Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/t7Q9dh5QzcR71wi6jcb-CqF0ap8.roa
File: t7Q9dh5QzcR71wi6jcb-CqF0ap8.roa (raw, json)
Hash identifier: pbtX+KFXwwmGzV1Nb7OCYe4DtNI6RDSYwdNIchNjruQ=
Subject key identifier: B7:B4:3D:76:1E:50:CD:C4:7B:D7:08:BA:8D:C6:FE:0A:A1:74:6A:9F
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 018CC56EE1009C06F21486B65A0EB8C2C815
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/t7Q9dh5QzcR71wi6jcb-CqF0ap8.roa
Signing time: Mon 01 Jan 2024 14:30:27 +0000
ROA not before: Mon 01 Jan 2024 14:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212335
IP address blocks: 109.105.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 01:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e1:00:9c:06:f2:14:86:b6:5a:0e:b8:c2:c8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 1 14:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7b43d761e50cdc47bd708ba8dc6fe0aa1746a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:98:2c:4f:b0:a8:87:47:16:e3:ee:7c:a4:
69:64:dd:b2:b3:a9:d7:79:a9:8d:b8:8e:fa:51:fc:
bb:eb:bf:98:9a:1c:1a:aa:5b:11:e2:1d:6f:4f:41:
88:9d:5b:dd:95:bd:42:a8:61:4d:e0:36:18:16:ec:
ab:e0:24:bf:d5:0d:eb:50:86:c8:1e:a6:ec:1d:54:
98:94:3f:07:1b:fc:bc:37:ee:79:b0:67:66:b2:ba:
a7:b4:3c:88:48:20:78:44:89:88:c1:99:b5:71:cc:
40:40:d7:75:38:ba:ce:dc:59:d4:2c:97:17:21:6e:
b1:9a:a1:81:a5:b1:30:90:c8:0e:6c:d6:cb:3c:c7:
1d:22:3c:96:de:f5:d4:27:5c:c2:0b:a5:8d:31:5c:
f3:68:e1:ad:21:6c:77:e0:b4:e9:7f:a8:0d:3e:15:
81:bc:c2:6b:2d:16:cf:68:77:b9:ff:17:6f:63:7c:
d9:14:11:7a:b7:68:22:77:04:2d:38:23:fd:0f:ea:
c9:f1:50:99:df:c3:d2:1e:3a:64:59:cc:f7:30:c9:
c2:37:d1:4d:d0:bf:8d:c8:9f:8e:29:17:2b:c8:bc:
ab:90:d9:1c:46:1f:67:cb:19:b8:d8:4f:fa:c5:01:
df:74:a8:11:43:ca:89:4e:cc:bb:33:aa:1b:83:86:
d0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B4:3D:76:1E:50:CD:C4:7B:D7:08:BA:8D:C6:FE:0A:A1:74:6A:9F
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/t7Q9dh5QzcR71wi6jcb-CqF0ap8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.192.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:06:36:29:60:9c:6b:41:87:b2:34:69:e4:57:5d:ef:ac:93:
b4:54:a0:39:f1:d1:1f:9f:b5:6d:d6:cf:16:02:41:cd:4d:d5:
df:f3:7b:4d:4d:77:c5:f7:80:fb:fb:b7:24:61:99:bf:88:01:
59:fb:ff:c1:7b:86:82:2f:4e:af:d3:ae:ea:92:9e:94:c8:e4:
b1:53:b9:0e:b5:99:7b:bc:ff:80:37:c5:78:c2:8f:46:fa:44:
66:f5:01:3e:7e:76:04:11:d1:1c:c4:53:dd:a9:a6:91:16:8b:
f4:37:e9:73:57:ab:d0:d1:e1:43:40:7b:34:27:0c:13:ea:7f:
9c:f9:85:21:fa:f5:de:54:84:c5:c1:c8:1c:1c:f1:26:45:e8:
63:66:51:f6:2d:a1:30:86:f2:54:f8:62:61:69:e7:a8:25:fd:
51:de:c1:44:e9:60:2e:c4:23:d4:f2:58:f5:11:0b:85:58:95:
ab:50:17:ae:cf:be:cf:81:4b:2f:78:14:3a:81:b3:ef:7f:4e:
f5:df:6e:03:2b:84:62:8b:6d:a7:5a:db:7d:c5:c3:95:9f:2c:
9c:9b:58:79:34:93:53:84:78:36:c8:8b:6e:4d:ee:4c:8d:4b:
ca:92:33:b5:ba:62:c1:52:82:78:3f:a1:37:33:f7:68:8b:ec:
f1:20:6e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 09:41:59 2024 by rpki-client on console-fra.rpki-client.org