Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/bHR6b4evhO__JUjG3FDCaYceqrE.roa
File: bHR6b4evhO__JUjG3FDCaYceqrE.roa (raw, json)
Hash identifier: 9N3aYLE7Aqo8g3yYqjBnBnCYJvHUMdLYBKFaHRSnlaE=
Subject key identifier: 6C:74:7A:6F:87:AF:84:EF:FF:25:48:C6:DC:50:C2:69:87:1E:AA:B1
Certificate issuer: /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Certificate serial: 019344A16C11B1E6314A414EF4127DC3AA2A
Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/bHR6b4evhO__JUjG3FDCaYceqrE.roa
Signing time: Tue 19 Nov 2024 13:34:09 +0000
ROA not before: Tue 19 Nov 2024 13:34:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213396
IP address blocks: 194.50.176.0/24 maxlen: 24
2a0a:4540::/48 maxlen: 48
2a0a:4540:3000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:44:a1:6c:11:b1:e6:31:4a:41:4e:f4:12:7d:c3:aa:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Validity
Not Before: Nov 19 13:34:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c747a6f87af84efff2548c6dc50c269871eaab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:87:bf:cf:7a:8f:05:50:d3:cc:47:f1:ec:
84:6f:2d:ac:ff:e1:29:bc:f6:b9:fb:11:21:0c:cc:
40:62:cc:24:a3:76:d9:08:ab:0a:73:6f:2c:9c:2a:
34:87:b8:90:81:d8:cb:2b:6d:d8:e9:ed:ed:f5:a6:
29:ca:79:7c:c3:f9:80:71:c8:ef:75:88:b4:09:2d:
9b:db:28:01:87:ff:6d:49:ce:46:02:f8:58:ed:5b:
6e:c4:57:e8:63:76:4e:9a:b6:1e:0d:4c:2a:7a:33:
eb:76:59:97:f7:49:53:50:63:7f:bc:60:be:81:08:
ac:58:80:a0:b2:a0:c8:7f:ac:8c:00:a1:25:d5:c1:
1b:de:60:f8:7e:6f:c4:3a:fe:a8:4e:60:01:f0:20:
4a:cb:a0:df:f8:98:bc:dd:9b:9b:c1:be:91:99:26:
ce:35:9f:7a:77:7c:62:2d:2a:93:e5:f0:70:e0:15:
ee:d1:7a:92:f0:e2:cc:1a:1e:b6:a4:dc:42:66:a7:
6a:a0:ef:a3:bc:eb:29:4f:7a:f2:0d:b4:12:1a:ce:
76:71:06:23:c7:58:7b:45:40:5e:6e:3e:ec:07:1c:
8e:b8:b1:02:2c:76:bf:4f:06:d8:d8:6b:e0:96:be:
09:ae:e2:68:b8:3e:ce:d4:2a:fa:4f:34:8a:4a:9a:
7f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:74:7A:6F:87:AF:84:EF:FF:25:48:C6:DC:50:C2:69:87:1E:AA:B1
X509v3 Authority Key Identifier:
keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/bHR6b4evhO__JUjG3FDCaYceqrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.176.0/24
IPv6:
2a0a:4540::/48
2a0a:4540:3000::/48
Signature Algorithm: sha256WithRSAEncryption
2b:90:e7:3f:28:b2:47:31:fb:b7:fe:9b:45:e8:0b:05:f3:95:
4a:9e:00:3c:86:56:c7:b7:fc:01:37:6b:d6:ee:a1:80:f6:51:
e5:04:42:ff:9f:b4:7a:56:93:d9:cc:58:a2:30:f0:e1:c5:b0:
ad:93:b4:07:c6:69:22:7c:c4:b7:fd:f3:76:f6:72:15:9f:79:
e6:26:71:f0:d2:a8:27:ba:40:99:13:4b:f6:96:7a:e3:9e:72:
91:72:99:77:33:2f:43:bc:ae:4d:64:9f:b7:ee:1f:2c:d2:a7:
e6:9b:0c:8c:af:d5:1a:60:f1:33:bf:0b:b6:51:9c:83:00:5c:
0b:e6:7a:b8:47:db:7c:ba:50:7a:e1:f7:74:2b:ae:47:80:57:
db:8e:8c:93:ff:15:23:c4:55:ef:a4:0c:49:d1:39:d5:3d:ac:
1d:71:15:19:5c:bb:a7:e0:36:81:5a:ba:11:81:f1:0e:66:06:
57:e7:50:8d:b8:ea:c2:5b:86:58:ba:ee:9b:26:42:fd:33:bb:
3a:b7:8a:fa:fb:f1:87:e2:66:e4:98:7d:5b:96:57:da:c8:7e:
69:80:28:46:70:6c:9f:57:2b:bb:5a:ec:68:e0:53:5c:c9:31:
ee:0b:a5:51:aa:7c:17:b6:38:ef:89:b6:d3:4d:bf:a2:44:b9:
5c:6d:98:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:45:18 2024 by rpki-client on console-fra.rpki-client.org