Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/s8OMML9zcdY9bd1pRXlcrq1ftT4.roa
File: s8OMML9zcdY9bd1pRXlcrq1ftT4.roa (raw, json)
Hash identifier: jYzRc9QQIybIwaWR1aK5jXMtdD0FUISOUCQnFE7tJ1I=
Subject key identifier: B3:C3:8C:30:BF:73:71:D6:3D:6D:DD:69:45:79:5C:AE:AD:5F:B5:3E
Certificate issuer: /CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
Certificate serial: 018F53EA53E0FB2C4000EC280767A4899F52
Authority key identifier: 31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/s8OMML9zcdY9bd1pRXlcrq1ftT4.roa
Signing time: Tue 07 May 2024 16:36:56 +0000
ROA not before: Tue 07 May 2024 16:36:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.50.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:53:ea:53:e0:fb:2c:40:00:ec:28:07:67:a4:89:9f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
Validity
Not Before: May 7 16:36:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3c38c30bf7371d63d6ddd6945795caead5fb53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ae:6c:13:40:bc:98:f5:c5:d7:2a:e3:9c:05:
f9:7b:b1:42:48:9c:aa:df:53:87:6a:a0:db:0f:cf:
9a:f8:7e:c3:3b:a2:df:20:e9:d6:b9:7e:ef:6f:cb:
8e:f3:08:a3:0d:f4:81:45:4b:fe:51:71:cb:62:53:
14:6a:c6:a6:4f:fc:7b:95:54:00:67:eb:39:69:81:
e5:c3:f3:4d:e8:97:9f:51:ec:0a:fb:b0:38:8e:33:
8c:8e:d3:cc:f2:a7:f5:7f:e1:2b:8a:28:34:d3:66:
57:87:a6:8b:b2:a2:32:0e:c6:c5:f4:56:47:17:0d:
de:cb:03:cd:cc:4c:9a:fd:ae:c9:2b:7e:f4:65:98:
02:ab:8e:b4:03:1e:58:04:d1:d2:15:c8:c0:29:f3:
b5:e0:8d:25:03:8c:f8:d9:2c:f1:37:26:c3:db:bf:
3b:67:ac:16:66:25:a5:ae:4d:c0:a3:32:85:22:4f:
4c:84:98:23:4b:72:9b:54:07:24:c2:cc:68:f4:08:
b6:95:a2:09:90:d3:a2:f9:a2:d6:88:a3:e7:e6:60:
29:72:8e:ef:a6:c0:1f:93:45:b9:02:59:99:71:b4:
c2:59:a6:cd:7d:0d:68:43:12:dd:7e:bd:1e:65:b9:
e3:8d:91:c3:90:7d:17:07:87:31:0b:67:22:24:84:
f0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C3:8C:30:BF:73:71:D6:3D:6D:DD:69:45:79:5C:AE:AD:5F:B5:3E
X509v3 Authority Key Identifier:
keyid:31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/s8OMML9zcdY9bd1pRXlcrq1ftT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.140.0/24
Signature Algorithm: sha256WithRSAEncryption
24:fa:0e:ce:20:47:93:ce:90:30:16:c6:5c:60:44:69:23:bb:
bb:b2:d0:c1:92:3a:48:97:d5:85:6a:fa:b9:b9:83:cd:6b:13:
fe:da:0a:ad:58:7e:15:1a:80:87:fb:02:a2:cf:a5:ff:0d:18:
03:6c:5f:40:d3:31:fe:23:39:7e:c5:e7:af:57:37:0f:e3:ef:
f4:86:6e:15:12:39:b1:48:5e:8d:3c:0b:26:09:1b:b3:70:81:
3b:d8:70:13:13:a7:1e:fc:2f:54:c9:88:56:e8:79:4f:ff:21:
7a:b1:06:ea:f9:7e:c9:ab:30:f1:38:46:dc:e0:5e:fd:38:13:
57:5e:20:fc:8c:cf:59:65:9a:6d:34:78:ba:ae:6d:69:44:7d:
9c:34:97:c4:be:bb:27:b2:96:cf:c4:5e:76:d4:cf:cf:aa:03:
b5:e8:41:dd:6b:4f:4b:76:14:3c:61:ef:0d:88:ff:c6:8b:0e:
48:ab:46:2e:06:5c:4c:a9:29:4f:ed:ca:3a:d2:00:44:5e:9c:
98:e5:f7:08:33:de:75:91:ab:fb:6a:18:16:a4:7c:72:9f:1b:
57:6b:c1:f2:ca:a8:35:72:95:7d:94:8a:09:20:83:85:c0:3c:
a4:f2:44:c0:f4:c3:83:1e:8c:10:f1:3c:c4:2a:ae:f9:49:e0:
a7:9e:ae:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:40:31 2024 by rpki-client on console-ams.rpki-client.org