Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/b5yZgmt0DPXJdffDCyLGcVr7tDM.roa
File: b5yZgmt0DPXJdffDCyLGcVr7tDM.roa (raw, json)
Hash identifier: k+ysiPuODnll4bpVXgxRXy7L9TIrOxPNfucgwONNsIc=
Subject key identifier: 6F:9C:99:82:6B:74:0C:F5:C9:75:F7:C3:0B:22:C6:71:5A:FB:B4:33
Certificate issuer: /CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Certificate serial: 018CC94D5E9BD841B7B5A5215D4965E31A56
Authority key identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/b5yZgmt0DPXJdffDCyLGcVr7tDM.roa
Signing time: Tue 02 Jan 2024 08:32:20 +0000
ROA not before: Tue 02 Jan 2024 08:32:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51497
IP address blocks: 109.105.138.0/24 maxlen: 24
109.105.152.0/22 maxlen: 22
109.105.156.0/23 maxlen: 23
109.105.153.0/24 maxlen: 24
185.47.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:5e:9b:d8:41:b7:b5:a5:21:5d:49:65:e3:1a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Validity
Not Before: Jan 2 08:32:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f9c99826b740cf5c975f7c30b22c6715afbb433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:4d:3d:4a:8d:ee:d7:12:2d:98:b6:01:cd:
2f:54:00:d1:9f:09:02:79:1c:a7:a9:a4:ac:b0:94:
77:7b:4b:99:2d:ca:b1:cc:e4:93:c9:6f:c7:4d:ca:
b2:93:41:26:83:3d:c3:f9:53:8b:fc:07:82:b7:1d:
31:df:bf:94:7b:c3:d1:70:7e:67:65:1e:b7:7e:d1:
4c:a9:ee:c9:88:1c:4e:07:bf:94:82:92:8f:e6:e4:
0d:47:76:0c:a6:dd:ee:8a:5a:a9:e3:78:c0:db:c1:
fe:e3:03:13:96:fe:04:4b:c6:97:11:7a:1b:b8:ba:
07:b7:4a:10:e0:56:f6:cb:9d:42:ed:9f:8c:55:43:
92:cc:66:2b:f4:b0:c1:37:63:58:17:21:20:69:e2:
35:67:12:39:8f:26:34:6c:d6:bc:54:cc:2f:75:f2:
e0:b6:5a:35:73:ee:e3:17:5b:a3:f9:ab:13:17:0b:
0c:f8:cc:c2:8d:64:f4:3c:f1:e1:24:58:64:3b:fe:
57:4e:20:70:3f:ba:ac:3a:bb:d0:b1:54:5c:05:22:
5d:b3:23:bb:11:94:83:4f:04:c3:76:79:c0:69:c5:
a7:bb:ff:1c:6e:fb:78:67:9b:f7:04:c4:fa:95:6b:
f0:dc:65:bc:9d:3d:20:ee:dc:91:ab:5d:58:fe:73:
c8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9C:99:82:6B:74:0C:F5:C9:75:F7:C3:0B:22:C6:71:5A:FB:B4:33
X509v3 Authority Key Identifier:
keyid:8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/b5yZgmt0DPXJdffDCyLGcVr7tDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.138.0/24
109.105.152.0-109.105.157.255
185.47.156.0/22
Signature Algorithm: sha256WithRSAEncryption
68:04:b5:98:db:21:34:72:3f:b6:f4:44:b6:51:90:a6:c8:db:
cd:a6:56:64:1d:fc:42:2d:34:0b:1a:fb:88:8a:29:dd:ec:67:
e0:f6:bc:81:c1:66:80:80:87:7b:d7:9a:77:57:e2:2a:88:88:
cb:42:13:e7:2e:8a:68:15:a2:4d:4d:ae:4c:c2:a3:1e:62:03:
7a:9b:4a:68:d2:c9:2f:31:f3:82:d3:48:4a:fe:00:7c:94:18:
5f:48:7b:eb:93:eb:cb:04:43:d2:c4:2f:93:5a:c8:ba:e1:96:
5a:29:2b:16:9d:2e:f5:a6:ce:75:8f:f4:f8:a1:b6:ae:22:6c:
5a:14:45:89:57:29:bc:a3:f1:6f:24:3d:30:34:5d:ba:44:32:
a7:d2:de:a0:4b:a6:d1:98:6a:ec:4e:9d:07:c7:8a:b6:d1:25:
87:45:44:ce:16:c5:6d:08:43:2b:09:aa:14:80:ab:36:f4:51:
21:e8:30:8c:3a:a8:3b:90:07:48:c9:0e:09:d8:85:89:b8:14:
0f:f8:0d:d0:c9:29:58:f7:ba:73:52:43:2a:84:ae:1f:5f:5d:
44:ef:fe:df:53:4c:4e:42:89:7d:ae:7f:3d:8b:02:7c:28:db:
88:eb:7a:8b:31:b4:af:ab:6f:4b:fc:18:78:ca:c0:e1:90:10:
28:d7:96:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:05:58 2024 by rpki-client on console-fra.rpki-client.org