Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/52u49_xxTsarjZMxq5xatXVTIzI.roa
File: 52u49_xxTsarjZMxq5xatXVTIzI.roa (raw, json)
Hash identifier: Eo35rDVZkwltPsm1hYANra1c1eDkh1XrgafMaB1euic=
Subject key identifier: E7:6B:B8:F7:FC:71:4E:C6:AB:8D:93:31:AB:9C:5A:B5:75:53:23:32
Certificate issuer: /CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Certificate serial: 018CC7932D8BB3E2D8FA9E4CAE0BF50BD873
Authority key identifier: 2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/52u49_xxTsarjZMxq5xatXVTIzI.roa
Signing time: Tue 02 Jan 2024 00:29:20 +0000
ROA not before: Tue 02 Jan 2024 00:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30848
IP address blocks: 185.21.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:2d:8b:b3:e2:d8:fa:9e:4c:ae:0b:f5:0b:d8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Validity
Not Before: Jan 2 00:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e76bb8f7fc714ec6ab8d9331ab9c5ab575532332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d8:d5:80:ed:57:d9:42:7c:a7:62:9e:3a:15:
a9:fe:d0:27:1b:f4:0c:db:8e:5d:d1:44:6b:8c:59:
58:d8:2c:90:08:5b:cb:22:5a:af:26:99:02:93:c5:
d6:6a:59:a5:dd:57:6b:76:78:64:c9:77:b8:b8:e5:
11:b3:f1:70:4a:c5:cd:ca:27:1b:dc:2f:d3:bd:b2:
a3:8e:c5:75:38:5c:ac:7e:80:8c:98:ae:5c:f5:f1:
07:3c:6f:c9:46:31:bc:05:c0:6c:13:b2:5a:04:4b:
8e:eb:26:a8:b1:43:dc:f9:b6:6e:3f:24:c7:0d:5c:
29:bf:3e:c3:73:ea:d5:4e:9e:f5:53:28:fb:16:0b:
13:1a:bb:44:2c:77:14:38:4d:42:d8:93:3b:5e:a5:
67:ed:16:9a:9e:92:6b:3c:1a:d8:cb:80:ce:36:9a:
8a:99:8c:8f:48:85:96:97:14:c1:99:11:29:53:be:
6a:52:a8:b1:c5:a7:83:bb:8c:c8:aa:aa:df:5b:9f:
67:34:c5:de:07:16:cb:e7:e3:51:1c:04:8a:8e:09:
aa:cd:3c:6e:58:1e:df:ed:d1:25:e4:7b:14:f2:4e:
09:bf:4e:35:56:56:cd:5f:cd:69:ee:e4:2d:07:74:
65:2e:44:6c:7e:a8:eb:43:35:a4:ca:13:ba:f5:c4:
53:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6B:B8:F7:FC:71:4E:C6:AB:8D:93:31:AB:9C:5A:B5:75:53:23:32
X509v3 Authority Key Identifier:
keyid:2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/52u49_xxTsarjZMxq5xatXVTIzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.72.0/22
Signature Algorithm: sha256WithRSAEncryption
80:f2:69:e3:a6:7f:c2:8c:51:52:a4:c2:26:70:8e:5f:8a:81:
10:aa:5f:ba:fb:3e:33:28:c8:ef:37:78:d4:00:0f:93:77:e9:
7b:7f:65:24:00:8b:1e:29:b5:b0:29:a6:a9:77:f2:32:ad:b0:
aa:4e:c4:ef:b2:f6:7d:1c:b7:96:94:a1:ab:b9:f9:cf:9d:1f:
b3:77:a0:e1:cc:25:b9:58:78:80:b4:b0:7a:34:de:ba:a6:05:
85:7b:f4:18:50:8f:61:c3:04:59:54:36:fe:16:a2:1b:48:a2:
5d:11:30:54:d9:08:69:36:00:b4:ee:66:23:7f:7c:cf:41:1d:
e7:66:f2:6f:b7:c5:90:ee:cc:66:cf:9c:48:f3:34:f1:06:66:
b1:da:75:75:94:a6:c6:84:19:55:a9:dd:83:b3:ff:ca:e1:03:
2d:5f:ee:ea:98:0c:75:d7:e1:1a:f0:67:0d:fc:62:7e:31:ec:
f2:81:ee:eb:5a:eb:6f:94:27:4a:29:c5:e1:0d:fa:3e:8b:26:
59:6e:5b:f1:29:36:18:39:e6:b6:fc:45:51:dd:22:f5:b8:ca:
ab:e7:a2:93:2f:44:58:6a:bd:43:ec:6d:50:e3:cd:3c:c5:16:
87:91:97:ad:6e:92:eb:10:f1:3b:9d:be:ee:f7:82:41:30:7f:
11:30:c9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:40:04 2024 by rpki-client on console-ams.rpki-client.org