Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/_Y1SmzZTKXgbUh3BAYatWrczVJQ.roa
File: _Y1SmzZTKXgbUh3BAYatWrczVJQ.roa (raw, json)
Hash identifier: qdiQbH0L2zTyJDNO5IIF5ovNp6/uahWYq2r22yIAeTw=
Subject key identifier: FD:8D:52:9B:36:53:29:78:1B:52:1D:C1:01:86:AD:5A:B7:33:54:94
Certificate issuer: /CN=0072c08f74d2a842a71f23ab61499b52694fc7a5
Certificate serial: 018CC6B86BAFBCAB6928F94A0A49894C1B64
Authority key identifier: 00:72:C0:8F:74:D2:A8:42:A7:1F:23:AB:61:49:9B:52:69:4F:C7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/_Y1SmzZTKXgbUh3BAYatWrczVJQ.roa
Signing time: Mon 01 Jan 2024 20:30:24 +0000
ROA not before: Mon 01 Jan 2024 20:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31027
IP address blocks: 194.50.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:6b:af:bc:ab:69:28:f9:4a:0a:49:89:4c:1b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0072c08f74d2a842a71f23ab61499b52694fc7a5
Validity
Not Before: Jan 1 20:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd8d529b365329781b521dc10186ad5ab7335494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:84:f6:34:cb:22:34:5e:bc:5c:0a:e9:a2:6b:
fd:d6:0f:9c:26:23:61:55:44:78:5e:d3:98:b7:4e:
5c:ff:7d:c2:ff:39:96:0a:1d:5f:15:bd:c6:ed:fc:
ff:c9:fe:b8:6c:2f:80:53:f0:d1:76:58:03:31:14:
ac:7c:bd:75:8a:00:be:11:8f:80:9d:1f:2d:49:1f:
f3:fb:15:2a:d9:3a:f8:b9:ee:ab:b0:9e:19:a1:ef:
eb:e8:fe:2d:74:6a:7e:57:aa:c4:66:0b:22:af:f3:
4e:95:3f:d5:98:cc:2a:f0:94:32:0a:d9:f7:85:13:
be:9d:71:22:9d:65:eb:d8:0f:46:ea:31:f8:49:7e:
e7:84:a0:bc:32:b6:a1:4d:2b:6d:80:1c:0a:ed:9f:
ba:54:90:c5:1b:b7:aa:30:1f:cf:88:37:06:4d:17:
86:fa:af:da:de:90:48:76:4c:40:bb:2e:39:74:d6:
ca:e6:42:c3:3f:0e:2d:13:04:cd:f5:05:53:f9:7a:
b3:a7:2a:f0:50:e6:b1:37:50:67:1a:75:35:c9:e2:
f5:d0:2f:13:8d:ce:93:30:cf:cd:23:4a:91:e2:36:
85:47:ac:33:94:84:81:94:eb:ca:11:82:e0:a2:f7:
ea:a4:f4:0a:bf:e6:ec:5a:be:a3:92:7b:3c:4a:3d:
72:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8D:52:9B:36:53:29:78:1B:52:1D:C1:01:86:AD:5A:B7:33:54:94
X509v3 Authority Key Identifier:
keyid:00:72:C0:8F:74:D2:A8:42:A7:1F:23:AB:61:49:9B:52:69:4F:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/_Y1SmzZTKXgbUh3BAYatWrczVJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.57.0/24
Signature Algorithm: sha256WithRSAEncryption
34:a3:b6:af:13:c3:65:c7:e5:47:5e:94:51:36:99:e5:1a:d8:
52:ff:8c:a8:ac:c2:0e:9b:45:0f:b0:25:6b:ed:d4:66:86:e8:
73:07:a1:6a:fe:33:8e:68:e3:5c:26:cb:47:2d:42:a1:9a:1d:
8e:1e:fb:6e:fe:63:3e:8d:bb:e7:5f:cb:10:cf:fa:83:f9:88:
1c:fe:08:07:3d:2d:c8:cb:20:90:e1:5e:fe:e2:ec:bf:b2:57:
da:eb:57:7b:86:0b:bc:12:1a:a2:e8:e5:f0:16:f9:23:2a:e7:
af:d6:90:4d:31:8e:dc:72:67:73:5f:8e:b1:8a:68:6a:de:f9:
e8:82:bf:95:c4:2e:4e:04:a5:dc:18:0b:e9:e8:9b:49:7d:2d:
c5:8f:79:72:05:10:08:0a:ff:dc:e1:1a:b9:3a:81:54:5c:03:
d0:08:f0:52:a0:b7:ef:fd:02:d3:8b:d1:bf:63:c8:b9:e0:c9:
b8:49:ef:4b:c8:8d:ca:2f:bd:e7:61:08:78:44:52:82:51:f0:
7b:ae:76:b4:c2:f2:7d:a5:4f:67:44:6e:8f:52:5c:bf:84:ad:
5b:1c:8f:41:b6:b4:f6:d3:c3:c9:fd:2e:69:54:4c:e5:96:42:
8a:3b:52:a3:63:2d:88:d8:e8:bd:92:0d:fc:b7:9a:f9:9e:ec:
f4:df:ca:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:35:09 2024 by rpki-client on console-ams.rpki-client.org