Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/EnX-rv-bRf-QEtTYTbof_ErMs_o.roa
File: EnX-rv-bRf-QEtTYTbof_ErMs_o.roa (raw, json)
Hash identifier: aWCOl4Dmc3Ow9nPXtlO/g4ybIiLTFeYur+RN0dvzeDU=
Subject key identifier: 12:75:FE:AE:FF:9B:45:FF:90:12:D4:D8:4D:BA:1F:FC:4A:CC:B3:FA
Certificate issuer: /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Certificate serial: 019345B415817517C9D3BB4D93E9040E8E0D
Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/EnX-rv-bRf-QEtTYTbof_ErMs_o.roa
Signing time: Tue 19 Nov 2024 18:34:10 +0000
ROA not before: Tue 19 Nov 2024 18:34:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205723
IP address blocks: 194.50.176.0/24 maxlen: 24
2a0a:4540::/48 maxlen: 48
2a0a:4540:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:45:b4:15:81:75:17:c9:d3:bb:4d:93:e9:04:0e:8e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Validity
Not Before: Nov 19 18:34:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1275feaeff9b45ff9012d4d84dba1ffc4accb3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ba:2a:52:52:f1:1b:62:a3:b6:d9:2b:56:f0:
95:da:66:e5:72:4e:d7:6a:03:bd:99:82:86:ab:0f:
2a:14:b3:1e:55:5d:86:30:68:10:6d:3c:67:c9:12:
87:68:8b:0b:ad:89:0f:4a:8f:b7:0d:fd:a5:39:75:
9a:a5:2f:93:6b:b5:66:fc:6f:c1:1d:32:67:70:65:
5c:2b:9f:43:ef:f0:12:80:09:b6:89:40:1b:94:42:
58:be:e5:98:38:86:d5:82:5a:a2:34:f7:33:df:ec:
76:a7:89:89:60:50:fc:a7:11:dc:8d:82:bd:4a:01:
0b:cc:96:59:69:c3:4c:ee:85:37:68:ed:4c:4c:91:
42:f4:92:4b:ba:f9:65:93:9d:ac:d1:6e:b2:3d:04:
da:fa:2b:e5:44:b0:ce:a0:37:6d:8b:5a:bb:26:52:
23:21:59:ce:1a:97:9d:c3:ab:56:f7:7a:f4:f8:d9:
f3:24:6f:d2:2f:5d:28:74:47:f1:b7:bf:01:2a:d1:
f9:26:58:a9:f1:5d:a2:e0:19:9c:1e:b2:90:25:02:
69:d8:a7:3e:09:a1:04:f1:3d:58:0c:f1:bc:8a:92:
c8:40:9b:8d:47:01:fb:08:56:da:6e:9e:8f:e7:d3:
d5:04:e8:55:d9:a3:df:4a:b7:e7:67:78:86:fc:5f:
1c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:75:FE:AE:FF:9B:45:FF:90:12:D4:D8:4D:BA:1F:FC:4A:CC:B3:FA
X509v3 Authority Key Identifier:
keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/EnX-rv-bRf-QEtTYTbof_ErMs_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.176.0/24
IPv6:
2a0a:4540::/48
2a0a:4540:2000::/48
Signature Algorithm: sha256WithRSAEncryption
74:7f:32:cd:e0:ad:98:0b:c6:05:87:1e:73:da:8c:a0:f2:0a:
f2:8e:95:fc:73:a0:08:32:33:9b:b6:4e:00:51:cc:ce:a5:2e:
98:de:4e:ba:ed:bc:0f:15:d1:f9:74:cf:90:ad:19:2c:d1:77:
d2:1c:b8:4c:10:12:3b:b7:d6:3a:10:4d:cb:c7:f0:89:79:14:
09:f6:ab:9f:f5:5a:e2:4d:e9:3a:ae:d0:1c:6d:a5:66:cf:20:
ac:5d:e8:f8:f5:6e:46:fe:0c:4c:57:b1:83:c3:4e:fc:6d:12:
e5:38:cb:4c:34:c6:23:11:d8:08:bc:12:90:ff:00:bc:79:19:
ac:a7:dc:1e:62:55:1f:51:a1:38:3d:af:a4:c5:77:37:a2:6c:
00:63:9f:53:f0:de:cb:00:eb:a1:d0:bd:f7:bb:e6:2b:4f:c4:
6c:71:57:10:a1:33:c1:92:37:a6:79:7e:65:25:1f:5e:9d:4c:
ac:60:b7:54:f9:6f:ee:6d:ec:42:c3:90:56:ab:21:8f:6b:87:
34:a4:91:b7:2d:eb:e8:4f:44:11:5c:46:e1:4d:40:ac:a9:90:
d7:a9:b4:5c:0f:e6:27:ac:2f:9d:2f:d9:2a:a8:ac:ec:31:6a:
13:ca:5e:5c:29:cd:1f:52:0c:7a:5d:c9:0c:7f:4f:84:86:e6:
bb:f3:fd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:45:18 2024 by rpki-client on console-fra.rpki-client.org