Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/IKg6YqfCY7Q37FX52uqgoAwu48w.roa
File: IKg6YqfCY7Q37FX52uqgoAwu48w.roa (raw, json)
Hash identifier: TRmYXUGYr8w2hnnrnKJZxNEQYYsh+a1lau3hVK4jBUs=
Subject key identifier: 20:A8:3A:62:A7:C2:63:B4:37:EC:55:F9:DA:EA:A0:A0:0C:2E:E3:CC
Certificate issuer: /CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Certificate serial: 01902564162D311EBC89485A05DA5031FC75
Authority key identifier: 43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/IKg6YqfCY7Q37FX52uqgoAwu48w.roa
Signing time: Mon 17 Jun 2024 08:50:34 +0000
ROA not before: Mon 17 Jun 2024 08:50:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201876
IP address blocks: 185.50.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 17:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:25:64:16:2d:31:1e:bc:89:48:5a:05:da:50:31:fc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Validity
Not Before: Jun 17 08:50:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20a83a62a7c263b437ec55f9daeaa0a00c2ee3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:af:40:a0:6b:4b:be:3e:d2:90:50:b0:29:
9f:72:3a:01:9d:99:a9:8e:f7:bc:96:1c:72:32:ca:
4f:a7:f2:26:f0:cd:9c:30:db:da:63:64:4e:f1:93:
42:a6:78:af:37:95:a7:93:9f:b7:10:77:e2:4b:c4:
67:42:01:26:81:06:54:22:e4:43:4a:65:20:22:7f:
21:61:7c:06:19:08:ca:2e:36:e6:cc:b2:3b:0a:b6:
10:1f:4a:d4:5a:4c:c2:3f:9c:5e:d5:f1:38:0f:74:
f8:9a:66:ae:26:5d:75:0d:29:ac:b1:53:96:e5:aa:
1a:f9:59:50:47:37:de:5b:54:6a:27:c6:13:fd:cf:
f0:e7:08:82:ac:8d:4f:0a:35:d8:39:61:19:84:d7:
d3:b1:e3:c2:f6:cf:99:19:54:06:84:e0:bb:a8:5c:
42:67:eb:be:d4:03:f4:1c:ec:4e:f8:b2:9a:b5:7a:
d8:f4:fe:10:db:3a:d8:a0:6b:86:9b:9f:42:ae:1b:
e4:85:cc:d5:96:57:17:81:36:2f:28:0b:25:ce:e8:
b6:df:77:52:4d:81:98:36:8d:cc:be:fe:76:e1:4c:
ed:d4:b1:cc:76:13:94:6d:44:84:cc:31:57:f0:ec:
93:0b:41:a0:1a:a0:c4:cb:3b:33:a2:d7:d9:c9:48:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A8:3A:62:A7:C2:63:B4:37:EC:55:F9:DA:EA:A0:A0:0C:2E:E3:CC
X509v3 Authority Key Identifier:
keyid:43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/IKg6YqfCY7Q37FX52uqgoAwu48w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.112.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:e7:c3:e9:01:12:dd:e7:2b:ca:cc:9f:8e:cd:98:c6:7c:6d:
56:9b:31:a2:64:25:f3:fb:44:99:dc:a5:e6:ea:ad:bf:25:ea:
d1:ad:ec:a4:cb:6f:3d:78:15:80:1f:38:d8:c4:86:73:89:6e:
9a:b9:b1:4a:ea:d6:f6:64:f7:21:7d:99:a3:a3:31:b1:c3:21:
68:5a:35:b6:cd:cb:ff:f4:dc:07:67:03:27:54:d3:16:75:76:
a2:ba:39:37:cc:d4:29:7b:69:07:bb:9d:38:38:e0:da:6f:79:
17:e6:de:a8:e8:28:ae:6d:ce:38:8e:fa:d4:39:5c:75:94:d7:
da:61:31:21:71:ee:68:e7:7c:62:c6:97:6c:96:bb:d0:d4:c6:
f5:8b:3d:f3:11:b7:24:fb:24:9a:6c:74:d8:f7:87:20:66:05:
1f:00:e0:d6:fb:06:6e:79:ff:c5:55:9c:0b:c0:18:21:9a:2c:
c1:70:eb:2e:40:d3:8a:07:1a:ca:00:a3:bb:2e:f9:92:d4:50:
d2:3b:93:cf:4c:38:7b:90:3f:44:8a:d4:93:00:69:8c:87:1c:
bb:15:ec:d7:8b:71:65:1b:96:2b:de:d1:ae:e4:f9:5c:6a:05:
e1:31:31:20:a4:55:7e:1c:cb:d2:03:2c:84:94:09:f0:24:e8:
da:88:bc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:24:27 2024 by rpki-client on console-ams.rpki-client.org