Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/EAG1Ead1kCgvnMsktALcwBSrh7w.roa
File: EAG1Ead1kCgvnMsktALcwBSrh7w.roa (raw, json)
Hash identifier: PZwaCMGkqVb0vPiW3gSGMH9wEM+hfYpX6U3XcjqD6Ow=
Subject key identifier: 10:01:B5:11:A7:75:90:28:2F:9C:CB:24:B4:02:DC:C0:14:AB:87:BC
Certificate issuer: /CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
Certificate serial: 01901031C1DCDE20CFCF2196D28EB76D01D2
Authority key identifier: 2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/EAG1Ead1kCgvnMsktALcwBSrh7w.roa
Signing time: Thu 13 Jun 2024 06:03:34 +0000
ROA not before: Thu 13 Jun 2024 06:03:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8829
IP address blocks: 109.204.136.0/21 maxlen: 21
109.204.144.0/20 maxlen: 20
109.204.168.0/21 maxlen: 21
109.204.192.0/18 maxlen: 18
2a00:8780::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:10:31:c1:dc:de:20:cf:cf:21:96:d2:8e:b7:6d:01:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cb4291df97963c5a9b732b1396f0f1c887504d6
Validity
Not Before: Jun 13 06:03:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1001b511a77590282f9ccb24b402dcc014ab87bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:72:d0:30:47:c2:50:27:33:dd:93:64:e8:de:
a7:94:d0:b8:0e:56:a5:86:21:2d:af:21:27:3b:72:
0c:03:e1:b7:69:c7:e5:d2:bb:53:73:f8:8e:f8:8b:
10:7a:7a:9c:14:83:e4:2b:d7:25:ba:8f:13:da:3e:
0a:55:29:b3:9b:92:72:55:ea:4a:4d:8f:e7:4f:5c:
f3:57:07:a9:b8:dc:fe:24:1a:a0:37:f3:1a:39:f8:
16:93:2c:8b:5d:94:43:36:9e:ee:4c:2a:d3:b1:1c:
64:69:bc:a1:0e:e7:45:2a:a2:46:88:a8:42:7b:cd:
49:93:fd:39:31:3d:6c:6f:4e:0a:6f:61:ea:a8:2e:
9a:6e:c8:7a:87:32:eb:d5:59:2f:a1:e0:6e:84:11:
4b:98:b6:96:c4:6a:d9:1c:17:b6:b9:35:cc:fc:54:
f2:07:93:5a:9e:e0:c2:2c:f2:20:cb:e1:26:63:54:
c4:ae:65:24:d9:35:93:98:62:fe:f7:ae:a1:65:a5:
c7:50:7e:b6:a9:60:58:a5:33:1c:7b:63:8a:c7:a6:
4b:6b:74:9d:76:6d:1f:03:59:d5:be:e4:f6:10:0b:
46:63:d7:5e:53:a9:ac:96:0a:54:69:0a:3a:40:02:
85:4c:71:6e:09:de:da:68:36:a4:87:2c:56:31:5d:
6c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:01:B5:11:A7:75:90:28:2F:9C:CB:24:B4:02:DC:C0:14:AB:87:BC
X509v3 Authority Key Identifier:
keyid:2C:B4:29:1D:F9:79:63:C5:A9:B7:32:B1:39:6F:0F:1C:88:75:04:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLQpHfl5Y8WptzKxOW8PHIh1BNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/EAG1Ead1kCgvnMsktALcwBSrh7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f9684e-09e2-49cc-851d-af4c06f31aff/1/LLQpHfl5Y8WptzKxOW8PHIh1BNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.204.136.0-109.204.159.255
109.204.168.0/21
109.204.192.0/18
IPv6:
2a00:8780::/32
Signature Algorithm: sha256WithRSAEncryption
19:19:44:9a:ac:b0:60:3e:73:ca:31:69:34:82:47:18:24:8e:
0d:f5:8d:50:d0:43:9b:bf:c8:ed:df:d0:57:10:61:12:65:84:
dd:b2:7a:3e:7b:a2:9b:5b:0c:af:53:3a:90:61:fb:bf:09:c2:
a1:81:d0:be:1b:ab:b0:27:7d:5a:5b:9b:ab:ec:87:78:09:41:
3f:4e:bd:bb:cb:48:f4:57:ce:78:ad:d6:ae:a1:8a:b8:cd:ab:
d2:b6:22:0c:ef:93:81:9c:7a:50:64:90:c7:82:b8:c5:02:42:
76:15:a7:2d:8b:96:b0:23:23:f8:61:0f:8a:26:b8:60:e1:2c:
1c:b8:9d:27:be:e9:a3:b0:b8:ea:ef:41:f6:2c:d3:81:bd:ab:
ad:ad:36:e7:47:b8:9e:ac:43:a5:73:95:19:b1:bb:fb:a2:25:
f1:a5:6c:00:46:90:0c:6d:63:ca:a5:d1:52:3a:5a:16:ba:8f:
d3:0c:67:aa:9f:04:d8:5b:62:7e:96:0c:6c:09:d5:79:7a:33:
ee:f5:c0:d5:1b:d4:94:01:c2:b9:07:f4:36:cb:bc:bf:cf:e8:
95:94:91:3f:2d:84:0c:2e:4e:a7:06:06:28:d6:e0:b7:5c:d2:
70:b0:a1:55:5a:e4:1d:61:da:3f:9d:dc:31:66:fb:d3:7c:c9:
47:6d:01:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 08:37:35 2024 by rpki-client on console-ams.rpki-client.org