Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/F5OHoiTs9h--km0BC2H3q6JvdGw.roa
File: F5OHoiTs9h--km0BC2H3q6JvdGw.roa (raw, json)
Hash identifier: zBsrid19skdNCuL5AmKEaVkUpOBfZpsE4VVX/3/+lhU=
Subject key identifier: 17:93:87:A2:24:EC:F6:1F:BE:92:6D:01:0B:61:F7:AB:A2:6F:74:6C
Certificate issuer: /CN=286687fb64a77f0100baf23d4f341ece775950e5
Certificate serial: 01926D219C8EAF5B557DDF76209BB576143D
Authority key identifier: 28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/F5OHoiTs9h--km0BC2H3q6JvdGw.roa
Signing time: Tue 08 Oct 2024 17:16:11 +0000
ROA not before: Tue 08 Oct 2024 17:16:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60989
IP address blocks: 185.109.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6d:21:9c:8e:af:5b:55:7d:df:76:20:9b:b5:76:14:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=286687fb64a77f0100baf23d4f341ece775950e5
Validity
Not Before: Oct 8 17:16:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=179387a224ecf61fbe926d010b61f7aba26f746c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:85:13:65:a4:90:55:b9:60:8f:e0:e6:95:
a7:f5:73:aa:7a:38:82:43:46:01:4e:6d:16:1e:5f:
f2:6b:e0:e5:ae:94:1b:3b:c7:58:b4:b3:89:22:2e:
ec:30:92:63:83:a6:82:4b:e7:4d:e3:76:3d:47:67:
ce:60:e2:e1:ad:e1:39:f3:78:65:3c:05:ad:a1:cd:
e6:6b:ca:c6:be:1b:d2:0c:75:4e:df:04:30:da:2d:
23:e2:58:78:04:e6:2c:b9:b9:82:eb:2c:21:08:4c:
d3:b2:3c:bb:56:ff:3a:b8:70:ba:88:63:b5:af:0c:
76:8c:06:86:cb:af:89:11:63:6e:45:5b:33:06:83:
94:89:51:e4:c6:c6:dd:78:24:77:97:a9:5f:b8:e4:
93:76:1a:9c:dd:f8:f1:5c:a6:c7:9f:da:fe:5e:72:
ba:e9:cd:31:93:6a:0a:65:b7:a7:4b:21:1a:12:d0:
ff:15:5c:57:d8:2c:09:8a:a3:c9:ec:87:85:7f:fb:
f2:58:84:18:a0:f6:9e:6d:b7:0e:7b:49:ba:a1:c9:
9d:95:52:e3:d8:38:e1:1e:f6:af:da:02:c9:5f:af:
aa:1f:e1:ce:d4:df:0a:b5:d9:0e:7f:62:a8:b8:03:
12:fb:31:67:bf:33:20:93:4b:bc:af:4d:4f:32:2b:
f5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:93:87:A2:24:EC:F6:1F:BE:92:6D:01:0B:61:F7:AB:A2:6F:74:6C
X509v3 Authority Key Identifier:
keyid:28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/F5OHoiTs9h--km0BC2H3q6JvdGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.50.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:82:04:d6:80:4e:b4:82:ae:62:0d:d4:c6:a0:10:87:1b:bf:
42:64:08:a4:46:29:e6:f2:6c:ad:fc:1d:77:f8:fb:ca:fa:5f:
6b:3b:ec:e0:a2:81:9f:f3:8c:c5:6e:e3:6b:aa:76:a3:59:f7:
8d:4d:5d:16:0d:b7:0c:29:8e:a6:15:9b:81:6f:f2:69:6f:97:
6d:76:b6:6b:e0:2c:59:09:34:7e:35:64:14:85:43:df:5e:4f:
d3:74:0c:2a:f1:f7:fa:d4:c0:c6:af:4d:0f:81:da:d8:d2:5b:
e9:3a:bd:21:bf:79:1c:c3:0e:af:b0:0f:a4:4c:1a:94:93:93:
27:95:b4:0b:84:50:4b:72:4f:f7:ed:45:2c:c2:e6:2f:54:5b:
43:c2:66:d5:93:ea:c3:81:6c:5e:7c:78:b7:f2:37:7e:e9:5d:
ef:7f:25:78:81:c7:af:0e:6c:25:91:8f:84:d2:66:7e:d5:36:
e3:1b:99:7b:88:88:c6:9e:ae:1e:34:46:c9:c0:5a:55:02:4e:
45:71:38:5b:8b:dd:3b:72:4a:80:69:d1:a5:0b:9e:84:dd:ec:
7f:68:2c:4e:12:64:60:e5:10:35:13:a8:ad:c5:75:51:b8:e7:
62:ea:15:95:70:90:53:22:0e:d6:a8:94:f5:a0:e2:13:e7:75:
77:63:fe:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:11:06 2024 by rpki-client on console-ams.rpki-client.org