Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/RO6IqTboToUUFyeSaZDvsz9gSdo.roa
File: RO6IqTboToUUFyeSaZDvsz9gSdo.roa (raw, json)
Hash identifier: sQ/lIAbuwvZlfERyP3micWwKFukmX89UOSfVxwz2mC0=
Subject key identifier: 44:EE:88:A9:36:E8:4E:85:14:17:27:92:69:90:EF:B3:3F:60:49:DA
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 018F0BC67DD1B1F162224EFCE702F8514407
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/RO6IqTboToUUFyeSaZDvsz9gSdo.roa
Signing time: Tue 23 Apr 2024 16:25:08 +0000
ROA not before: Tue 23 Apr 2024 16:25:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133296
IP address blocks: 50.20.232.0/21 maxlen: 24
212.69.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0b:c6:7d:d1:b1:f1:62:22:4e:fc:e7:02:f8:51:44:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Apr 23 16:25:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44ee88a936e84e85141727926990efb33f6049da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d0:08:70:8d:c3:ca:a3:69:e5:e0:46:7c:41:
f9:99:59:86:fd:7d:1d:b5:af:bf:41:dc:d6:84:38:
b7:36:37:f2:23:4d:22:03:27:80:9f:81:a1:17:70:
97:b5:1b:d6:d7:a3:01:7a:ce:8a:61:b3:cb:38:4c:
31:2c:53:20:79:02:ba:d7:c5:55:57:89:a5:54:8b:
43:98:15:f0:af:e7:7f:25:b6:91:e1:ab:ca:0f:f6:
83:17:99:66:17:a1:5a:6a:ee:a4:ad:40:9a:f2:92:
12:a8:b6:e6:75:fd:52:e2:4d:aa:45:9e:43:8a:e6:
71:70:02:b3:ea:fd:ed:d4:19:07:6f:1c:20:2f:c1:
98:3c:13:13:b8:a7:68:b0:25:f9:3d:d2:16:5d:4b:
18:f9:a2:fb:e3:b5:99:ff:3a:79:b1:55:59:da:53:
13:16:97:df:08:72:cd:66:ba:59:1e:a8:7c:bc:19:
49:e4:f0:e5:8e:71:7a:dc:7e:54:1c:ef:cd:d6:1e:
fa:ec:fb:5a:ad:bd:1c:ff:cf:9c:22:79:68:40:ab:
02:eb:2f:9d:de:6a:aa:53:95:f0:9f:bc:cd:aa:de:
ab:e2:58:47:9d:84:aa:18:72:14:fe:f2:8f:01:06:
43:35:a3:d8:c5:cb:a0:b4:de:7f:1f:37:6b:d2:2e:
b1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EE:88:A9:36:E8:4E:85:14:17:27:92:69:90:EF:B3:3F:60:49:DA
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/RO6IqTboToUUFyeSaZDvsz9gSdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.20.232.0/21
212.69.92.0/22
Signature Algorithm: sha256WithRSAEncryption
08:e0:de:af:5e:9c:2e:29:1c:f2:51:11:ba:c5:e2:cc:f8:5a:
6e:60:b4:ea:b5:34:a6:19:f8:4b:ea:cd:db:51:1a:cb:68:96:
6d:c2:f3:1f:e3:1f:c1:f0:03:d6:3c:2e:42:dc:dc:0f:a5:eb:
3a:e8:a3:9a:ef:99:d2:0b:43:f1:16:6a:cc:24:a2:57:3b:d5:
94:f0:59:c6:20:b2:3a:73:7b:0a:9a:a4:ab:1f:03:d4:03:44:
53:f7:bc:83:7f:84:b6:4b:44:3a:d7:ef:e0:94:c2:8b:6c:c4:
d5:7f:45:b4:52:35:2a:66:0f:24:9f:11:d6:74:a8:db:a1:46:
2d:39:2d:d5:42:b0:c3:f5:f5:69:ef:df:f0:0f:28:31:e2:a2:
fd:cc:bf:28:ac:0d:64:f1:2c:51:1d:51:5e:90:91:46:1c:dd:
11:21:2e:7e:b6:07:e4:26:b8:a6:23:4c:db:c6:18:78:63:2c:
eb:5d:37:ea:37:db:ca:d0:bb:5f:fb:a9:cc:64:bc:0f:39:3c:
d5:65:8b:94:21:23:55:24:0e:f8:f4:18:a3:02:fe:27:0f:29:
41:76:da:44:84:b0:6d:9e:89:55:39:66:85:ed:51:68:ef:e6:
c0:97:1c:d0:ea:55:15:14:58:f9:0f:a2:14:13:73:18:7b:49:
29:f3:93:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:01:06 2024 by rpki-client on console-ams.rpki-client.org