Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/RdqcYjODfYM7V8Q--FEk66bBTA4.roa
File: RdqcYjODfYM7V8Q--FEk66bBTA4.roa (raw, json)
Hash identifier: 34a1LmZ9j4tjjmU2MPQBXO8K7n8vQWVhUsdOFYpRUxQ=
Subject key identifier: 45:DA:9C:62:33:83:7D:83:3B:57:C4:3E:F8:51:24:EB:A6:C1:4C:0E
Certificate issuer: /CN=50399d4435bb85fae910abe38e68533204dfd60b
Certificate serial: 018CC4251C3B596DF547E37C36B976075246
Authority key identifier: 50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/RdqcYjODfYM7V8Q--FEk66bBTA4.roa
Signing time: Mon 01 Jan 2024 08:30:15 +0000
ROA not before: Mon 01 Jan 2024 08:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44071
IP address blocks: 185.167.190.0/24 maxlen: 24
185.167.189.0/24 maxlen: 24
185.167.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:1c:3b:59:6d:f5:47:e3:7c:36:b9:76:07:52:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50399d4435bb85fae910abe38e68533204dfd60b
Validity
Not Before: Jan 1 08:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45da9c6233837d833b57c43ef85124eba6c14c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:a5:43:ef:7e:f2:6b:1a:04:f5:d6:9b:f1:
a1:b8:1b:02:d1:49:1e:45:e8:32:68:67:3c:18:1b:
0d:b8:cd:f5:25:ff:97:94:a6:00:33:a7:5d:95:96:
2d:ba:45:de:14:2b:58:df:92:88:ac:3c:64:cf:76:
ca:83:28:b1:82:59:38:84:da:80:6c:87:94:c4:0c:
0e:bb:12:01:a9:9c:b6:85:f5:66:6a:54:c5:67:ee:
bb:d1:bc:eb:48:09:ce:32:ee:2d:23:3c:d1:e5:c8:
ab:23:a4:f0:9f:39:82:40:2d:55:74:48:a7:56:c6:
2b:13:d2:28:8d:e3:ca:43:8c:4e:1a:60:68:2d:43:
f1:c7:d1:70:06:ca:13:6d:35:0f:50:c7:7f:1f:db:
31:0e:91:63:9c:5d:8e:ac:5c:0c:5a:b2:9f:b8:a3:
e5:6e:d9:07:0d:e9:0b:66:38:b6:3e:19:cc:89:a6:
0f:68:39:41:b9:58:10:a8:a3:fb:67:55:50:76:37:
c8:71:7f:1a:19:a6:a0:33:27:72:64:3c:88:d0:92:
f2:f5:84:4e:07:66:f2:2e:b6:46:ae:82:45:99:f9:
7d:99:82:8f:81:12:a4:59:7d:f6:66:85:5b:f6:5a:
59:65:73:28:04:d3:e5:c6:13:62:e7:e6:0f:dc:5f:
5e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DA:9C:62:33:83:7D:83:3B:57:C4:3E:F8:51:24:EB:A6:C1:4C:0E
X509v3 Authority Key Identifier:
keyid:50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/RdqcYjODfYM7V8Q--FEk66bBTA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.188.0-185.167.190.255
Signature Algorithm: sha256WithRSAEncryption
01:13:ff:1f:c8:f1:44:17:ed:19:5d:f2:19:9a:31:dd:bd:93:
2f:12:f5:51:a7:5a:17:aa:2a:4a:36:d6:a3:73:4d:09:56:8d:
6e:43:43:f3:08:bf:46:01:73:1a:a2:92:2f:2e:38:18:5d:f1:
47:be:30:3c:66:83:ae:9a:c1:d8:dc:7b:be:f0:2e:39:21:68:
73:4e:33:d4:69:e9:cf:47:1b:d0:8f:0a:7a:ce:c0:7d:c2:84:
84:f6:af:96:12:e1:aa:e9:ff:7c:7f:d3:75:e9:3b:50:eb:9c:
3b:62:5d:fe:27:7f:a4:0f:e6:68:5c:e0:76:e5:26:49:a1:57:
93:1d:3f:35:7d:b0:2e:9e:aa:3e:c4:73:07:d2:a6:60:f7:10:
8d:df:91:cd:ed:d5:e3:e9:38:02:de:bf:f4:8e:f5:27:12:0e:
ef:ac:ae:8d:f5:2a:a2:a7:6a:9d:0b:b3:1e:92:e0:67:0f:83:
a7:0d:07:0e:76:b6:90:42:ce:f3:e8:0a:44:f1:c3:6a:c2:14:
81:b3:bd:21:5d:24:52:b1:0c:24:3b:13:ee:f9:99:4e:d1:9d:
55:3e:5f:3c:8b:51:60:7f:e8:b6:32:18:3a:2a:bc:78:09:27:
e8:6a:d4:00:a9:b4:4b:b6:fe:3f:0f:57:f9:e4:27:01:35:e3:
f1:0a:f8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:51:51 2024 by rpki-client on console-ams.rpki-client.org