Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50385.roa
File: AS50385.roa (raw, json)
Hash identifier: rl61BxII7r0J5owmMri93hsc4jY4YiL4UIzJpDaqWvw=
Subject key identifier: 67:A1:AE:FB:F2:D6:55:DA:42:F0:CD:B0:4C:09:CB:A1:35:DC:C8:F7
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5BA70097F9DEEF72331154F49B275FC66E93DBEC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50385.roa
Signing time: Sun 21 Jul 2024 08:25:44 +0000
ROA not before: Sun 21 Jul 2024 08:20:44 +0000
ROA not after: Sun 20 Jul 2025 08:25:44 +0000
asID: 50385
IP address blocks: 140.233.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:a7:00:97:f9:de:ef:72:33:11:54:f4:9b:27:5f:c6:6e:93:db:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 21 08:20:44 2024 GMT
Not After : Jul 20 08:25:44 2025 GMT
Subject: CN=67A1AEFBF2D655DA42F0CDB04C09CBA135DCC8F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b2:a2:5d:ec:fb:f7:6d:af:00:4b:55:94:56:
91:fa:8a:c8:8b:0e:aa:ad:57:2c:fe:77:d5:52:9b:
ef:0b:7a:fd:e8:33:c3:9c:c9:5c:f6:87:9e:3b:12:
bd:b6:02:63:f5:4f:77:14:37:ea:21:ee:5a:ac:4e:
e0:ad:26:b8:c6:f1:11:a2:1e:29:ba:72:51:0f:3e:
f8:1e:ce:60:1b:7e:f7:3e:3e:d4:71:cd:1d:56:fd:
ae:f5:85:f0:69:ff:0b:cb:99:1b:62:98:03:d5:58:
52:5d:7c:2c:b7:8e:75:29:39:f7:f2:c3:5a:b9:dd:
d8:38:ab:9a:fa:0a:98:8a:b2:cb:6c:54:6c:31:d6:
83:2c:40:24:89:41:14:78:28:79:53:64:cd:55:3b:
b4:b2:c6:de:94:00:cd:9a:4a:26:0f:f1:f4:d2:7f:
3f:17:fd:ed:fd:06:81:9b:44:68:69:02:95:24:bb:
74:6b:fd:c6:0e:e3:8b:07:ed:8e:61:7d:65:65:23:
85:74:e1:59:ff:cd:4c:e4:ba:f4:3d:ed:d1:21:59:
c9:51:5b:33:33:bb:ed:78:67:c0:7f:cd:a9:ec:d6:
9a:a0:8b:f5:00:ce:d5:e0:78:ea:5a:a1:a4:0c:db:
cb:f8:cf:1c:35:8d:b0:92:8c:e4:12:47:f6:39:1c:
0a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A1:AE:FB:F2:D6:55:DA:42:F0:CD:B0:4C:09:CB:A1:35:DC:C8:F7
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50385.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.191.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:ed:fe:d3:20:03:15:1d:50:de:8a:86:77:71:52:07:c3:53:
73:67:de:13:bd:62:67:59:05:b3:06:25:73:f5:02:e3:52:ba:
59:f1:69:66:65:0e:89:b9:2e:98:e7:17:7b:ae:cb:f0:0a:59:
b3:7d:76:d3:6d:67:81:e8:c6:60:a5:00:bf:2f:2c:ca:ea:c2:
89:14:83:dc:c0:38:5a:67:92:7a:5e:e8:ce:05:9b:74:04:18:
7b:d5:dd:38:86:de:f1:ff:30:b3:24:a0:79:8a:66:82:33:f6:
9d:fc:67:a6:10:55:a1:57:19:5a:0d:48:76:ac:29:7e:be:44:
de:8e:11:01:5c:1a:20:2e:cd:ee:f1:83:b1:68:2d:18:d0:7f:
4a:c6:cb:53:1e:c5:f7:c4:e0:4d:89:a7:fd:4e:ea:3e:0a:e3:
5b:dc:77:95:ff:10:d5:8d:63:28:42:3d:10:e0:4e:1c:bb:2f:
06:f9:22:62:e3:07:34:05:26:91:f0:92:53:e0:b8:4a:1c:28:
82:78:f2:5b:57:ce:4d:24:cc:be:21:43:ae:62:07:89:0b:2d:
94:45:99:ab:14:95:33:18:86:47:f3:c3:9d:4b:99:36:af:83:
f7:a5:43:ca:83:ad:61:9c:0d:ea:a4:d0:01:0d:1b:a4:39:b2:
c7:38:17:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:33 2024 by rpki-client on console-fra.rpki-client.org