMUSYv6H9OKV755_h6H55J9XwwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/g_XzhYK_F03VjR9bvWlU1jF-Z50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/FMUSYv6H9OKV755_h6H55J9XwwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.99.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:1b:55:64:fe:01:7c:2d:da:05:d5:d7:66:ba:df:b5:4a:12:
20:f2:4f:cf:71:ef:f8:68:e5:55:a2:23:e4:aa:c4:33:48:c6:
97:b1:a0:3f:87:a4:de:f3:3e:d2:23:af:05:3f:5f:3e:b8:4a:
e0:d8:56:b6:83:b3:6e:57:9e:ec:80:b2:26:32:ab:3a:81:12:
e8:e3:90:bb:ed:85:c2:30:ae:4d:8c:b5:69:ba:f7:bd:63:f3:
31:be:d4:cb:f0:a0:03:dd:50:2a:17:30:01:4c:52:a9:ed:b5:
8a:88:50:d7:85:d1:aa:ed:f4:1b:4e:e7:cc:b5:a9:5f:57:91:
c1:06:93:93:83:ec:32:be:1e:a7:3c:03:7a:af:55:43:ad:de:
e8:c9:b9:83:04:c7:8c:35:2e:9b:ea:c1:54:5e:26:93:8c:73:
a7:23:67:51:24:f7:10:85:07:a0:32:6d:1e:d7:22:02:7e:fb:
63:ff:eb:d4:1a:4e:82:e8:91:24:5b:30:a3:10:b1:64:6e:64:
7e:ee:da:d9:7a:3d:62:f3:28:78:18:92:29:45:04:70:6c:50:
bc:a1:23:fc:00:f8:05:5b:9d:89:ec:97:9e:8a:e3:76:14:de:
29:6d:12:ca:50:d8:0b:73:d4:f0:e6:9b:8c:23:ac:fa:0d:29:
5b:f7:3e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:47 2025 by rpki-client