Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/pwoEOeTO5RZHQUnWOLHwrScd5mY.roa
File: pwoEOeTO5RZHQUnWOLHwrScd5mY.roa (raw, json)
Hash identifier: mY6C75sEFICze3RcBiamn1tgNhCa7rp79HYsNFFHVu4=
Subject key identifier: A7:0A:04:39:E4:CE:E5:16:47:41:49:D6:38:B1:F0:AD:27:1D:E6:66
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019420D657D9EB427BF5AC32BF086BE06824
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/pwoEOeTO5RZHQUnWOLHwrScd5mY.roa
Signing time: Wed 01 Jan 2025 07:48:25 +0000
ROA not before: Wed 01 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17675
IP address blocks: 50.20.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:57:d9:eb:42:7b:f5:ac:32:bf:08:6b:e0:68:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a70a0439e4cee516474149d638b1f0ad271de666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:39:76:cd:b7:55:dd:1e:15:3a:fb:94:8b:04:
07:49:af:d7:a3:99:89:b5:60:81:33:7f:f7:e3:af:
90:58:fc:1a:0a:17:a1:1c:39:26:ba:6b:5e:eb:9a:
95:82:a4:71:44:51:2e:74:fe:46:df:49:5d:99:34:
ad:a1:fa:c1:f5:c0:d6:87:78:ec:5b:b1:79:89:08:
f7:90:cf:3b:7e:2d:8e:0d:22:0f:6a:05:ee:6a:1e:
9e:41:b9:58:03:d5:8d:a0:ac:95:23:fc:e7:67:93:
1c:81:94:e5:68:7e:9d:24:ef:6b:5f:7f:23:0c:ef:
b0:a1:5a:03:a5:6c:74:2d:87:82:f7:99:d8:8e:a7:
67:96:2a:7d:1c:db:33:7d:2b:39:9c:c4:b2:b4:cb:
43:f2:b9:98:33:b8:91:cf:67:c5:09:75:23:b6:b5:
00:5d:ba:2a:9f:2c:59:8a:ab:93:0b:d7:c8:eb:2b:
f0:59:a2:58:76:94:53:33:dc:ca:98:7e:6f:b9:e1:
53:3b:9f:1e:ba:dc:03:dd:42:a9:f8:85:87:27:4d:
7d:66:c5:d8:b3:00:86:d9:fd:11:d6:d4:9d:f1:88:
04:9a:b6:24:eb:26:40:98:0b:6a:74:21:49:61:c7:
4f:b5:09:cf:6e:91:0c:55:92:11:f8:c5:59:49:ef:
90:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0A:04:39:E4:CE:E5:16:47:41:49:D6:38:B1:F0:AD:27:1D:E6:66
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/pwoEOeTO5RZHQUnWOLHwrScd5mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.20.224.0/21
Signature Algorithm: sha256WithRSAEncryption
48:8b:5c:d5:40:65:ef:76:7c:21:86:f7:07:1a:42:f0:a6:e7:
39:1f:8a:cd:5a:ec:e4:14:11:82:3b:68:cf:97:f1:e7:53:1e:
8e:60:1d:34:14:21:5c:f5:b6:72:6a:d0:54:0e:31:f7:9d:38:
7d:f8:4c:28:8f:54:e1:b1:04:07:67:e4:6e:e0:8b:4c:ef:e4:
0e:a1:78:ad:61:2a:4f:3e:20:5a:a4:3d:26:d5:ed:6a:0b:b9:
44:95:c5:66:ea:4c:f8:d6:d7:5c:83:18:31:f6:28:82:a6:41:
48:b4:b3:05:5e:33:d8:d1:29:7a:1b:ca:8a:e9:04:eb:5a:a5:
05:af:fb:f0:a8:80:9f:ab:e5:7e:73:f3:7a:94:37:72:2a:9d:
9d:f5:e1:e0:5f:16:b7:83:ba:a9:77:5b:09:93:5f:b1:36:a9:
53:79:fa:44:83:97:62:ef:3e:07:bb:de:f6:fb:1c:61:92:e1:
3a:79:ac:90:b2:83:17:9e:f8:29:11:f0:b1:c7:0d:fc:4a:39:
a0:b1:53:f4:c8:b2:17:27:a6:d9:9a:9f:7d:fd:5c:b7:14:8d:
19:22:b9:44:97:32:5e:a9:96:7f:19:6f:4c:9f:9d:22:69:8e:
6e:71:93:40:d4:4d:35:f3:47:96:d4:00:c5:b0:70:b3:eb:9e:
a6:4d:33:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:01:45 2025 by rpki-client