Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/jQ2cflyxNzZYOKWPuJgcSlfsh-E.roa
File: jQ2cflyxNzZYOKWPuJgcSlfsh-E.roa (raw, json)
Hash identifier: 2BOQ89HVUiTwWZ6ByC5mpeMZAHzL/V4U2T1buEzTe58=
Subject key identifier: 8D:0D:9C:7E:5C:B1:37:36:58:38:A5:8F:B8:98:1C:4A:57:EC:87:E1
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 018CC64B543A5989199831381F32F9D58AAE
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/jQ2cflyxNzZYOKWPuJgcSlfsh-E.roa
Signing time: Mon 01 Jan 2024 18:31:14 +0000
ROA not before: Mon 01 Jan 2024 18:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50020
IP address blocks: 185.201.36.0/22 maxlen: 22
46.16.192.0/21 maxlen: 21
193.104.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:54:3a:59:89:19:98:31:38:1f:32:f9:d5:8a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Jan 1 18:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d0d9c7e5cb137365838a58fb8981c4a57ec87e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f2:c8:55:b5:1b:4c:41:58:a3:47:b0:ab:74:
45:82:97:07:a8:fd:8b:74:00:6c:40:da:71:58:98:
f2:7a:2e:0e:ec:00:ce:2c:d4:2a:c6:b2:98:06:eb:
15:42:43:ac:84:31:63:df:7d:dd:b8:d6:60:44:29:
20:69:3c:ff:03:10:50:7d:28:b5:9c:ac:8a:43:b6:
17:6e:5e:87:b8:9b:3a:2b:90:53:43:1b:1b:38:2b:
84:e4:58:2b:73:ed:0a:22:c6:70:e6:db:ce:cf:82:
cb:08:84:2d:4c:83:9b:10:53:f2:42:72:7c:13:70:
e1:4e:29:86:07:53:14:4b:22:39:c5:69:9a:fc:16:
d6:fc:4f:33:aa:a4:5f:72:b2:8f:76:fa:d7:03:c2:
f7:02:5f:3e:f3:9e:4e:c4:19:82:fc:45:7b:1d:c6:
c1:ab:ff:26:75:e3:98:c5:f9:0f:2a:3f:09:d7:c9:
25:5e:76:f8:c5:62:07:5c:07:6f:73:19:bb:c1:86:
30:dc:46:43:d7:57:52:76:24:52:0b:08:1a:81:3e:
35:e6:b9:59:14:8d:9c:f9:df:c6:f1:5a:26:d2:b9:
f1:b4:2a:0e:3e:95:22:c8:51:4f:ed:3d:02:fc:60:
45:a4:3b:24:cd:50:f3:61:db:6f:36:bc:3b:8b:23:
46:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0D:9C:7E:5C:B1:37:36:58:38:A5:8F:B8:98:1C:4A:57:EC:87:E1
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/jQ2cflyxNzZYOKWPuJgcSlfsh-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.192.0/21
185.201.36.0/22
193.104.79.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:4a:b5:72:dc:86:cf:50:45:a9:5c:27:16:57:e1:a2:1c:e0:
1e:df:7e:d0:da:ef:b7:66:65:d3:f0:b1:8b:32:71:ab:69:c3:
35:88:ec:c3:eb:09:16:f9:7c:cf:22:2a:8f:8f:a5:a3:9d:f3:
10:4f:6b:7c:0b:df:6c:5c:d0:7f:f4:02:6d:d6:1c:4d:d4:ef:
72:03:72:b7:9e:83:af:5b:e6:58:a2:72:04:23:e4:31:a0:9e:
05:1e:65:77:e4:31:d8:e8:3e:ef:50:d1:de:87:da:3d:1c:cf:
60:42:04:aa:55:ff:05:21:c5:dc:68:df:8f:64:98:c0:eb:f9:
4c:64:04:60:c2:ef:81:07:e4:64:6e:41:b2:1c:53:4a:5c:1e:
10:91:63:b2:44:fb:cd:e3:7a:42:2f:d6:42:30:9f:67:3b:cb:
89:bc:19:0e:cc:6a:d7:5e:47:7b:fa:d7:e7:98:b4:bd:a4:ee:
7c:93:1a:9a:f7:0b:b6:92:80:b7:a8:50:14:21:d7:de:9f:c7:
f7:2f:0b:27:45:a0:16:c4:37:d6:1a:3e:3c:20:66:28:aa:ea:
33:1f:5e:7b:0f:1d:f0:e7:89:8f:46:87:89:45:87:de:38:95:
73:c4:5e:7c:55:1c:cd:5b:99:61:08:5f:e5:4c:48:b2:ab:f4:
6a:c2:c1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:45:41 2024 by rpki-client on console-fra.rpki-client.org