Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/KmE1jxm2YiitYrCpe6jAxFfBuOw.roa
File: KmE1jxm2YiitYrCpe6jAxFfBuOw.roa (raw, json)
Hash identifier: Y5XejpRzQCLjEanYxIMYNqtFsJbZicUnLyroeJp0m5o=
Subject key identifier: 2A:61:35:8F:19:B6:62:28:AD:62:B0:A9:7B:A8:C0:C4:57:C1:B8:EC
Certificate issuer: /CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Certificate serial: 018CC64A876C1ED90FF8A30F30FE9635BB9A
Authority key identifier: 50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/KmE1jxm2YiitYrCpe6jAxFfBuOw.roa
Signing time: Mon 01 Jan 2024 18:30:22 +0000
ROA not before: Mon 01 Jan 2024 18:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208785
IP address blocks: 152.89.119.0/24 maxlen: 32
152.89.116.0/24 maxlen: 24
152.89.118.0/24 maxlen: 32
152.89.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:87:6c:1e:d9:0f:f8:a3:0f:30:fe:96:35:bb:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Validity
Not Before: Jan 1 18:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a61358f19b66228ad62b0a97ba8c0c457c1b8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:81:b8:96:88:49:05:a9:1e:57:58:bf:4b:8b:
9e:d2:d0:36:39:32:29:2b:ab:58:97:7e:36:5f:11:
f3:d8:95:dc:fb:4e:a1:4c:37:00:5e:09:64:98:3e:
5d:c8:e5:57:7a:1b:79:5a:5c:2c:bc:97:97:d5:f5:
23:d6:59:63:96:55:96:b1:17:0c:92:be:f3:59:6b:
6d:93:64:7a:d9:87:4c:a9:42:eb:31:7c:c5:b6:b7:
88:6c:36:e7:0f:bf:13:e3:71:77:9d:05:e8:df:0d:
8c:41:a5:94:bb:d9:fd:75:af:81:99:65:2d:6a:d8:
c7:57:7b:06:54:cd:76:04:0e:2b:25:33:ed:30:0a:
0c:19:9d:b2:42:82:2f:bd:6b:d5:70:65:ec:11:34:
41:7a:b8:63:05:12:74:36:06:6b:03:7d:92:8e:31:
0e:e3:5f:6e:f3:8b:e1:20:d8:2c:80:b1:63:c3:31:
c9:b6:10:62:82:9a:a4:ff:95:6f:d6:ed:b0:c7:a5:
e7:12:60:c1:f2:be:a7:6b:7b:5c:6b:38:9c:9a:a3:
d9:2b:02:97:e0:fd:e3:9d:51:95:67:37:b1:cf:0a:
1b:ae:c3:73:b1:31:70:17:69:42:52:c7:c1:b6:d3:
12:e5:5a:61:fb:14:e6:7b:cd:72:15:7b:1a:6e:22:
4c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:61:35:8F:19:B6:62:28:AD:62:B0:A9:7B:A8:C0:C4:57:C1:B8:EC
X509v3 Authority Key Identifier:
keyid:50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/KmE1jxm2YiitYrCpe6jAxFfBuOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.116.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:e7:9b:06:0f:bc:58:fb:e7:8d:52:be:b7:35:f2:2a:1c:eb:
b9:40:50:15:d0:fd:d8:d6:b8:23:fc:bb:01:7f:9a:57:97:57:
d9:1f:76:85:3e:e5:1b:18:cc:87:24:7e:16:b6:0b:07:e1:19:
3d:98:e7:7d:af:fb:9c:ad:42:39:b0:92:62:9f:f4:c3:fb:51:
16:3e:c0:63:ad:2f:6c:49:10:84:d3:ce:65:8e:da:c1:b5:2a:
9d:47:18:46:fc:5b:44:45:76:54:2e:3b:29:82:d4:9f:c5:b2:
b6:9f:cc:c3:97:64:e5:a1:7f:ca:ad:31:79:6a:d0:59:ae:11:
2c:62:a1:aa:95:97:bf:3c:7e:67:02:f3:1e:07:8e:a5:94:a4:
d5:46:fe:25:ae:7c:2b:59:42:1e:df:13:b6:9f:28:e0:43:85:
d7:77:b2:d2:e5:ad:7f:f1:6b:4a:27:8e:99:cb:59:de:77:4d:
f4:05:05:22:fa:1d:30:59:6c:f9:86:30:7e:df:ac:28:1d:4a:
b8:bb:22:78:56:66:dc:35:7b:1b:91:3d:c3:52:7a:fd:bc:a0:
aa:7d:a5:e4:d6:4c:fa:ff:d7:05:6c:61:cd:c8:cc:9f:bd:24:
f2:e4:51:a8:a1:a5:70:ea:db:04:6e:00:98:61:f1:12:e6:f1:
91:7d:71:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:18:07 2024 by rpki-client on console-fra.rpki-client.org