Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/IQewFQa_K0TGHTrWI_okY4H7cnU.roa
File: IQewFQa_K0TGHTrWI_okY4H7cnU.roa (raw, json)
Hash identifier: ZoSFfD3SU/iDeRzVxyToYLtL9onxIPk2EzFScm/Nmls=
Subject key identifier: 21:07:B0:15:06:BF:2B:44:C6:1D:3A:D6:23:FA:24:63:81:FB:72:75
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018E3989069804DF7B09C343D335E420E4F0
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/IQewFQa_K0TGHTrWI_okY4H7cnU.roa
Signing time: Wed 13 Mar 2024 20:37:45 +0000
ROA not before: Wed 13 Mar 2024 20:37:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 109.72.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:39:89:06:98:04:df:7b:09:c3:43:d3:35:e4:20:e4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Mar 13 20:37:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2107b01506bf2b44c61d3ad623fa246381fb7275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:78:2e:b3:17:b7:7a:d1:77:07:fc:85:b0:87:
44:38:01:39:85:e4:6f:71:22:ba:54:2e:12:fa:32:
b4:11:ff:6a:4d:16:81:88:96:72:f7:fe:cd:b4:91:
11:d4:17:ef:c3:53:58:19:c5:87:8f:4a:2b:6c:02:
2e:2a:19:0d:e9:af:5e:9e:fd:42:c6:cb:06:b2:7d:
00:6e:89:79:0e:ab:07:de:3b:f2:65:9f:af:3d:9c:
a1:c5:2a:20:2b:e8:78:d8:64:4c:8e:08:bd:a2:ae:
aa:e8:ce:00:ea:ec:76:84:4a:11:5b:14:75:72:7c:
ff:c9:bf:1c:97:25:3d:4c:a6:65:ee:11:46:97:27:
c0:1c:2a:ee:af:e6:f8:32:25:47:06:45:75:bd:67:
54:10:f1:c8:e0:ad:79:8a:55:ee:51:76:57:26:e6:
57:7a:c1:2e:d2:8b:c6:87:f6:5f:51:6d:7e:fc:f3:
a2:ba:08:50:3b:4c:24:73:ad:a2:e8:9a:c0:a3:0c:
33:a3:6a:b9:8c:17:47:4e:42:24:de:61:95:14:4e:
9f:6c:f9:f6:1a:e4:5c:49:30:94:ad:8e:1d:b4:42:
b1:e8:69:0a:dc:47:59:dd:6d:ea:5e:59:09:dc:67:
57:0b:1f:6c:aa:e4:f4:52:85:fe:79:d3:9a:20:2e:
bc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:07:B0:15:06:BF:2B:44:C6:1D:3A:D6:23:FA:24:63:81:FB:72:75
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/IQewFQa_K0TGHTrWI_okY4H7cnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.112.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:68:55:8b:1e:c0:52:e5:53:cd:db:4f:db:23:f3:42:e2:ea:
82:4e:70:29:3f:5a:0c:42:10:fa:0d:62:9e:95:47:8d:37:a1:
2a:f5:25:61:47:0d:e1:79:b5:34:4d:be:f5:ca:e2:22:5b:65:
98:eb:2a:40:cf:b1:7b:c3:71:e8:ba:35:4a:a3:07:b3:1a:27:
8f:51:7f:9e:b5:23:65:e6:41:c0:dd:12:02:ed:87:4b:80:7b:
66:39:d8:55:8e:65:98:45:7b:35:a8:5d:13:a7:4e:b5:72:83:
af:68:04:39:8e:fd:85:64:0e:44:24:5a:b3:c2:1a:9f:f3:46:
80:93:d5:36:7b:2f:50:1e:f9:52:06:d3:fe:9e:c3:3f:3c:8f:
25:1d:aa:9c:d8:cc:a0:7d:18:86:da:ee:4f:77:0d:f2:9b:35:
cb:d8:b9:3c:57:e1:fa:26:14:b1:cd:cc:44:f8:37:e6:15:82:
5c:21:6f:0c:74:f4:9a:0a:8e:6b:8f:75:8d:31:aa:8d:90:0a:
1d:10:15:0b:a0:bb:cf:c8:07:11:9f:cb:8f:a9:0d:f0:94:83:
25:df:25:7e:ae:f4:7d:e0:94:cb:66:35:96:6d:a2:7e:73:1c:
c5:49:8d:f0:5a:d5:a8:d9:02:44:e1:92:bf:b3:61:ce:c5:c9:
8a:58:1a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:49:53 2024 by rpki-client on console-fra.rpki-client.org