Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS50104.roa
File: AS50104.roa (raw, json)
Hash identifier: P0gDx/7xXbq7zRNMpKU3RDwmlIUrnaINNjCeiuDz2H4=
Subject key identifier: FF:16:37:CB:5F:22:11:1E:FE:B5:D1:4A:CA:A9:0C:C2:4A:25:3C:D7
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 08D329F06587C9506D42A9187D27B2D204F97719
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS50104.roa
Signing time: Tue 20 Aug 2024 12:59:05 +0000
ROA not before: Tue 20 Aug 2024 12:54:05 +0000
ROA not after: Tue 19 Aug 2025 12:59:05 +0000
asID: 50104
IP address blocks: 179.61.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d3:29:f0:65:87:c9:50:6d:42:a9:18:7d:27:b2:d2:04:f9:77:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 20 12:54:05 2024 GMT
Not After : Aug 19 12:59:05 2025 GMT
Subject: CN=FF1637CB5F22111EFEB5D14ACAA90CC24A253CD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:77:91:e9:81:db:32:1e:9c:e7:d9:4c:f3:
76:d4:7e:b5:d8:49:b6:93:ab:27:bd:03:a2:f2:91:
33:fb:9d:1f:ea:88:32:ef:ce:d9:cd:4a:45:54:62:
26:77:6a:d0:2f:3c:45:4f:31:b0:af:8c:e5:1b:93:
96:78:2c:67:62:de:be:df:32:04:4d:a3:a3:08:a0:
2b:9d:a9:6e:47:e5:29:db:f4:00:97:96:6d:86:2a:
46:c4:f0:3d:1a:fc:fb:37:10:93:77:98:3b:08:51:
d3:b8:32:7e:bb:55:ea:29:c3:b6:a0:6f:0f:52:0d:
ac:99:0c:63:98:b6:fa:ce:d3:05:c3:73:a0:5b:fd:
76:f7:b0:2a:b8:c8:de:e1:f4:56:2c:32:1e:42:1e:
e6:e9:ff:28:55:fc:54:11:62:cc:b2:2a:24:fc:09:
78:9b:6c:84:d3:a2:8a:b0:96:bf:81:eb:f7:31:51:
3a:90:a5:f9:33:fe:8c:23:46:fd:b0:1f:96:0b:bb:
41:08:7d:41:8a:a2:f6:89:1a:41:08:2d:b2:4a:02:
36:44:be:58:f1:99:dd:38:47:d6:c6:66:4e:78:7d:
4c:a2:7d:d9:2c:ee:51:ca:6d:05:12:1a:c5:2b:c8:
9c:f8:a9:82:d7:e6:1f:9d:83:2e:e4:12:1b:db:a4:
13:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:16:37:CB:5F:22:11:1E:FE:B5:D1:4A:CA:A9:0C:C2:4A:25:3C:D7
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS50104.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.140.0/24
Signature Algorithm: sha256WithRSAEncryption
05:42:59:4a:e6:f0:eb:27:d8:38:be:a5:c2:1c:0e:bb:4d:e5:
c5:42:d9:cb:5d:8d:62:88:b5:b0:0a:20:57:9a:c8:a8:91:b8:
ca:6f:39:b4:df:47:53:8d:62:bc:e3:61:fc:58:99:01:37:dd:
c5:66:25:40:fe:04:4a:4f:a5:01:28:42:f7:95:71:ca:6c:df:
f4:02:42:bb:d1:8d:10:d7:cd:6a:ed:de:7a:dc:aa:9e:e1:48:
d0:27:d8:b7:32:9a:3d:8f:53:94:09:ed:b9:3c:f2:21:95:f3:
1a:c6:81:67:b4:9f:30:95:f4:7e:de:19:23:1a:6c:01:b8:93:
f7:1d:69:bb:bc:0e:d5:e1:ac:ce:a3:bc:2b:dc:e1:d4:88:35:
6c:bd:64:f1:21:db:3c:c4:3e:b5:7f:91:03:6a:3e:12:31:30:
dc:82:44:00:54:82:00:e9:50:6c:3a:ec:e8:63:3f:a2:7c:46:
d0:0a:09:c8:fd:c1:5d:21:78:9f:e7:0e:aa:72:e1:40:89:e6:
ba:91:96:05:38:a1:27:eb:f2:8b:5b:67:4f:44:70:31:16:ee:
4b:3b:a9:bd:70:8d:9e:b6:13:e9:a8:ca:2a:94:ef:57:94:dc:
93:d9:0a:35:65:9e:42:e0:9a:0e:ae:0d:94:d2:ef:1f:e3:06:
68:8f:c6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:39:59 2024 by rpki-client on console-ams.rpki-client.org