Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/dMIMqgHi5Z88l2vexG6YU3zGucI.roa
File: dMIMqgHi5Z88l2vexG6YU3zGucI.roa (raw, json)
Hash identifier: gaVxT/eJ2wUTm0QRniP4u3jyxehwS6ighExUgY72Jvs=
Subject key identifier: 74:C2:0C:AA:01:E2:E5:9F:3C:97:6B:DE:C4:6E:98:53:7C:C6:B9:C2
Certificate issuer: /CN=65295913c07c226100bd39f1ee2c52ea98aaee14
Certificate serial: 018CC8DE2F59922BB5F8B7A15C68386A0B2B
Authority key identifier: 65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/dMIMqgHi5Z88l2vexG6YU3zGucI.roa
Signing time: Tue 02 Jan 2024 06:30:53 +0000
ROA not before: Tue 02 Jan 2024 06:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50012
IP address blocks: 193.104.85.0/24 maxlen: 24
185.157.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:2f:59:92:2b:b5:f8:b7:a1:5c:68:38:6a:0b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65295913c07c226100bd39f1ee2c52ea98aaee14
Validity
Not Before: Jan 2 06:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74c20caa01e2e59f3c976bdec46e98537cc6b9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:29:f8:f5:84:e9:fe:df:b7:cb:cb:d2:c9:93:
a9:10:75:86:e0:86:53:f1:54:ed:3c:94:5f:20:fb:
7f:6c:0a:87:81:66:27:b4:ee:63:8b:b9:57:b0:3b:
94:65:a6:60:5a:88:84:f6:40:28:9c:14:bc:73:40:
f6:47:72:c3:c1:38:48:9e:d2:e1:c1:42:e8:c7:de:
63:df:cb:40:f8:99:17:d4:46:78:a6:8e:f4:b9:5d:
82:ac:2e:bd:93:94:c9:81:2e:ab:66:8a:d4:d3:f1:
5f:c2:65:8b:db:19:3f:a3:cb:ae:e4:37:05:ec:fc:
85:30:f8:0a:c7:fb:c6:1a:55:38:00:2b:9b:c2:50:
78:db:af:12:09:ee:5d:96:cc:1c:9c:02:64:98:09:
e1:a0:ad:43:b8:20:32:7a:79:95:98:30:98:2e:f7:
d9:f7:7c:f0:a0:7a:63:7f:ae:b8:48:96:1b:c4:3b:
49:e2:00:57:92:35:e3:be:42:16:ac:7d:3f:62:29:
ef:21:ed:08:f3:e5:97:6c:bf:70:47:da:e9:29:06:
10:79:79:ae:7b:c3:86:3b:1c:b6:30:dc:83:06:2c:
bf:37:1c:6b:94:08:51:7c:3b:b2:2b:05:2f:c0:33:
62:de:48:68:52:77:88:0f:eb:89:f7:9a:ca:a2:30:
f1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C2:0C:AA:01:E2:E5:9F:3C:97:6B:DE:C4:6E:98:53:7C:C6:B9:C2
X509v3 Authority Key Identifier:
keyid:65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/dMIMqgHi5Z88l2vexG6YU3zGucI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.121.0/24
193.104.85.0/24
Signature Algorithm: sha256WithRSAEncryption
09:3a:7d:e7:7e:a4:67:0b:35:7b:e6:1d:6a:3d:20:11:9f:45:
05:32:1a:1b:f4:99:48:5a:a6:c2:a8:d3:44:98:c0:e1:c0:0e:
e1:aa:c5:88:eb:5c:99:71:52:4c:12:38:96:6c:ce:1e:fa:4d:
71:d9:42:65:e2:c8:e6:17:1a:7f:4e:70:57:37:0b:0e:94:a4:
89:89:22:a8:9a:2e:4d:5f:f7:74:1e:45:21:39:15:72:a0:f0:
47:89:3a:7c:f0:7e:9a:04:3e:8e:d8:d2:f7:b9:10:6d:c7:61:
cd:d8:9a:f0:34:e4:76:f9:b5:bb:b2:60:ee:00:92:b9:eb:7e:
e6:4a:fd:67:17:5e:93:1d:b3:6d:20:b0:a3:db:46:ea:52:2a:
84:29:86:57:d1:69:a5:ff:c6:29:53:c8:a3:50:31:35:84:74:
5d:13:25:fa:08:3a:86:64:a3:b5:29:e3:e8:73:d4:57:81:4f:
c2:fa:5c:8d:80:88:04:f1:59:05:1f:98:07:63:87:9b:e7:8f:
b9:a7:77:39:8b:a7:b3:48:dd:da:df:83:77:73:bc:7b:96:e1:
6f:b3:c1:eb:84:39:31:1d:75:5e:b3:02:02:f6:16:d5:7b:95:
0b:16:42:ec:ee:c8:6c:a4:00:9e:c5:7a:0e:d8:67:58:28:d7:
c1:0c:ca:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 01:03:06 2024 by rpki-client on console-fra.rpki-client.org