Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/sJaKPRz78lEVo_29WYlLJNsixaY.roa
File: sJaKPRz78lEVo_29WYlLJNsixaY.roa (raw, json)
Hash identifier: 0bOlOxUZfBvnxg+gI9xl32TvMSkTTsFqWMZE9XUH/es=
Subject key identifier: B0:96:8A:3D:1C:FB:F2:51:15:A3:FD:BD:59:89:4B:24:DB:22:C5:A6
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 018CC56E29FD666B52DD8E20506EA0BEF4DB
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/sJaKPRz78lEVo_29WYlLJNsixaY.roa
Signing time: Mon 01 Jan 2024 14:29:40 +0000
ROA not before: Mon 01 Jan 2024 14:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213373
IP address blocks: 109.205.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:29:fd:66:6b:52:dd:8e:20:50:6e:a0:be:f4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Jan 1 14:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0968a3d1cfbf25115a3fdbd59894b24db22c5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e0:02:f3:5f:93:a2:fb:1f:17:5b:5f:51:e9:
83:c0:11:da:ec:e6:4a:25:e8:19:98:54:bf:77:cb:
36:15:a7:c4:eb:db:4d:61:67:cf:04:18:ee:f7:eb:
44:d4:5c:30:e7:25:86:57:d6:07:71:72:64:b5:57:
63:eb:13:0f:2c:ac:e7:72:33:2a:79:8a:ec:b1:65:
5a:96:dc:51:a2:96:a7:f7:cc:5c:cb:79:74:6d:95:
f0:2b:53:5a:c6:ce:ce:8a:75:7b:8c:a3:32:99:f4:
2a:6e:02:1c:f7:4b:71:56:4e:36:60:f6:87:ed:3b:
65:98:1b:c5:dc:36:9e:b1:83:8c:d8:57:6e:87:fd:
14:74:9e:a1:73:d0:aa:e0:b2:e1:51:4a:b8:f9:f8:
ae:6b:c8:95:33:93:e4:8b:3f:2c:28:7d:50:15:1f:
59:7c:a5:38:22:79:7f:58:47:30:a3:ee:ab:44:97:
68:08:d7:bf:6a:ab:73:b6:28:12:33:ab:f3:b7:a3:
be:c3:07:58:86:0e:14:3a:2a:a0:89:fb:5d:2c:f0:
6b:a0:7c:e5:03:8f:79:85:c7:54:6a:0d:18:f7:72:
60:7f:2f:a1:a4:0d:f4:1e:98:b5:21:b6:03:b4:19:
ad:5a:3b:63:47:4c:d4:6e:9c:bc:14:82:f7:d7:9a:
ca:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:96:8A:3D:1C:FB:F2:51:15:A3:FD:BD:59:89:4B:24:DB:22:C5:A6
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/sJaKPRz78lEVo_29WYlLJNsixaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.187.0/24
Signature Algorithm: sha256WithRSAEncryption
75:d2:bf:86:85:f9:8f:b3:ae:8e:c4:40:5f:3a:eb:f6:18:cd:
45:2e:a1:09:68:c3:ce:8c:81:29:47:aa:f0:a7:54:89:b0:9f:
3d:c4:8d:8a:6d:86:c3:71:6e:c4:6b:ee:f6:4a:00:04:64:8f:
09:d3:67:5d:18:24:b1:de:63:96:fc:dc:e8:f2:24:0f:e8:01:
1d:14:1f:36:bc:89:74:e2:bc:ca:14:34:ec:ba:fe:68:97:15:
0e:64:3d:f6:12:88:d0:1b:e2:b8:85:46:98:97:bf:25:76:a7:
d5:ca:88:87:66:27:14:18:78:ab:0d:03:91:0b:92:42:29:13:
a2:f6:ac:7f:96:c1:d9:3e:ee:4d:eb:3e:de:3b:b1:81:a3:1e:
46:c8:f6:6e:bf:5f:ba:eb:fa:e7:de:4b:23:34:44:f3:c6:ce:
56:bf:7b:3d:cb:19:cb:d8:c0:c1:31:56:8c:98:8b:f8:71:7e:
05:9c:b1:42:82:7d:af:d0:b0:34:78:d5:d7:7d:8a:dd:09:52:
a6:1e:2c:d4:dd:07:ec:ab:66:69:3e:02:40:c0:f2:ec:cf:a1:
39:66:7f:99:b3:41:ab:cd:98:dc:7e:15:ca:7d:04:f8:28:bd:
b9:63:cc:84:05:5a:90:8f:9f:a7:62:d9:1e:e1:97:d0:0d:af:
62:c8:ed:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 21:40:27 2024 by rpki-client on console-fra.rpki-client.org