Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/qvdXNc_Ks9VAAxid9zEls1dl8bI.roa
File: qvdXNc_Ks9VAAxid9zEls1dl8bI.roa (raw, json)
Hash identifier: uSCYWwIWZ2nPvTcUNgmdfKbuxJnBBbTzBbFfxzn2fRE=
Subject key identifier: AA:F7:57:35:CF:CA:B3:D5:40:03:18:9D:F7:31:25:B3:57:65:F1:B2
Certificate issuer: /CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Certificate serial: 018CC5DBF95609F48F79C43B5999F189E27F
Authority key identifier: 4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/qvdXNc_Ks9VAAxid9zEls1dl8bI.roa
Signing time: Mon 01 Jan 2024 16:29:36 +0000
ROA not before: Mon 01 Jan 2024 16:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196903
IP address blocks: 109.207.51.0/24 maxlen: 24
109.207.48.0/24 maxlen: 24
109.207.48.0/20 maxlen: 20
109.207.50.0/24 maxlen: 24
109.207.49.0/24 maxlen: 24
109.207.58.0/24 maxlen: 24
109.207.55.0/24 maxlen: 24
109.207.54.0/24 maxlen: 24
109.207.57.0/24 maxlen: 24
109.207.56.0/24 maxlen: 24
109.207.53.0/24 maxlen: 24
109.207.52.0/24 maxlen: 24
109.207.62.0/24 maxlen: 24
109.207.61.0/24 maxlen: 24
109.207.63.0/24 maxlen: 24
109.207.60.0/24 maxlen: 24
109.207.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:f9:56:09:f4:8f:79:c4:3b:59:99:f1:89:e2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Validity
Not Before: Jan 1 16:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aaf75735cfcab3d54003189df73125b35765f1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ae:23:e2:cd:bf:67:bb:e8:44:9d:94:ed:82:
ed:bc:5e:74:65:b1:54:a4:9d:b9:76:00:49:aa:b3:
43:c9:3b:a3:8a:65:2d:64:58:69:00:7e:a1:e6:bc:
a8:28:c5:f2:c9:ac:c8:66:84:ae:82:e4:82:34:b6:
9b:1d:b7:a2:35:01:39:88:ac:32:1e:32:e5:b7:28:
c3:10:0d:76:9e:f8:8b:86:ad:a7:72:56:32:2e:bd:
0b:17:00:8b:04:b5:90:fd:c6:4c:67:2c:fd:bf:05:
c9:f2:e5:08:66:9b:71:ee:ba:59:a4:d2:d0:f0:b6:
f1:1f:c2:5c:28:b1:36:0f:7e:74:25:50:55:b4:ca:
07:6d:e6:83:76:f8:0c:7b:f5:a9:3f:3a:69:89:6e:
65:e1:34:db:c3:cc:48:a6:f5:8f:d9:d6:2a:90:a7:
09:08:ca:0d:84:40:7a:aa:f0:19:76:62:86:83:d8:
a6:e1:08:77:d2:db:fb:37:ec:93:ca:9d:21:9d:77:
26:1a:23:80:73:6a:0a:ae:7c:4c:b6:57:aa:e9:7b:
20:0c:97:db:66:f2:39:58:81:bf:fe:e9:34:f4:b4:
cc:cf:d1:f6:7a:46:2b:de:6c:d6:7c:48:91:34:52:
aa:0f:41:81:2b:eb:ca:44:e6:77:7f:72:58:bb:0d:
20:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F7:57:35:CF:CA:B3:D5:40:03:18:9D:F7:31:25:B3:57:65:F1:B2
X509v3 Authority Key Identifier:
keyid:4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/qvdXNc_Ks9VAAxid9zEls1dl8bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.207.48.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:3f:32:1d:01:aa:3a:c6:d6:f7:50:ae:80:c7:a5:e3:56:6e:
ff:36:50:a2:e8:51:a2:96:f6:6a:a8:1e:fd:10:b6:72:a2:c8:
63:63:be:83:38:0f:66:a7:ac:49:14:b7:14:15:6d:0a:a6:c5:
20:83:9b:b2:c4:d8:e4:7c:70:74:13:12:5b:97:1b:b4:06:97:
67:6d:ba:da:a7:f6:ef:a8:f7:b9:f1:46:50:97:0e:d8:b1:f6:
48:05:22:f8:6d:4d:a2:6b:38:4b:c3:cb:c0:d9:af:2b:38:9b:
38:32:ba:37:1c:19:e6:44:32:25:b2:5f:b2:78:d8:c4:2e:76:
81:d1:21:d9:af:82:3a:76:92:e9:04:e1:e9:e2:d1:d7:26:ff:
2a:94:4b:8a:db:d8:f7:49:b9:6b:d2:0b:e1:db:cc:72:1a:75:
cd:34:76:56:ad:b5:ac:57:90:44:1a:ef:06:89:9c:74:57:83:
43:49:79:63:f1:27:70:cc:69:9d:83:d9:51:99:00:73:da:f8:
02:ba:de:50:29:56:da:f4:97:a1:ee:09:50:c9:56:a7:a5:9f:
32:af:3f:41:50:e4:58:4b:60:42:24:42:fd:86:15:40:b3:72:
fd:75:29:90:65:a0:3b:36:96:2e:04:35:03:62:ab:81:74:2a:
9a:1a:63:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:38:58 2024 by rpki-client on console-ams.rpki-client.org