Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/_a_jPhLDN1pRmnSFNzWOvlpK6Fo.roa
File: _a_jPhLDN1pRmnSFNzWOvlpK6Fo.roa (raw, json)
Hash identifier: x8r2Y7xWKWRFMK4aLQvUaBGoed76QzS/T+Kmjc/tHz4=
Subject key identifier: FD:AF:E3:3E:12:C3:37:5A:51:9A:74:85:37:35:8E:BE:5A:4A:E8:5A
Certificate issuer: /CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
Certificate serial: 018CC50143A3ED9441A5533013A48FCC3AE1
Authority key identifier: 19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/_a_jPhLDN1pRmnSFNzWOvlpK6Fo.roa
Signing time: Mon 01 Jan 2024 12:30:43 +0000
ROA not before: Mon 01 Jan 2024 12:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24951
IP address blocks: 185.50.224.0/24 maxlen: 24
185.50.226.0/24 maxlen: 24
185.50.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:43:a3:ed:94:41:a5:53:30:13:a4:8f:cc:3a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
Validity
Not Before: Jan 1 12:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdafe33e12c3375a519a748537358ebe5a4ae85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1a:58:6d:6d:e2:42:26:8e:0e:cf:b5:61:1c:
4e:61:2e:f8:90:4c:ae:aa:ca:07:62:73:43:08:de:
15:c7:0f:0f:00:d5:a2:33:d9:6e:14:6f:0a:76:e6:
94:ea:44:4e:0c:3c:f8:d2:13:51:60:3d:a0:f1:5c:
85:b3:d0:9b:f1:5d:75:18:67:0c:29:7e:c4:5c:df:
f8:28:2a:ac:9e:9a:b3:74:3c:61:40:a5:eb:f9:4b:
66:5b:4a:f6:7d:1d:c2:84:6c:6e:a8:2d:7d:23:58:
75:d4:60:4d:7b:97:75:e6:9d:42:5c:11:46:f3:0b:
ed:15:3c:a6:bf:84:f7:fc:99:81:66:2f:1f:70:4a:
37:17:0e:86:de:c0:11:68:91:70:4f:ae:55:5b:ef:
09:b4:a2:b5:81:52:4d:78:8b:d8:db:bf:8d:64:2c:
8e:06:b2:36:af:3e:20:14:75:f1:5e:85:2b:e7:53:
54:54:60:73:d7:bd:92:04:8d:0e:f2:8e:5e:43:1f:
95:d2:f3:72:fe:e6:f4:d2:3c:e8:c5:84:f5:45:8f:
5d:ad:46:07:e0:78:88:64:e0:9d:01:25:da:72:7b:
7a:3e:9a:77:02:ef:01:02:2b:ee:2f:97:b5:22:e9:
83:05:51:e7:bb:8c:07:fb:16:d5:e8:9c:d1:e2:a8:
0b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AF:E3:3E:12:C3:37:5A:51:9A:74:85:37:35:8E:BE:5A:4A:E8:5A
X509v3 Authority Key Identifier:
keyid:19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/_a_jPhLDN1pRmnSFNzWOvlpK6Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.224.0-185.50.226.255
Signature Algorithm: sha256WithRSAEncryption
70:02:1e:32:9f:6d:45:56:c2:33:9b:79:c1:d5:fc:dd:dd:0b:
2f:9f:5a:f0:58:d9:90:46:40:30:e8:ed:54:40:09:e2:09:3b:
c0:6d:ed:52:0b:5b:77:ba:ac:2d:37:5c:a7:65:05:98:4f:15:
87:bf:66:da:17:86:1c:45:63:f5:c2:7f:c7:1e:df:78:6b:0d:
ca:67:17:38:8b:19:ab:cd:05:92:f8:dc:7c:f4:5d:a9:01:37:
b0:f0:be:eb:b0:4c:32:36:b6:ae:e4:b5:b7:89:14:fd:bd:a6:
9f:5a:5b:e3:c9:b8:c8:86:80:f7:55:69:e1:8d:fb:04:21:ea:
cf:40:0f:88:16:8e:76:f4:e6:6c:66:49:19:2b:83:82:5d:ee:
ba:99:db:52:55:7a:27:c9:58:1e:f6:0b:1c:b9:f3:03:c6:f6:
68:24:a8:84:77:8a:88:a4:88:4f:bd:d0:11:4a:e7:c6:8f:d0:
d5:ed:62:7b:ed:8f:04:83:61:b6:24:0a:4c:3c:83:63:68:05:
b4:56:a8:7f:f5:54:d1:75:66:32:15:da:5c:f9:1a:7e:3a:fc:
4f:ce:17:56:ea:22:d6:b2:36:52:6a:a3:b8:80:f1:5b:a0:fc:
0d:49:7e:68:54:18:77:6a:8f:49:41:8a:e4:db:df:d5:bf:15:
7f:6a:32:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:35 2024 by rpki-client on console-ams.rpki-client.org