Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/20DHGD1zkNzVmCyzqfEGT_x1F1g.roa
File: 20DHGD1zkNzVmCyzqfEGT_x1F1g.roa (raw, json)
Hash identifier: ly4jv1RUD7dR98/dsgxQOYWdb7d3Lqa+cEybYhr33Ho=
Subject key identifier: DB:40:C7:18:3D:73:90:DC:D5:98:2C:B3:A9:F1:06:4F:FC:75:17:58
Certificate issuer: /CN=0072c08f74d2a842a71f23ab61499b52694fc7a5
Certificate serial: 018CC6B86B7271DDD2CC60CD5F14E3A2B70C
Authority key identifier: 00:72:C0:8F:74:D2:A8:42:A7:1F:23:AB:61:49:9B:52:69:4F:C7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/20DHGD1zkNzVmCyzqfEGT_x1F1g.roa
Signing time: Mon 01 Jan 2024 20:30:24 +0000
ROA not before: Mon 01 Jan 2024 20:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28717
IP address blocks: 194.50.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 04:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:6b:72:71:dd:d2:cc:60:cd:5f:14:e3:a2:b7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0072c08f74d2a842a71f23ab61499b52694fc7a5
Validity
Not Before: Jan 1 20:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db40c7183d7390dcd5982cb3a9f1064ffc751758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4c:18:ec:96:04:93:21:4c:0d:cb:c9:56:f2:
13:45:bc:80:fb:fc:9c:d4:8e:67:df:81:9c:05:d5:
f4:cd:37:2d:34:a9:10:b6:b7:f9:e9:1e:44:4f:d9:
fc:9e:be:b2:60:79:2d:9f:e4:3e:93:cc:33:46:9b:
a8:62:7c:4d:5b:68:80:3d:99:bc:92:31:52:09:1d:
23:c9:32:eb:b8:3a:b1:25:1d:f2:56:9a:87:93:8b:
75:80:c3:4e:d7:96:17:e9:db:cd:4b:59:cb:8d:d8:
9e:b0:ee:7f:67:25:af:c2:8f:33:96:1c:c5:b6:3e:
12:92:33:05:6a:65:74:88:3e:cd:31:2d:e7:69:20:
0d:b8:a4:74:9c:82:1a:61:5b:14:ca:6e:12:bd:31:
1c:3d:f9:25:11:40:37:9e:79:85:2b:c3:e7:c1:ff:
bc:1d:6a:b4:88:b9:33:94:50:30:4e:49:ab:f8:bd:
f3:00:e8:fa:0d:c3:71:e2:ed:d7:a9:d4:cd:2b:90:
82:14:2c:f6:d2:8e:15:c7:c5:93:d4:af:35:3f:a9:
c9:b8:07:75:d1:97:f7:fa:43:bd:34:cf:81:23:7e:
65:76:a5:6b:86:a3:2d:55:89:d7:79:6d:8f:9b:b2:
f3:9b:d8:09:e6:72:12:ad:f1:8f:03:91:e0:c9:16:
da:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:40:C7:18:3D:73:90:DC:D5:98:2C:B3:A9:F1:06:4F:FC:75:17:58
X509v3 Authority Key Identifier:
keyid:00:72:C0:8F:74:D2:A8:42:A7:1F:23:AB:61:49:9B:52:69:4F:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/20DHGD1zkNzVmCyzqfEGT_x1F1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.57.0/24
Signature Algorithm: sha256WithRSAEncryption
85:9b:51:4c:15:c0:03:fe:12:0c:75:27:81:13:e3:80:9c:f9:
a3:2d:30:06:0b:48:4a:7d:9b:4d:55:5b:df:bd:11:75:c0:ca:
ec:26:6e:19:2c:56:d1:45:60:35:73:33:d7:e1:22:ea:ff:d9:
e0:67:97:01:dc:9f:31:36:be:43:47:4f:45:b5:25:42:72:0b:
f5:e5:ff:49:cd:8e:20:6f:fc:b5:d8:0e:ed:74:98:eb:34:80:
08:35:b9:49:c7:b9:32:fa:5f:04:a3:cb:61:09:0f:d0:88:02:
31:d7:79:a8:46:8d:09:71:e7:71:46:3e:ef:3c:f9:e0:82:ca:
23:6e:f7:b2:05:cb:83:5a:90:0a:54:c9:6b:f5:f0:cd:45:77:
65:8c:3e:6d:11:7b:cb:3e:76:eb:d8:23:3d:77:a0:99:08:59:
ae:be:02:55:7e:9e:2b:8b:d9:cd:13:c2:01:74:fc:5c:33:11:
d7:dd:e8:f6:86:8d:a2:63:58:50:24:07:74:64:26:f6:e6:d5:
7d:e8:fc:1c:88:73:b6:6f:d0:da:99:61:10:4b:09:ae:79:f2:
2e:68:8a:7c:5b:48:53:00:1a:61:d3:f9:27:95:f5:cc:0f:80:
ee:3a:f0:d3:ff:9f:10:e5:f7:f4:ac:b1:b1:f5:f0:db:55:08:
25:c5:88:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 09:28:25 2024 by rpki-client on console-fra.rpki-client.org