Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/0AFvdUY8i39Pvc5ooozuEVLG6_U.roa
File: 0AFvdUY8i39Pvc5ooozuEVLG6_U.roa (raw, json)
Hash identifier: kaLXLENs18gGGF3ANae6rxqHTGSJibjHzFcXCucYk/c=
Subject key identifier: D0:01:6F:75:46:3C:8B:7F:4F:BD:CE:68:A2:8C:EE:11:52:C6:EB:F5
Certificate issuer: /CN=1c344f11597594882853a79581dd2bf789eeb31f
Certificate serial: 018CC6B7B4E25F1EF5302DF57D49AF908B22
Authority key identifier: 1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/0AFvdUY8i39Pvc5ooozuEVLG6_U.roa
Signing time: Mon 01 Jan 2024 20:29:37 +0000
ROA not before: Mon 01 Jan 2024 20:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24641
IP address blocks: 185.50.228.0/22 maxlen: 22
2a01:ade0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:b4:e2:5f:1e:f5:30:2d:f5:7d:49:af:90:8b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c344f11597594882853a79581dd2bf789eeb31f
Validity
Not Before: Jan 1 20:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0016f75463c8b7f4fbdce68a28cee1152c6ebf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:26:cc:52:97:2c:09:e4:b4:55:56:16:9b:28:
76:37:b2:85:c4:ee:c8:2e:78:13:3e:f8:90:35:34:
f4:26:09:14:b7:76:e6:41:f1:ca:e5:c8:7d:2a:0f:
2d:88:7d:0e:b1:9c:6f:52:7a:8f:8f:b1:a3:b0:ae:
60:8a:73:3b:3f:32:e5:c7:97:d8:1d:27:9c:a1:81:
7b:ca:37:0e:41:de:e3:bf:21:ec:0f:09:58:a8:10:
88:11:c7:e1:e4:00:68:34:35:1d:89:a0:2e:60:d9:
eb:99:9c:ec:12:e8:02:6c:e1:09:df:c1:c7:e4:72:
33:8e:c2:15:f3:89:89:1f:10:b4:d4:a0:ac:61:b6:
34:21:4f:72:63:e5:25:55:8a:b4:4e:cd:b1:2e:e5:
fa:42:d5:65:23:c9:c7:51:f1:16:ee:e6:d1:a5:de:
60:3a:a1:d2:e9:5e:a4:0d:3d:ab:89:fe:eb:92:fa:
7e:7f:5a:83:0c:c5:b9:93:a4:fd:13:8f:77:a6:2f:
83:7f:90:17:e3:d8:e2:ca:78:02:21:ec:17:65:6d:
5e:b5:be:53:a3:f3:b1:26:24:12:39:17:13:80:a0:
ea:36:6d:80:15:fb:41:d1:fb:52:7b:5d:e0:86:a6:
51:0d:6c:bc:d4:ac:c4:2b:4b:17:0c:79:f2:7a:0b:
89:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:01:6F:75:46:3C:8B:7F:4F:BD:CE:68:A2:8C:EE:11:52:C6:EB:F5
X509v3 Authority Key Identifier:
keyid:1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/0AFvdUY8i39Pvc5ooozuEVLG6_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.228.0/22
IPv6:
2a01:ade0::/32
Signature Algorithm: sha256WithRSAEncryption
56:7b:ee:4d:26:6b:4f:29:1e:ab:e0:e1:d2:30:7e:e4:e3:d5:
74:d3:b7:a7:dd:79:c8:9f:f1:64:dd:82:a3:18:ab:fc:a0:66:
0e:2c:ca:35:10:f5:7e:8d:c9:80:98:07:54:03:da:9e:0b:6f:
7a:9e:68:7d:bb:2c:ff:a5:da:a1:19:be:73:7f:29:bd:1f:60:
26:99:01:3e:cc:fc:6e:45:eb:fc:75:2c:a1:01:df:a0:04:af:
c3:a7:ad:28:fc:e3:9f:b4:c5:27:f6:ba:65:64:b1:73:96:0f:
91:d8:b9:83:3a:52:c6:52:57:2c:50:fb:5a:20:34:7b:0d:4a:
0c:cd:72:02:30:07:8b:14:d2:4f:6b:ff:57:ea:f1:ef:9f:0e:
ed:51:72:70:32:d1:21:f5:38:6f:ae:5c:1c:7a:55:f1:95:dd:
4c:56:89:d4:89:6a:3d:24:ce:34:8c:c8:63:33:80:f7:81:83:
38:4e:75:c4:e8:0c:52:02:69:94:cd:17:9a:44:66:52:9d:65:
0c:e7:d4:a6:80:f5:18:b6:c6:80:76:dd:7a:1b:a5:ed:b5:30:
31:6e:35:76:84:89:c5:9d:dc:10:a5:be:6b:58:e4:9a:b0:5f:
a7:cb:95:2e:10:28:06:4f:bd:63:fe:0e:42:a0:1a:cf:0d:19:
b6:f3:72:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 17:47:44 2024 by rpki-client on console-fra.rpki-client.org