Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/CQ_LtudLo7F7o1wxMgS2M6mWoyo.roa
File: CQ_LtudLo7F7o1wxMgS2M6mWoyo.roa (raw, json)
Hash identifier: 7vIFf8qCHsoqlkRtdz7Y1HFtV99/iX8rM2vhGQCfk34=
Subject key identifier: 09:0F:CB:B6:E7:4B:A3:B1:7B:A3:5C:31:32:04:B6:33:A9:96:A3:2A
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018CC8020997536F6330A1F49263897E4DD5
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/CQ_LtudLo7F7o1wxMgS2M6mWoyo.roa
Signing time: Tue 02 Jan 2024 02:30:25 +0000
ROA not before: Tue 02 Jan 2024 02:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204304
IP address blocks: 92.50.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:09:97:53:6f:63:30:a1:f4:92:63:89:7e:4d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 02:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=090fcbb6e74ba3b17ba35c313204b633a996a32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:09:31:ae:0f:20:3e:b2:2f:8e:e9:73:c1:a5:
fa:c6:b9:67:61:1d:5f:1a:ea:c8:7b:dc:e4:df:97:
2b:3d:31:7f:76:3e:ba:0a:12:7a:8c:16:08:77:9b:
0d:1d:b5:73:e2:d8:0b:c6:61:e7:ef:00:58:9f:1e:
41:11:72:5e:74:12:1b:a4:54:02:d7:30:aa:15:64:
f5:94:ec:23:a5:6e:6f:23:a8:b8:12:c2:76:89:a8:
3b:ee:42:bd:fb:ab:b4:3c:8f:30:c9:f2:02:3b:a4:
40:e4:fc:fc:c6:52:e8:2c:0c:1f:86:34:8f:a6:61:
9b:11:3b:1f:34:90:61:5f:aa:64:cd:8c:24:dd:f9:
9b:25:03:4b:96:fc:f9:09:ae:62:98:5b:dc:1a:50:
c3:e1:88:67:7f:f1:32:0f:1c:27:a1:83:2c:05:0e:
da:33:36:0b:2f:96:26:a5:92:b9:1a:bd:7e:71:99:
cc:ad:da:05:c5:ef:f5:3c:a4:1e:43:b6:d2:2b:51:
ce:59:d6:8b:1f:4b:54:81:06:6c:04:13:23:e3:1c:
30:42:c4:19:23:d0:1e:9d:94:35:c3:7c:fa:b1:6a:
40:f2:af:03:67:53:55:fa:c6:0c:18:24:49:37:95:
2b:ab:c0:f9:76:8e:62:1f:7d:b5:6c:66:8f:1e:3e:
3a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0F:CB:B6:E7:4B:A3:B1:7B:A3:5C:31:32:04:B6:33:A9:96:A3:2A
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/CQ_LtudLo7F7o1wxMgS2M6mWoyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.246.0/24
Signature Algorithm: sha256WithRSAEncryption
81:57:22:5b:25:48:1e:9f:73:cf:5b:42:8b:a4:f7:8f:d6:e6:
77:53:cb:06:19:24:17:fd:84:01:54:a9:7e:b6:13:61:59:75:
3e:0d:94:01:eb:d3:83:90:b6:cb:9b:8b:21:41:da:3c:50:b2:
30:22:78:a4:46:5e:b3:03:b9:bd:b8:ca:1b:5c:60:d1:c7:c0:
49:a3:9e:10:08:17:92:a3:79:7e:36:46:0c:b8:a7:3d:e0:80:
81:b5:85:a6:ba:9d:b4:d0:b9:72:2c:90:ff:5b:e0:d3:ac:c9:
0d:1c:62:33:a5:54:72:c1:9b:0f:db:20:77:de:89:f8:20:16:
42:f6:19:1a:8b:01:04:82:3b:62:28:47:61:86:16:77:9b:1a:
56:6a:d3:fd:85:97:45:80:0b:a6:9a:ea:7a:0a:fd:8a:65:a0:
a9:7d:d6:3f:63:40:e4:7e:02:15:53:4f:55:c1:81:24:bf:09:
4e:64:fd:58:8c:6a:72:7b:e5:37:38:16:5f:11:cc:6b:b9:34:
00:05:ed:e9:aa:5c:4c:13:8a:67:be:cf:df:95:9c:48:86:d6:
a0:46:46:91:1f:4b:a1:a1:60:a0:30:0a:5d:f1:1c:3d:86:f9:
ab:9c:3f:38:77:fb:a9:65:b2:16:72:94:74:0c:da:39:36:a3:
11:7f:8f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:08:53 2024 by rpki-client on console-ams.rpki-client.org