Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IQ8x-i7F7tjZ_jIiwfsIa149qIg.roa
File: IQ8x-i7F7tjZ_jIiwfsIa149qIg.roa (raw, json)
Hash identifier: SUadBkKJjbr+XtYe/UkTulZ6D+LqTtTMyJCEmPGACrg=
Subject key identifier: 21:0F:31:FA:2E:C5:EE:D8:D9:FE:32:22:C1:FB:08:6B:5E:3D:A8:88
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DE469B16F5DC27F1AD2FED4B8F4C44BAD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IQ8x-i7F7tjZ_jIiwfsIa149qIg.roa
Signing time: Mon 26 Feb 2024 07:55:48 +0000
ROA not before: Mon 26 Feb 2024 07:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 11938
IP address blocks: 109.206.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e4:69:b1:6f:5d:c2:7f:1a:d2:fe:d4:b8:f4:c4:4b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 26 07:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=210f31fa2ec5eed8d9fe3222c1fb086b5e3da888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0c:7d:7b:88:68:04:dd:a5:e9:77:f3:6a:97:
c9:e2:44:5f:44:f1:af:73:8f:3b:4a:f1:ae:8a:2b:
23:c4:7e:e7:53:8a:ea:9a:4b:28:f8:05:91:67:9d:
ad:7c:e4:c3:57:cd:25:81:a9:1d:f4:ae:68:be:40:
76:12:51:be:22:60:0d:ca:a3:ca:25:16:3c:6f:dc:
b8:f4:bb:55:14:57:eb:35:ca:ad:2c:a7:8d:16:7c:
75:39:75:c9:d8:ea:16:46:31:d8:12:33:79:77:e5:
08:99:e1:fe:52:f3:6a:f0:ca:89:01:07:da:b8:63:
a7:45:95:14:20:d6:90:ac:69:21:c7:ba:81:c9:b6:
c5:0b:f0:6d:27:fa:69:1b:b5:cb:23:0f:c3:0f:91:
be:38:f1:f0:4d:7f:b1:ac:a2:2e:50:48:56:a4:71:
b6:f8:fe:47:51:2b:cc:69:95:2d:d9:af:d5:de:dd:
34:41:22:8c:70:b4:58:d2:16:7a:6e:fa:7e:11:2a:
c7:71:96:6f:73:4a:15:13:0a:f5:a8:b9:35:64:59:
a2:9d:80:b4:ba:0d:55:61:7a:99:22:a2:64:88:96:
c0:eb:9e:c6:b2:85:43:42:00:a7:30:39:25:bd:54:
6e:5d:2b:ef:7f:c9:64:60:e1:ed:83:2c:a6:18:e1:
39:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0F:31:FA:2E:C5:EE:D8:D9:FE:32:22:C1:FB:08:6B:5E:3D:A8:88
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IQ8x-i7F7tjZ_jIiwfsIa149qIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.206.237.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:66:0c:36:31:30:b9:ce:77:0e:09:6c:d8:27:e6:33:26:f6:
a5:98:04:ef:bb:f5:81:9d:c0:1e:f8:74:02:e1:60:94:13:4c:
da:9f:d7:80:31:01:e1:82:d5:db:14:4e:1d:8f:ac:14:e5:d2:
d7:46:05:27:b0:07:74:93:8a:9f:df:45:27:95:73:ea:cf:42:
61:22:99:34:4d:41:94:6a:57:ac:2e:e9:5e:44:95:d5:62:3b:
87:1a:d5:3a:3e:c9:6c:ed:65:9c:88:db:79:ef:eb:d1:63:12:
12:c2:90:a1:31:f5:a0:55:f3:e8:0d:da:60:da:67:3f:a9:c1:
ac:3c:78:aa:df:e5:3b:5a:df:b7:6d:2e:7e:63:36:f6:f2:ca:
11:b9:30:99:86:8b:77:9a:2b:c8:f9:7b:2d:7b:b7:13:a4:58:
92:0c:3d:89:31:ea:5f:b2:08:a3:1c:86:c0:95:97:fa:e6:cd:
34:45:b6:4f:cc:33:9f:59:e0:d6:63:2a:5f:3a:9b:74:3f:54:
e5:c1:12:34:79:d0:17:e4:69:55:98:55:48:f3:7f:c4:d8:ee:
5e:a2:30:e3:ea:34:16:67:a0:cf:6c:6e:44:e4:c4:32:28:8c:
ee:66:9e:20:01:ab:0c:45:36:12:5f:d2:c3:40:e2:71:e4:73:
8b:b9:2f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:04:19 2024 by rpki-client on console-ams.rpki-client.org