Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/k-o6HY76KkWUPQVkYuILk1XIAZ8.roa
File: k-o6HY76KkWUPQVkYuILk1XIAZ8.roa (raw, json)
Hash identifier: uY+dCx6fXStabtM3zO1/3eEjXZ8CDjG7a2rNDBqiOIY=
Subject key identifier: 93:EA:3A:1D:8E:FA:2A:45:94:3D:05:64:62:E2:0B:93:55:C8:01:9F
Certificate issuer: /CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357
Certificate serial: 018DC0EAAFECF5FC9A4FA5A21EC577CED276
Authority key identifier: 9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/k-o6HY76KkWUPQVkYuILk1XIAZ8.roa
Signing time: Mon 19 Feb 2024 10:30:22 +0000
ROA not before: Mon 19 Feb 2024 10:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215677
IP address blocks: 109.207.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 20:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c0:ea:af:ec:f5:fc:9a:4f:a5:a2:1e:c5:77:ce:d2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357
Validity
Not Before: Feb 19 10:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93ea3a1d8efa2a45943d056462e20b9355c8019f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9e:a7:bc:fd:4d:52:57:5f:28:ec:2d:6b:62:
ca:bc:ca:fd:74:c8:ae:c1:a3:4c:30:73:10:51:42:
f3:dc:92:4c:89:c3:b7:ef:11:a6:24:b1:1a:0f:68:
23:1c:29:2a:75:c8:81:63:71:e8:94:b1:c0:66:65:
9a:f3:d2:91:bc:1f:d8:f0:d6:e3:2d:d9:27:46:e0:
84:5d:26:d1:e6:9f:74:6f:2c:42:4c:ba:6d:42:4d:
f1:05:7e:c6:0b:9d:d1:e3:37:49:d8:18:21:32:5c:
43:30:7a:4c:51:44:bc:01:3c:3f:b3:d4:90:cd:06:
2e:e7:41:76:02:23:64:de:b6:9c:6f:c1:c0:61:f0:
a9:4b:db:fd:75:39:d9:7b:33:80:05:68:1e:7d:f8:
9e:ac:f6:8c:36:7c:82:1b:00:c6:fd:28:eb:bb:b5:
79:33:0a:04:47:a7:7b:99:76:a9:54:5b:22:04:90:
d9:de:f9:76:e3:11:3c:82:c5:4d:6c:cc:13:0f:28:
97:b5:8b:cf:24:2c:09:f9:e1:a2:c7:4b:0b:47:f0:
64:e5:0e:36:58:82:88:92:c7:dd:1e:f1:07:ee:94:
f8:5b:42:29:f8:70:c5:52:7d:35:cb:af:3d:0e:cb:
59:40:aa:d8:a7:17:c8:c7:35:03:f4:8a:30:50:13:
57:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EA:3A:1D:8E:FA:2A:45:94:3D:05:64:62:E2:0B:93:55:C8:01:9F
X509v3 Authority Key Identifier:
keyid:9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/k-o6HY76KkWUPQVkYuILk1XIAZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.207.240.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:92:6b:0f:e3:6a:98:eb:c1:19:58:4b:5f:d5:9d:1e:63:7b:
89:cc:f4:5e:21:85:16:64:88:ec:7f:34:b7:39:8b:3e:61:8f:
0c:c0:df:33:dd:c2:9d:75:fc:6e:b9:97:a4:de:17:86:21:39:
95:a6:26:b4:ca:09:02:11:c0:66:a4:30:32:27:c1:61:ff:71:
b4:88:7e:72:d2:64:4d:88:a9:9f:ba:ba:01:5b:9e:b0:71:ab:
e8:6c:5b:44:86:f4:46:3b:69:c1:db:3b:ae:6b:72:39:e3:1a:
96:6c:8d:03:2f:cb:3d:cd:44:e3:66:bb:ae:d2:f4:94:b9:ef:
59:57:26:f2:80:3f:34:5d:15:d0:c3:98:5c:05:93:64:69:7c:
8e:6f:ec:5a:08:f8:c7:5d:90:a5:1b:a5:94:83:c3:80:d7:73:
ad:f4:0c:4f:fb:00:db:af:a2:bf:8a:d9:43:f6:67:57:75:3e:
c1:15:ad:60:7c:d0:07:0f:24:27:49:b1:c0:4f:f8:9a:7d:7b:
ea:0e:aa:86:e0:13:b6:53:e0:9a:40:7b:dc:d6:20:12:ba:26:
f6:3a:89:32:63:b9:61:54:b9:e0:51:a3:54:c4:b7:d3:c1:1f:
c7:f2:63:51:ec:99:d8:1b:9c:4b:f0:e5:17:c0:70:f1:f9:87:
30:0d:de:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:41:44 2024 by rpki-client on console-fra.rpki-client.org