Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/LgXCq0jJZ_M-zfnCYyo8vXAe66E.roa
File: LgXCq0jJZ_M-zfnCYyo8vXAe66E.roa (raw, json)
Hash identifier: 7gzyFDLyyr4x31Uf61wE3VwYDI3YGcaIrUdY5ceSmUo=
Subject key identifier: 2E:05:C2:AB:48:C9:67:F3:3E:CD:F9:C2:63:2A:3C:BD:70:1E:EB:A1
Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456
Certificate serial: 01914C4CB005D4311B6954C1C7B2211635F4
Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/LgXCq0jJZ_M-zfnCYyo8vXAe66E.roa
Signing time: Tue 13 Aug 2024 15:12:59 +0000
ROA not before: Tue 13 Aug 2024 15:12:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216246
IP address blocks: 109.107.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4c:4c:b0:05:d4:31:1b:69:54:c1:c7:b2:21:16:35:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456
Validity
Not Before: Aug 13 15:12:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e05c2ab48c967f33ecdf9c2632a3cbd701eeba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:12:9a:02:04:b8:74:de:2b:8f:66:9f:1e:4f:
45:a7:ba:5e:cd:21:b4:01:3b:03:55:b0:a1:fb:70:
55:87:64:26:fd:80:ab:88:a8:de:7a:dc:89:8e:dc:
62:09:0a:c7:91:4e:77:91:52:4f:22:96:4f:77:39:
2d:f5:d2:bb:5e:04:58:77:1f:8f:8e:b4:b6:ca:e0:
63:ac:0c:15:08:33:4e:34:6e:83:a5:bb:a8:92:7b:
c7:8a:a6:7f:0a:e1:85:a7:73:a8:dd:d3:76:dd:5c:
16:d9:bb:da:02:66:f6:ca:7a:7c:2c:74:41:ad:19:
05:d1:7b:ff:af:b1:24:bf:ad:21:c9:00:8f:94:1e:
85:55:f7:b4:11:6f:ac:14:f3:3d:20:69:b3:27:5a:
66:f7:83:d0:09:c0:d9:b4:21:4b:4c:7d:91:aa:f3:
6f:84:a4:48:e4:75:12:ea:1a:c8:68:ea:7c:d9:21:
ec:95:24:3b:79:91:64:ff:94:b7:7a:1e:78:3e:6d:
08:12:2f:31:97:e9:a2:77:cc:c0:b4:8e:0d:62:ab:
e9:ed:92:fe:30:32:7a:2b:4c:c4:80:9e:31:3d:cc:
f5:b5:26:8d:4b:80:95:2f:f4:c5:89:5e:14:a6:fe:
09:6d:c6:79:ec:e2:0c:4e:60:f8:75:ad:67:7f:13:
c4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:05:C2:AB:48:C9:67:F3:3E:CD:F9:C2:63:2A:3C:BD:70:1E:EB:A1
X509v3 Authority Key Identifier:
keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/LgXCq0jJZ_M-zfnCYyo8vXAe66E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.189.0/24
Signature Algorithm: sha256WithRSAEncryption
94:99:e1:1b:fa:e6:23:eb:f1:29:46:4d:2e:64:9b:92:25:6e:
df:a2:1c:a9:04:57:db:02:7c:b1:5b:6c:fd:1f:1e:60:44:b0:
16:8c:42:17:61:79:8a:2c:03:a8:78:73:fd:a2:dd:4e:64:a8:
ec:ea:d0:b2:77:e2:ca:c6:69:01:64:be:8c:be:fc:2d:33:b1:
3c:76:a5:b1:63:e9:42:25:0c:df:fb:2e:8e:68:47:25:73:30:
bb:22:d0:0e:d1:92:06:e3:f0:a5:e6:5c:46:24:11:16:ae:37:
db:5b:8a:a8:b6:08:83:e4:a3:71:cb:17:d7:59:99:91:88:4c:
5e:f3:8e:6a:b9:5c:b8:a7:fd:f6:40:fa:72:5e:f1:98:c9:26:
c9:e9:6c:ac:2c:d7:3b:6f:ce:53:07:bf:6b:36:15:38:20:94:
2a:62:ba:0c:a3:72:92:cd:37:67:d8:fe:1b:ed:76:1d:68:b9:
dd:0f:85:5b:c4:7a:62:bc:c6:df:2e:81:25:4c:23:9c:73:5c:
ee:18:88:e1:98:db:0d:c1:a9:6b:08:d9:03:8a:1c:59:d5:1a:
e9:62:62:56:18:73:eb:28:23:50:66:1e:2e:84:74:83:99:83:
84:ae:7b:3f:86:9c:83:8e:6a:5b:af:3f:26:41:b8:67:19:0a:
c2:7a:c3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:57:51 2024 by rpki-client on console-fra.rpki-client.org