Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/vJY23gW3idQURtJFEBLS0_s-s5A.roa
File: vJY23gW3idQURtJFEBLS0_s-s5A.roa (raw, json)
Hash identifier: 51dv52+A2Lf8mZKPQ+jTQ7UxTygtkqLNdSSVDb7Xkzw=
Subject key identifier: BC:96:36:DE:05:B7:89:D4:14:46:D2:45:10:12:D2:D3:FB:3E:B3:90
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 018CC2DB16DEFBC3D657A321AC5365055A01
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/vJY23gW3idQURtJFEBLS0_s-s5A.roa
Signing time: Mon 01 Jan 2024 02:29:47 +0000
ROA not before: Mon 01 Jan 2024 02:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212905
IP address blocks: 194.145.139.0/24 maxlen: 24
185.86.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:16:de:fb:c3:d6:57:a3:21:ac:53:65:05:5a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Jan 1 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc9636de05b789d41446d2451012d2d3fb3eb390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:01:5b:dc:e2:0e:b6:6f:41:22:2c:f6:bb:23:
16:44:c8:2a:4e:f9:e7:8b:3d:c1:dd:b8:a6:a6:e3:
d8:fe:af:8f:21:fb:8d:1a:4f:d5:c8:92:3a:08:01:
64:dc:60:71:52:ec:fa:3f:92:54:c2:df:fd:41:90:
a0:c0:b1:95:d6:39:ad:0f:97:6b:74:61:d1:1f:da:
0d:48:1a:5a:f5:4d:1b:16:9b:7c:7f:58:89:3b:14:
46:cf:2c:91:0d:ca:d5:ab:45:b9:0a:f5:b8:b5:a8:
b7:7c:b6:29:8b:23:76:77:e5:32:c6:57:a5:4e:dc:
4e:37:45:03:78:3b:95:d5:c8:6c:98:bb:68:41:7f:
5a:0e:48:b0:d1:af:26:cb:09:a1:06:cb:fd:a7:7a:
c2:87:5a:4d:5e:d6:d8:19:56:76:ec:58:b2:49:49:
21:38:16:9e:39:8c:94:25:52:70:27:f8:33:a3:b1:
15:af:15:63:8f:e1:39:2a:5a:5e:26:0e:f8:d2:72:
64:f3:30:20:73:41:92:e7:63:63:e3:50:69:be:8f:
77:c1:a5:51:ab:75:ef:e2:9e:35:56:a2:ca:b3:36:
c5:2c:eb:42:0a:da:22:28:7d:8e:3c:da:1b:b0:2c:
01:74:0f:dc:ae:da:31:a7:ce:05:7d:3e:bb:48:08:
7a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:96:36:DE:05:B7:89:D4:14:46:D2:45:10:12:D2:D3:FB:3E:B3:90
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/vJY23gW3idQURtJFEBLS0_s-s5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.81.0/24
194.145.139.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:69:1e:e6:d7:43:8f:98:8a:3f:6e:a0:0c:17:1c:2d:df:91:
3c:d3:6b:b5:b4:aa:90:64:dd:1e:b6:50:65:69:57:15:7c:c2:
6e:2e:12:50:cc:67:d2:d1:75:26:c2:5b:22:13:7c:c2:69:48:
6b:a9:a3:f9:9c:1f:63:a4:6f:7d:3f:0e:a4:ce:c9:4a:97:af:
04:fe:7a:c0:eb:ab:c1:61:85:0a:ac:41:8d:41:0a:ab:ad:8d:
0c:5f:f8:ba:b4:b1:f8:ab:ff:84:ff:b2:0e:59:a8:f5:f0:4c:
59:e0:b0:40:7e:9c:ec:4e:23:03:71:d3:9f:62:18:7e:48:41:
14:e2:e5:e5:21:89:b5:2f:d2:a9:c6:e0:11:c6:1d:5f:57:ca:
eb:cc:b3:e5:3e:a8:15:e6:34:c3:d8:1e:92:3e:0b:f6:2b:7a:
1a:db:03:87:12:99:f2:96:82:91:34:ba:7d:c7:7b:2d:50:ed:
ed:2a:6d:49:22:4f:99:7c:27:ab:27:07:4b:dc:6d:ce:a9:08:
a1:cd:a9:7f:7d:ce:57:5a:35:4e:e6:52:3f:b6:f0:3f:96:24:
09:c8:10:6d:0e:d3:06:53:aa:21:ab:f6:bc:5a:6d:57:ae:dc:
f5:20:4f:c7:9d:3b:d2:54:45:ed:3f:c4:1f:f7:94:ff:89:78:
ce:49:b3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:45:17 2024 by rpki-client on console-ams.rpki-client.org