Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/cD49TwY86nGV_Uxf5RWPQspYsew.roa
File: cD49TwY86nGV_Uxf5RWPQspYsew.roa (raw, json)
Hash identifier: PrFxrxdf6TdHnNMfg3o4yphsIhb7JDrB4jtJZcoWL9M=
Subject key identifier: 70:3E:3D:4F:06:3C:EA:71:95:FD:4C:5F:E5:15:8F:42:CA:58:B1:EC
Certificate issuer: /CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Certificate serial: 018CC5DC1AE485B3699F9FCD4ED38D2AB176
Authority key identifier: 05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/cD49TwY86nGV_Uxf5RWPQspYsew.roa
Signing time: Mon 01 Jan 2024 16:29:45 +0000
ROA not before: Mon 01 Jan 2024 16:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200711
IP address blocks: 185.50.88.0/22 maxlen: 22
2a01:a7e0::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:1a:e4:85:b3:69:9f:9f:cd:4e:d3:8d:2a:b1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Validity
Not Before: Jan 1 16:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=703e3d4f063cea7195fd4c5fe5158f42ca58b1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:c1:87:05:50:29:07:42:f8:f5:24:65:d1:
8f:61:7a:1c:4d:c9:ad:e6:31:c5:67:5a:2f:35:fa:
df:cb:bb:d3:49:8c:41:d8:64:7d:be:cc:b5:ff:d9:
f3:fe:0c:ee:fb:48:4b:4d:87:7b:3c:0b:04:9e:81:
9b:fd:3a:28:17:fe:82:4e:b8:4e:93:4e:31:fc:5b:
17:57:e4:bb:0a:d8:3c:02:78:89:8c:15:7b:52:57:
e8:31:d7:c2:7a:b5:e8:12:06:ac:28:69:48:da:18:
fe:25:42:82:a2:3c:0a:90:d4:3e:77:9c:f1:0d:c1:
02:19:2f:c8:da:ff:f5:a1:dd:b1:e5:dc:26:d0:5c:
94:e3:ba:cf:b6:4c:09:a7:2e:6c:49:fa:32:c2:05:
73:8a:e5:35:3f:85:2a:1a:17:8b:d7:b4:f8:79:9b:
fa:2f:d7:2c:5e:f8:73:2c:22:da:c6:5b:97:86:29:
eb:9e:5b:44:01:41:e3:57:46:1d:dc:2b:f4:e9:7c:
fc:a8:cd:6f:a1:af:6c:c4:f0:39:60:95:ba:bc:5d:
ed:63:a1:55:f9:34:62:4f:ba:38:a9:bb:30:57:a5:
23:ab:f2:f4:76:f1:46:32:21:64:35:b3:e8:6a:93:
18:94:42:65:91:d1:a8:7e:32:a6:a2:da:99:3e:5a:
94:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3E:3D:4F:06:3C:EA:71:95:FD:4C:5F:E5:15:8F:42:CA:58:B1:EC
X509v3 Authority Key Identifier:
keyid:05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/cD49TwY86nGV_Uxf5RWPQspYsew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.88.0/22
IPv6:
2a01:a7e0::/36
Signature Algorithm: sha256WithRSAEncryption
ab:58:25:02:81:a0:42:6a:c8:28:71:41:73:21:08:80:63:95:
77:60:5f:4c:df:22:ac:e1:91:4a:d9:25:ab:95:69:0a:8c:2c:
8a:9f:18:40:c9:20:d8:02:06:ef:ae:ad:a3:ef:b4:59:33:24:
53:dc:56:3d:3e:df:62:c4:8a:18:25:ac:ae:0c:ab:c4:83:48:
15:db:c0:e2:5a:4c:af:de:1c:40:4f:8e:9f:29:cc:9d:8d:14:
c6:6a:fc:c2:70:69:6c:01:19:22:2a:5e:88:13:63:78:a3:03:
14:3b:1a:05:0d:3d:53:bc:a3:65:a9:f7:71:d6:7c:51:29:4d:
f2:5b:c6:50:d2:2a:93:f1:29:b4:fc:f4:83:92:a4:f2:16:9d:
9b:b1:71:c6:45:91:43:1d:fa:80:6f:7b:15:c6:4d:9b:a4:c0:
d4:10:eb:30:1b:04:5a:58:73:61:97:86:93:a1:03:97:b6:4c:
fa:ea:77:db:c0:f1:ef:2c:fc:12:1e:98:cc:1b:73:20:46:a9:
f8:87:6b:33:66:5b:85:79:45:5c:c5:fc:1e:40:2e:9e:e5:c2:
a6:d4:a3:2b:6c:a5:42:19:65:6d:cb:43:ef:8b:ec:62:e5:bd:
ab:e0:8a:83:bc:61:b5:6e:91:07:76:01:37:31:8d:8c:d0:52:
5d:2c:62:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:01:27 2024 by rpki-client on console-fra.rpki-client.org