Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/0UBAJQDYkIuhm09_n_A_Kded6Vc.roa
File: 0UBAJQDYkIuhm09_n_A_Kded6Vc.roa (raw, json)
Hash identifier: wYS8X3KVAIJ/TRG1GKq6BXZkh7TiqtMLABG5Is8F3sM=
Subject key identifier: D1:40:40:25:00:D8:90:8B:A1:9B:4F:7F:9F:F0:3F:29:D7:9D:E9:57
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018EF2578787699CAB1574350B28F05B2D49
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/0UBAJQDYkIuhm09_n_A_Kded6Vc.roa
Signing time: Thu 18 Apr 2024 17:53:26 +0000
ROA not before: Thu 18 Apr 2024 17:53:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200563
IP address blocks: 109.205.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f2:57:87:87:69:9c:ab:15:74:35:0b:28:f0:5b:2d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 18 17:53:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d140402500d8908ba19b4f7f9ff03f29d79de957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:53:61:92:b0:dc:17:c0:d4:fa:0b:db:30:b8:
d2:00:e0:88:3e:46:f3:65:bf:b6:6a:92:41:80:3e:
06:5b:25:91:42:06:0d:6f:9c:92:4a:8a:71:67:e4:
6c:c6:d1:28:8e:73:c0:c7:96:3e:3c:f3:c3:4d:fb:
21:60:d3:84:2d:08:74:6f:16:a2:35:12:78:92:fc:
51:6a:af:f8:09:3e:0d:ad:3d:a5:54:29:ce:8e:90:
77:f6:c9:a3:28:e2:8d:7d:02:36:8a:80:97:47:e8:
46:da:a4:5e:41:36:a8:64:4a:1b:f8:3b:2d:1e:77:
6c:75:68:76:06:3c:fa:fe:63:91:24:48:07:e9:4d:
75:5a:bb:b0:90:52:89:ba:05:6f:b4:eb:67:b9:3c:
54:86:16:a2:a6:5f:c4:2c:a6:87:aa:71:da:27:f6:
10:1e:c2:02:e8:83:a3:51:06:f3:30:e7:33:62:2f:
4a:8e:88:9e:04:15:24:b6:27:7f:c2:21:2a:38:fc:
1e:76:21:de:da:1f:68:04:95:b3:32:e6:b1:65:c1:
a3:44:2c:6c:ff:c0:8c:07:89:a7:1a:cc:1d:bc:ca:
08:5d:7f:52:4d:a8:44:01:aa:25:84:43:69:a1:eb:
83:84:76:6b:0b:43:ee:46:19:f0:b9:fb:88:f5:99:
73:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:40:40:25:00:D8:90:8B:A1:9B:4F:7F:9F:F0:3F:29:D7:9D:E9:57
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/0UBAJQDYkIuhm09_n_A_Kded6Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.58.0/24
Signature Algorithm: sha256WithRSAEncryption
93:04:57:1d:f9:28:7d:7f:65:ae:3c:08:27:ed:4e:05:5a:e6:
5b:12:24:cc:89:0f:ea:94:78:50:1b:69:2b:ac:0b:d5:7f:ab:
e3:b0:f1:79:e5:25:ec:9b:5f:f0:74:72:e1:c1:8f:89:63:00:
c8:8d:d7:00:90:59:fc:de:3f:3a:5e:70:51:74:a7:88:65:07:
14:8e:20:40:3c:1f:1a:2a:96:93:09:be:eb:17:53:53:29:5a:
47:4b:9d:f6:e6:6a:e5:d1:5d:38:87:05:46:24:5c:50:45:a1:
76:07:df:48:3f:eb:90:57:6a:de:91:72:0a:c5:06:0c:e7:dc:
51:50:63:3d:50:be:35:6b:e8:1e:23:27:5a:27:bc:0d:25:b5:
cf:69:ab:91:cc:4d:35:1b:67:0f:f5:c3:09:8a:db:31:59:14:
80:a7:3e:7c:4e:59:00:f7:81:47:38:ee:32:b8:ae:a7:26:98:
37:44:50:40:1e:95:71:30:47:74:a6:83:80:1e:9e:27:0c:c3:
02:61:d1:f0:e2:fb:16:58:b7:4d:20:ab:0f:2d:5a:22:33:15:
75:9c:66:0d:a6:60:f6:bd:38:50:c7:39:92:b0:e8:2d:06:58:
dd:6e:91:22:14:b1:21:bc:fe:d7:40:3f:7f:57:02:b2:59:e1:
68:99:4e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:09:23 2024 by rpki-client on console-fra.rpki-client.org