Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/f5Md2nQD03GzjxsFELEFevxwJp0.roa
File: f5Md2nQD03GzjxsFELEFevxwJp0.roa (raw, json)
Hash identifier: FLRdjTBlWgD/D5ETp5NYBwsjLj5hhjYnhDxu3Vv4yjM=
Subject key identifier: 7F:93:1D:DA:74:03:D3:71:B3:8F:1B:05:10:B1:05:7A:FC:70:26:9D
Certificate issuer: /CN=c50c97eb9baf5428f50f45d330357678b73e061c
Certificate serial: 018CC801E00E84D09493C2DDD22227D203A7
Authority key identifier: C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/f5Md2nQD03GzjxsFELEFevxwJp0.roa
Signing time: Tue 02 Jan 2024 02:30:15 +0000
ROA not before: Tue 02 Jan 2024 02:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13237
IP address blocks: 185.190.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:e0:0e:84:d0:94:93:c2:dd:d2:22:27:d2:03:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50c97eb9baf5428f50f45d330357678b73e061c
Validity
Not Before: Jan 2 02:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f931dda7403d371b38f1b0510b1057afc70269d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:a9:7b:79:8f:3e:81:3e:24:44:9f:27:b1:
40:d0:f5:e9:3c:18:c6:b2:cc:d9:71:2d:05:4f:e3:
80:3d:30:58:3b:2a:68:2b:5d:6d:48:ce:b9:64:61:
f9:b4:67:3a:c3:a8:e6:f1:e1:37:5c:59:cc:43:f7:
a2:9e:7d:66:ee:65:70:30:f3:96:48:a0:55:df:94:
b3:ae:da:37:70:5a:12:ea:8e:8e:64:99:28:1f:52:
a1:95:00:f5:17:5e:84:ef:20:d8:aa:e2:53:61:b6:
90:d1:e6:52:d0:e6:fe:92:97:d3:be:72:20:53:5e:
41:a8:42:80:77:62:c7:61:45:af:0e:83:8a:d8:a5:
70:59:01:89:d9:35:99:38:6d:45:a3:04:5a:1f:50:
54:fb:7b:04:3e:9d:56:22:3a:da:e0:77:a7:80:9b:
12:c7:53:05:da:62:fc:ef:44:1a:70:43:1f:ca:78:
a7:cd:bc:75:d1:d5:8c:c8:4e:bf:17:ff:7d:7f:d7:
07:06:0f:43:99:d8:8b:59:72:73:8c:45:30:1d:2c:
65:53:31:13:ab:54:db:46:8e:86:25:9f:76:a7:5b:
b4:c4:46:9f:04:08:e7:d5:03:bc:d0:3f:9a:1a:79:
31:28:00:11:79:2a:95:ec:b8:65:a5:b7:2c:02:51:
f3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:93:1D:DA:74:03:D3:71:B3:8F:1B:05:10:B1:05:7A:FC:70:26:9D
X509v3 Authority Key Identifier:
keyid:C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/f5Md2nQD03GzjxsFELEFevxwJp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.51.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:87:92:77:66:4a:df:39:1e:4b:3e:6c:b2:1a:c6:c2:fd:9a:
38:bc:90:48:f1:5c:52:2a:87:ef:1e:a0:39:1f:98:7a:40:3a:
e3:f1:24:15:54:96:f7:8c:7c:6d:24:a8:89:9a:d5:65:53:a8:
7e:3b:e0:5d:f4:85:0b:f3:1d:3f:e9:88:94:c0:74:ca:86:da:
a9:0e:84:b2:b1:1f:29:c7:22:25:97:b0:f0:7a:16:e3:45:68:
7c:fb:38:b7:46:5a:af:94:4f:32:24:a9:d8:d7:15:b2:ef:d3:
26:d2:54:75:59:27:39:ce:24:60:2f:20:e7:6b:db:b2:1d:08:
b5:e4:70:b1:d0:f2:74:11:11:7a:2e:66:a6:cb:d7:2b:9c:cd:
bf:b5:aa:68:a0:14:3f:db:5e:b5:44:7f:ae:70:a7:54:d7:48:
dd:39:be:93:91:05:83:6a:8b:de:b6:5a:cc:78:59:45:df:70:
13:c5:1f:fb:74:17:bd:83:fe:e8:a0:f6:d3:1d:33:a8:2a:5a:
fd:7c:df:93:48:f0:4e:f1:11:18:11:ac:97:d9:75:5a:49:3a:
f3:23:64:36:5f:73:e4:e9:90:25:92:9c:99:fe:13:87:9c:8d:
76:cf:68:dc:2c:33:bb:b7:8a:fe:85:65:c2:7c:34:b9:e9:1d:
7d:93:a5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:19 2024 by rpki-client on console-ams.rpki-client.org