Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/ol3ncIFIJOqIoi4M0-d4bfRv8yM.roa
File: ol3ncIFIJOqIoi4M0-d4bfRv8yM.roa (raw, json)
Hash identifier: KP31awdSwh3wJPX3OlBftZns/4YoJB39tK/oYb304fw=
Subject key identifier: A2:5D:E7:70:81:48:24:EA:88:A2:2E:0C:D3:E7:78:6D:F4:6F:F3:23
Certificate issuer: /CN=1fa12d687c627a182f81d4cccb3f32201861f677
Certificate serial: 018CC5DCD24E54B2094CF86878A8EEDF3649
Authority key identifier: 1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/ol3ncIFIJOqIoi4M0-d4bfRv8yM.roa
Signing time: Mon 01 Jan 2024 16:30:32 +0000
ROA not before: Mon 01 Jan 2024 16:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212572
IP address blocks: 185.50.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:d2:4e:54:b2:09:4c:f8:68:78:a8:ee:df:36:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa12d687c627a182f81d4cccb3f32201861f677
Validity
Not Before: Jan 1 16:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a25de770814824ea88a22e0cd3e7786df46ff323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e7:11:3c:2a:09:29:e2:b9:21:21:bd:c7:0a:
d7:3f:88:ca:54:47:7f:00:7d:d4:70:a5:a1:36:08:
70:16:1e:90:26:3b:41:b7:0e:96:c2:4e:fe:5b:a4:
09:b7:19:54:87:3b:f7:88:ee:90:c9:b3:e3:0f:eb:
a7:32:9e:1d:f0:91:ea:8f:00:f0:e3:90:2d:ad:29:
3d:3c:ec:9b:e7:2e:d5:75:e4:f0:d0:27:bd:d6:4f:
ef:90:e7:96:4d:c9:1e:e9:ee:0b:1b:63:5b:5e:c8:
f0:98:84:ba:98:da:63:50:88:bd:78:68:19:e1:10:
3d:64:66:d9:71:9b:45:30:29:14:45:c3:07:1d:c5:
14:ea:fa:9e:ce:51:6d:b5:46:25:75:68:da:1b:66:
c8:e8:8e:c9:cc:60:34:75:d5:b6:8d:f4:1d:52:06:
01:a3:6f:1c:8d:aa:1f:ff:45:2c:17:d1:db:3f:1c:
1c:19:63:ce:92:52:f5:1d:5f:5c:b3:5f:a4:36:86:
0c:ce:7b:35:ea:19:42:ec:38:67:20:15:12:84:75:
70:7e:0b:5e:ab:5d:93:6a:98:9d:c1:93:a6:fa:3a:
b5:6d:39:0a:9e:94:0a:5a:4c:b1:58:d5:ba:97:2b:
7b:f0:dd:94:bb:97:d2:db:61:ec:ec:07:89:b3:ff:
b2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5D:E7:70:81:48:24:EA:88:A2:2E:0C:D3:E7:78:6D:F4:6F:F3:23
X509v3 Authority Key Identifier:
keyid:1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/ol3ncIFIJOqIoi4M0-d4bfRv8yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.56.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:f7:a3:d1:29:78:cc:c0:3e:d6:c0:9e:ba:56:14:45:d6:cf:
86:ef:57:38:76:76:5a:bc:e2:29:b7:9a:ef:cc:a2:27:9b:6a:
e7:13:fc:d0:96:fe:63:e5:b9:a1:ef:3c:e8:cb:bc:ac:c9:fd:
4a:6f:c1:9f:19:cf:64:8b:af:9c:76:71:72:63:e1:5d:dd:5b:
6f:ea:3f:00:e3:15:67:d1:34:cc:e3:2e:8f:53:b1:9b:54:cc:
0b:5f:47:f7:26:98:af:65:c0:c5:9d:c2:4a:3d:e5:dc:86:00:
21:e1:f9:5e:35:90:55:a9:a7:81:76:fd:df:11:25:e0:81:4e:
00:07:26:5d:d5:c8:4c:7f:30:35:a4:d8:4e:82:85:3c:6c:40:
7b:3c:87:9f:01:74:a9:de:68:06:b8:0b:49:1c:5f:31:30:47:
22:16:63:65:e3:48:82:3e:9b:c5:f8:32:5c:31:97:fc:b8:a8:
e4:28:da:ca:09:47:27:15:ad:68:00:e5:85:31:c3:1d:61:9e:
14:fd:4b:ba:26:d9:1d:d6:63:46:e1:53:16:5d:d1:2e:c1:4e:
f1:f6:59:4f:5a:e6:e3:cb:b4:f0:01:b4:f1:37:a6:a6:9d:0a:
6e:69:dc:b8:3f:4c:fc:23:0e:38:75:a0:8f:62:0c:05:9c:57:
7e:19:74:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 11:17:18 2024 by rpki-client on console-fra.rpki-client.org