Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/19136e-429f-43ad-94ef-8361a8303522/1/9WD3zkJ8s9sqW7KLU4H8ug_TSz8.roa
File: 9WD3zkJ8s9sqW7KLU4H8ug_TSz8.roa (raw, json)
Hash identifier: SZxb0z3nenJVfFFagPGaZGDY6QdSL9cBySCBAHWYN5Q=
Subject key identifier: F5:60:F7:CE:42:7C:B3:DB:2A:5B:B2:8B:53:81:FC:BA:0F:D3:4B:3F
Certificate issuer: /CN=e47521e7b6b38abfb88bf71e9bc5a02b2eccd3b3
Certificate serial: 018CC6B8592E4F0EC3E601F81BC197DB8563
Authority key identifier: E4:75:21:E7:B6:B3:8A:BF:B8:8B:F7:1E:9B:C5:A0:2B:2E:CC:D3:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HUh57azir-4i_cem8WgKy7M07M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/19136e-429f-43ad-94ef-8361a8303522/1/9WD3zkJ8s9sqW7KLU4H8ug_TSz8.roa
Signing time: Mon 01 Jan 2024 20:30:19 +0000
ROA not before: Mon 01 Jan 2024 20:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202194
IP address blocks: 185.50.188.0/22 maxlen: 22
2a04:c000::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/19136e-429f-43ad-94ef-8361a8303522/1/5HUh57azir-4i_cem8WgKy7M07M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/19136e-429f-43ad-94ef-8361a8303522/1/5HUh57azir-4i_cem8WgKy7M07M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HUh57azir-4i_cem8WgKy7M07M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 04:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:59:2e:4f:0e:c3:e6:01:f8:1b:c1:97:db:85:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47521e7b6b38abfb88bf71e9bc5a02b2eccd3b3
Validity
Not Before: Jan 1 20:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f560f7ce427cb3db2a5bb28b5381fcba0fd34b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:04:dd:e1:ec:c0:fb:9a:b3:bc:fd:5b:87:
5c:5b:47:dc:75:03:7e:d0:0b:4c:83:71:73:4c:d4:
ee:17:4a:ec:d7:86:e5:10:a3:9a:99:4f:a7:a5:39:
4c:79:77:66:bf:0a:6c:eb:53:41:06:5d:9f:c1:1d:
22:65:7e:7d:97:5c:d3:af:ca:58:6c:6e:86:26:85:
38:cf:b8:c9:a3:3e:36:bd:09:ce:d4:7d:fa:a6:48:
bf:04:94:c7:c9:07:0e:26:98:65:8e:24:4c:2f:2c:
9f:05:4d:1b:c6:82:3f:ff:ba:ef:ce:f7:68:ff:d1:
a5:da:e9:2f:c1:df:e3:4a:5f:07:e1:c9:55:bb:d2:
d4:ca:92:6a:6a:63:a2:ba:bf:6b:01:7d:e4:c5:65:
0c:d9:a8:69:93:71:ab:bb:e0:62:39:92:86:d0:40:
81:b5:b9:f4:7f:5e:f4:79:ea:ac:38:2a:54:78:ae:
22:c5:49:ee:e8:bd:c1:2e:74:cd:31:2c:b2:e4:d9:
e9:23:d6:41:96:df:d0:6b:42:bb:23:30:1f:10:73:
2f:61:70:ee:83:1a:32:10:7d:e6:fb:4c:f4:33:d6:
79:17:cc:61:f2:0d:49:b2:a7:c7:60:a0:fb:56:05:
c0:f0:d5:a5:07:e0:3f:80:57:8e:0d:c6:1c:75:68:
e8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:60:F7:CE:42:7C:B3:DB:2A:5B:B2:8B:53:81:FC:BA:0F:D3:4B:3F
X509v3 Authority Key Identifier:
keyid:E4:75:21:E7:B6:B3:8A:BF:B8:8B:F7:1E:9B:C5:A0:2B:2E:CC:D3:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HUh57azir-4i_cem8WgKy7M07M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/19136e-429f-43ad-94ef-8361a8303522/1/9WD3zkJ8s9sqW7KLU4H8ug_TSz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/19136e-429f-43ad-94ef-8361a8303522/1/5HUh57azir-4i_cem8WgKy7M07M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.188.0/22
IPv6:
2a04:c000::/29
Signature Algorithm: sha256WithRSAEncryption
1c:e1:35:63:95:0b:52:06:ef:c9:50:b7:3a:dc:0f:7f:3f:c1:
6a:8c:23:43:ef:69:13:05:be:51:db:4e:6c:08:e9:d0:60:14:
21:23:5e:b6:3b:37:d7:17:7c:0c:9a:5d:37:c2:5d:91:62:16:
37:f2:bd:3c:91:59:d8:0a:d8:7b:96:74:19:c2:8b:45:9e:51:
8d:a2:6d:95:cd:a0:ec:83:01:b5:e9:1e:07:f5:63:f3:e5:bb:
c2:2c:76:53:d8:a9:c3:db:87:cf:89:69:3d:9b:c2:c7:0d:f3:
04:d7:3a:3f:6a:6d:3b:fb:90:17:b4:de:13:57:ac:dc:93:cc:
86:16:71:43:42:a9:01:c0:5b:5c:2f:5b:12:28:77:34:6f:37:
fa:f8:82:03:92:58:41:f5:bd:0f:c0:94:95:e8:14:e3:a1:5c:
e8:ad:86:d4:e6:53:b2:6a:75:0a:cc:21:0f:f4:35:2f:58:84:
ad:f9:96:b9:ef:2b:13:a7:82:d8:18:ee:27:6f:05:dd:d7:1f:
cf:11:09:63:77:f3:51:85:dd:25:89:bf:bf:af:82:29:c9:e9:
87:5d:61:5f:6c:10:de:65:6a:c6:9c:ca:ac:c9:40:c0:c9:d2:
15:46:a0:37:ed:05:d0:0a:8c:7d:91:99:73:56:2c:fc:5d:4f:
ea:3e:95:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 13:18:57 2024 by rpki-client on console-fra.rpki-client.org