Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/IipoAOgrAnI2TJ6LNgaLferciS8.roa
File: IipoAOgrAnI2TJ6LNgaLferciS8.roa (raw, json)
Hash identifier: TT/ssdp3bebbsFpZowsLHd7wsbd9lxHHr/OK2uMX+Yk=
Subject key identifier: 22:2A:68:00:E8:2B:02:72:36:4C:9E:8B:36:06:8B:7D:EA:DC:89:2F
Certificate issuer: /CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Certificate serial: 018CC64B763338DF436D529CD4C1330A24FE
Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/IipoAOgrAnI2TJ6LNgaLferciS8.roa
Signing time: Mon 01 Jan 2024 18:31:23 +0000
ROA not before: Mon 01 Jan 2024 18:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42547
IP address blocks: 194.50.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:76:33:38:df:43:6d:52:9c:d4:c1:33:0a:24:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Validity
Not Before: Jan 1 18:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=222a6800e82b0272364c9e8b36068b7deadc892f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d1:6b:12:0b:6a:8b:80:e4:ce:9d:a6:24:9a:
95:ad:08:66:cb:8b:f1:e6:a4:d7:8e:0d:12:00:e6:
38:48:f6:fb:46:c4:2a:95:f7:4f:0d:33:99:a9:7e:
8c:c0:2b:d8:c9:78:6d:b1:41:9c:d0:e8:dd:3d:19:
28:c7:5f:8c:b1:f4:cc:79:17:dc:db:dc:f1:08:f7:
7d:9f:24:d0:59:64:5b:36:0e:46:03:0d:4c:f4:7c:
18:49:d0:c6:46:0a:39:51:b9:47:13:e8:34:cd:cb:
94:91:84:8c:c3:87:b9:aa:76:ad:3f:11:5c:2c:7e:
07:2a:5e:a5:03:f9:9a:8e:4d:f4:31:98:28:75:07:
8c:06:41:a7:0e:4c:8a:50:68:6b:94:40:da:54:fc:
6a:96:a6:7f:db:56:48:26:8c:1c:00:46:dc:aa:4d:
81:55:d0:32:35:a4:2e:3c:6a:77:51:e5:31:8e:03:
a0:0d:2b:ca:2f:d1:61:44:38:c1:48:27:af:23:03:
2a:b5:18:da:65:c4:fa:10:c3:f3:95:6e:52:ab:56:
a4:7c:bf:98:7a:6f:c0:37:49:80:f0:88:a6:1d:cb:
c1:5a:97:f0:ab:07:0e:f7:26:dd:ed:9e:05:8d:18:
5c:29:0c:fe:65:60:3e:74:1e:b0:f4:59:89:67:e4:
b9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2A:68:00:E8:2B:02:72:36:4C:9E:8B:36:06:8B:7D:EA:DC:89:2F
X509v3 Authority Key Identifier:
keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/IipoAOgrAnI2TJ6LNgaLferciS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.117.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:1a:78:dc:f6:7d:ee:c7:74:03:7a:a6:5a:61:6e:ce:b8:15:
17:9f:3b:05:ef:b5:75:4d:06:37:ab:d7:d8:41:e7:b4:18:d9:
9a:3d:ed:76:4e:8a:f4:c0:3b:40:11:ae:9e:48:7e:28:3e:4f:
85:76:a9:ee:11:66:b9:0e:f3:7a:f7:8d:9b:a9:c3:6e:2e:bf:
35:bd:22:78:9c:8d:92:e6:88:fb:39:16:a1:b6:50:ac:c6:c9:
99:33:1a:48:c4:09:12:39:85:55:85:36:11:fc:b5:ef:b8:88:
c6:00:e1:41:a8:53:a6:83:fa:8b:05:1a:aa:3d:6e:1d:f0:33:
99:26:b3:50:76:f8:22:71:53:a5:fa:33:44:4c:db:e4:71:72:
84:1e:66:ba:88:de:cc:ed:f9:14:97:f2:84:46:ea:7f:05:e1:
20:7c:cd:fb:ac:51:5b:7b:56:c5:61:d2:65:0c:5a:65:87:89:
7a:b7:43:7e:b2:fa:41:55:f0:a9:cb:aa:f8:01:9f:5a:72:c2:
09:bc:20:47:3f:64:17:e4:75:82:89:8f:1a:f2:9c:1c:21:fc:
5f:74:78:5d:83:cc:fc:56:d5:38:4a:aa:c6:de:84:eb:98:98:
41:8d:5c:79:45:8b:f5:2b:4a:98:4d:43:af:68:2c:2f:86:d3:
fd:40:d8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 08:42:44 2024 by rpki-client on console-ams.rpki-client.org