Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/58a4e1-dfc1-4d81-b2c6-216597e03f11/1/7BcxCwE3V4EZIwqWtZJNX-oLcLA.roa
File: 7BcxCwE3V4EZIwqWtZJNX-oLcLA.roa (raw, json)
Hash identifier: dGFKckgdA7H68hE151ky+KX/lAJ51wXO9MssnKq8eDQ=
Subject key identifier: EC:17:31:0B:01:37:57:81:19:23:0A:96:B5:92:4D:5F:EA:0B:70:B0
Certificate issuer: /CN=317067e81a61a21fdc148598ef6ba59757fa0380
Certificate serial: 018CC649994DF0DC31B2C4195C08DC6267EE
Authority key identifier: 31:70:67:E8:1A:61:A2:1F:DC:14:85:98:EF:6B:A5:97:57:FA:03:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXBn6Bphoh_cFIWY72ull1f6A4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/58a4e1-dfc1-4d81-b2c6-216597e03f11/1/7BcxCwE3V4EZIwqWtZJNX-oLcLA.roa
Signing time: Mon 01 Jan 2024 18:29:21 +0000
ROA not before: Mon 01 Jan 2024 18:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209440
IP address blocks: 92.118.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/58a4e1-dfc1-4d81-b2c6-216597e03f11/1/MXBn6Bphoh_cFIWY72ull1f6A4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/58a4e1-dfc1-4d81-b2c6-216597e03f11/1/MXBn6Bphoh_cFIWY72ull1f6A4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXBn6Bphoh_cFIWY72ull1f6A4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:99:4d:f0:dc:31:b2:c4:19:5c:08:dc:62:67:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317067e81a61a21fdc148598ef6ba59757fa0380
Validity
Not Before: Jan 1 18:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec17310b0137578119230a96b5924d5fea0b70b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:35:b1:00:6d:7c:56:e3:f4:76:86:87:48:
6f:a7:de:18:88:5e:0c:76:6d:2e:46:ee:f7:59:1f:
f9:37:55:f8:df:ba:fd:13:d7:fe:ef:3b:ea:d9:7c:
97:98:1d:68:ea:c5:ed:5c:20:8b:c7:e6:5c:18:ab:
86:be:68:6d:cb:dd:75:b3:4e:46:dd:06:b6:de:7d:
df:c5:cc:00:56:15:a8:d0:14:cb:c0:6a:47:57:58:
d0:34:a2:b7:a0:4d:64:c7:66:ae:0a:cc:4c:9a:a9:
56:fa:5f:75:86:46:82:ab:eb:32:a1:31:fc:43:38:
59:c2:03:87:50:51:ae:92:6c:cc:9d:6c:df:a1:e9:
e6:8e:5d:d0:22:a0:be:83:da:87:24:cb:f4:d9:c6:
c1:29:3f:56:cb:cf:60:3c:7b:7f:d5:6b:91:6e:26:
4c:4b:ac:a6:3a:ad:24:bc:95:f6:65:0c:ae:32:25:
13:4a:4b:f1:7a:3f:4e:95:3c:81:eb:dc:6c:0b:ca:
fa:6c:a9:2f:d0:d2:fa:3c:03:13:36:4a:54:6a:be:
85:90:99:74:91:4a:ce:aa:d3:87:62:5f:d8:00:f8:
ba:f7:4c:b4:f2:25:3f:63:01:4d:b6:91:d2:7b:e4:
0c:54:e7:59:ce:2a:31:b8:81:ea:07:fb:cb:b8:97:
92:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:17:31:0B:01:37:57:81:19:23:0A:96:B5:92:4D:5F:EA:0B:70:B0
X509v3 Authority Key Identifier:
keyid:31:70:67:E8:1A:61:A2:1F:DC:14:85:98:EF:6B:A5:97:57:FA:03:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXBn6Bphoh_cFIWY72ull1f6A4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/58a4e1-dfc1-4d81-b2c6-216597e03f11/1/7BcxCwE3V4EZIwqWtZJNX-oLcLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/58a4e1-dfc1-4d81-b2c6-216597e03f11/1/MXBn6Bphoh_cFIWY72ull1f6A4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.109.0/24
Signature Algorithm: sha256WithRSAEncryption
11:f7:ce:bf:51:0f:76:5b:d3:57:f2:72:e0:4f:5d:22:40:5c:
46:31:1b:b1:33:44:48:3c:47:60:00:44:e1:73:df:0d:f9:aa:
1f:1b:ea:63:31:4c:e9:16:8a:af:df:36:5d:87:6b:78:b7:16:
aa:b2:61:8d:bc:b0:9b:67:a6:c5:23:98:bf:4f:66:13:5b:24:
14:36:f3:04:74:b8:c3:25:27:08:35:43:0b:8b:d2:27:ab:a1:
0e:e9:ed:65:0c:2f:82:79:9c:cd:31:bc:41:7d:b7:8c:e1:e0:
48:f7:78:1f:87:3a:03:7b:36:f3:c0:1e:5b:31:96:cb:f4:80:
67:2c:63:66:48:11:92:89:fd:e1:c3:13:e2:c3:6a:48:4d:32:
92:a7:b3:d7:7f:a9:cf:08:9f:d9:5b:08:f1:78:97:c1:28:8f:
de:3b:46:ba:dc:97:c4:9e:29:2a:e1:fe:02:9b:55:dd:d8:e3:
12:77:cb:8f:8c:0d:64:2f:e9:9e:eb:cd:27:9f:72:fd:a6:cb:
2b:2f:c5:5a:2a:e1:59:25:f7:9c:20:91:18:d9:5f:59:2f:e8:
fa:28:09:57:dd:b6:2e:06:b9:05:4e:46:a7:3c:72:47:35:d5:
7a:08:9d:06:21:6c:3e:9d:34:a7:43:87:6c:c2:78:af:ba:fc:
f7:08:56:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:15:55 2024 by rpki-client on console-ams.rpki-client.org