Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50917.roa
File: AS50917.roa (raw, json)
Hash identifier: YVw4HrZ6uyGGkASF3ghgs1aFJtEp8kjdBwv8djZ3Tos=
Subject key identifier: 72:F0:C6:16:19:0F:85:95:DF:75:AE:A6:00:C6:38:60:C9:AC:73:8E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5B3BF0617C32419E9C372940035C7D7C97942F6B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50917.roa
Signing time: Fri 12 Jul 2024 04:02:58 +0000
ROA not before: Fri 12 Jul 2024 03:57:58 +0000
ROA not after: Fri 11 Jul 2025 04:02:58 +0000
asID: 50917
IP address blocks: 146.103.22.0/24 maxlen: 24
146.103.24.0/24 maxlen: 24
146.103.48.0/24 maxlen: 24
147.79.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:3b:f0:61:7c:32:41:9e:9c:37:29:40:03:5c:7d:7c:97:94:2f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 12 03:57:58 2024 GMT
Not After : Jul 11 04:02:58 2025 GMT
Subject: CN=72F0C616190F8595DF75AEA600C63860C9AC738E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e4:0c:d1:d0:83:8e:08:f9:9a:c9:73:47:c9:
ce:87:98:f3:b5:2e:0a:eb:d1:59:b1:b8:68:d6:61:
6b:59:7e:34:bf:3f:65:e3:a1:75:60:22:f7:da:b4:
71:06:d2:9e:f1:50:22:13:92:46:da:11:ac:8f:06:
40:0d:a7:d4:77:1e:1c:60:15:11:c5:47:f2:9c:8c:
91:2b:65:80:d0:2d:0c:49:a6:0b:17:41:19:f1:24:
45:0b:ac:71:3f:1e:be:c5:ec:f1:1a:96:d8:95:1f:
bc:03:c8:28:ab:89:90:a7:94:e8:21:f9:2f:03:dd:
8d:d9:0e:04:3b:f4:b0:ed:99:f2:2e:47:d3:6e:b5:
ef:f6:ce:8f:14:99:63:91:5b:9d:0c:0b:74:af:4f:
7d:f2:e9:b9:02:01:66:05:36:44:48:71:22:25:44:
d7:91:36:ae:bc:a8:85:d4:7b:a5:b8:5b:41:9c:08:
02:5a:43:6c:8a:08:c5:af:b7:da:c3:1a:49:81:94:
63:e7:fb:18:1f:af:bf:e6:7c:5f:1e:e5:ee:5d:81:
bf:ae:76:1f:5d:f3:7f:fe:99:2c:ae:5e:44:fb:1b:
db:8f:d1:aa:e3:e2:ce:f2:9f:33:11:83:95:51:2d:
27:2e:9e:8e:8d:f1:ef:2b:2e:67:f0:8b:19:54:22:
28:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F0:C6:16:19:0F:85:95:DF:75:AE:A6:00:C6:38:60:C9:AC:73:8E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50917.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.22.0/24
146.103.24.0/24
146.103.48.0/24
147.79.30.0/24
Signature Algorithm: sha256WithRSAEncryption
44:ba:fb:bb:5a:ba:34:e2:e0:25:28:41:f9:ad:10:16:46:16:
cf:9d:50:c7:19:ae:de:6f:e4:70:a1:dc:30:7a:ae:e6:79:79:
4d:c0:9e:60:1a:bd:7a:cc:02:18:79:a4:26:da:33:b7:ac:c6:
a2:54:8a:3a:77:11:ca:a3:09:82:5f:d1:3b:53:f1:ca:0c:26:
98:ca:4b:e9:6b:c7:9c:3f:a1:3d:c2:2c:82:e3:15:90:b9:b0:
13:8b:9d:94:87:1c:17:7f:d6:68:fa:7b:61:be:af:50:07:cb:
aa:42:17:c5:15:82:cb:38:9a:cc:18:f0:10:ac:2e:d3:0f:4f:
0c:4c:9d:1f:25:69:50:59:38:73:57:e1:d1:9a:78:50:6d:2f:
66:38:ef:ac:ce:f6:0d:17:92:71:d7:84:a4:7d:4a:a2:06:d3:
fb:c4:22:d8:85:b6:e7:bd:93:23:9b:5f:d1:2e:11:9b:e5:26:
9d:10:2f:b4:45:9a:68:f7:9c:05:e5:51:83:b3:35:23:c5:ff:
48:0a:30:5d:62:53:d0:51:6f:0b:8e:25:7b:19:11:d7:90:43:
c2:2f:3f:de:d5:36:f4:fb:1d:79:10:f0:e7:c5:d8:e6:30:8d:
4e:64:a3:aa:7f:a9:b5:2b:2a:94:63:f0:61:90:cf:97:65:58:
54:d8:73:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:19 2024 by rpki-client on console-ams.rpki-client.org