Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/BM2hlOjMOYuZQvlGCrZi24bmtLc.roa
File: BM2hlOjMOYuZQvlGCrZi24bmtLc.roa (raw, json)
Hash identifier: 6o52l/F5v1Rl8Hxn1VhTzLQ43klZsbSPORZsXhcpPtg=
Subject key identifier: 04:CD:A1:94:E8:CC:39:8B:99:42:F9:46:0A:B6:62:DB:86:E6:B4:B7
Certificate issuer: /CN=2fa692504c770ba4f840b8abeec485b6d10fa4ea
Certificate serial: 018CC56DF01D17DD5602ABC396A0F8B8DE22
Authority key identifier: 2F:A6:92:50:4C:77:0B:A4:F8:40:B8:AB:EE:C4:85:B6:D1:0F:A4:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/BM2hlOjMOYuZQvlGCrZi24bmtLc.roa
Signing time: Mon 01 Jan 2024 14:29:25 +0000
ROA not before: Mon 01 Jan 2024 14:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62022
IP address blocks: 185.50.244.0/22 maxlen: 22
2a04:c0c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f0:1d:17:dd:56:02:ab:c3:96:a0:f8:b8:de:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa692504c770ba4f840b8abeec485b6d10fa4ea
Validity
Not Before: Jan 1 14:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04cda194e8cc398b9942f9460ab662db86e6b4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:a3:cb:72:57:fd:57:77:57:bf:81:cc:4e:
30:8e:f3:2b:bb:d4:70:39:2e:33:02:ea:15:b3:e4:
ac:bd:cd:15:6e:2f:51:ce:41:52:94:c4:7e:2c:c4:
b7:37:c5:37:30:5f:d1:f4:a8:b0:3b:4f:01:8f:a8:
8f:c8:96:4e:e8:ad:c7:70:07:4d:3a:e2:e2:12:ed:
d4:8c:ed:e7:da:03:77:a0:da:1c:10:d6:b5:ae:8b:
03:58:b5:09:41:d9:db:0b:ea:41:fd:f4:da:26:1f:
dd:18:ca:71:7c:c3:f8:3e:2b:7b:a4:66:c5:75:66:
3d:f8:93:e4:81:94:68:f7:66:a0:55:1f:f2:62:69:
84:80:93:00:3f:45:0a:1d:20:4a:de:22:9c:32:e1:
3e:c5:91:b8:71:04:d9:7e:50:89:79:14:a4:9e:0c:
8c:70:d8:c7:9a:0b:2d:a8:c7:f4:75:b9:38:0d:05:
0a:e3:81:3f:2c:ea:87:f1:7f:3c:86:c4:bc:77:4c:
df:a9:2e:60:97:d2:38:21:97:cf:91:f9:f7:1e:9c:
7d:4d:97:1a:4d:52:92:ff:54:3d:83:93:43:97:1c:
2a:d0:b4:33:be:60:c3:ef:00:b6:a9:e0:d0:fa:49:
71:56:a5:da:96:71:c5:f6:bc:f3:2b:0d:0b:7e:74:
29:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CD:A1:94:E8:CC:39:8B:99:42:F9:46:0A:B6:62:DB:86:E6:B4:B7
X509v3 Authority Key Identifier:
keyid:2F:A6:92:50:4C:77:0B:A4:F8:40:B8:AB:EE:C4:85:B6:D1:0F:A4:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/BM2hlOjMOYuZQvlGCrZi24bmtLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.244.0/22
IPv6:
2a04:c0c0::/29
Signature Algorithm: sha256WithRSAEncryption
ae:86:54:7f:3b:c0:c2:2e:41:8f:ce:4b:07:2e:c4:f8:33:fa:
1e:e4:00:73:cf:18:27:71:74:ac:85:ef:e9:53:3a:b0:5f:5a:
70:44:6e:69:c8:f8:07:f7:fd:5f:96:b5:60:10:3c:ff:7b:37:
80:e2:13:fb:ff:9c:2b:d4:a5:86:54:a0:be:a3:e4:c2:4c:83:
8e:c9:09:20:64:a8:5e:3f:45:a0:80:19:48:04:06:87:bd:07:
fc:17:21:2e:32:eb:d3:3d:66:87:3e:3a:65:10:ad:ce:26:00:
f3:f2:01:b9:26:38:1d:b0:1f:4a:ca:c8:51:39:eb:f3:29:a8:
23:51:52:6a:77:9d:2f:9d:69:a0:d0:ff:80:a0:d0:61:ad:23:
b7:82:d2:3f:f3:b1:7d:a8:98:21:d8:66:76:39:0d:23:8f:40:
5c:a3:a2:a8:4f:f6:8b:79:a5:12:75:51:9d:04:d9:e3:72:9a:
2d:40:0d:d0:25:42:44:8d:b6:9e:5b:d5:6f:76:9b:ba:1d:66:
85:d2:cd:ce:cb:d4:b2:56:1d:80:f0:9f:c1:39:2c:a8:bc:7e:
a3:34:97:6d:12:8f:38:3e:73:aa:bb:e0:c5:71:fe:60:70:50:
5f:f8:bf:29:56:83:c9:a4:be:28:0a:91:c6:e3:9d:72:d0:99:
1c:b8:28:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:36:54 2024 by rpki-client on console-ams.rpki-client.org