Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1OX5s_BJ6ajrvhKEXOG7yn19mnk.roa
File: 1OX5s_BJ6ajrvhKEXOG7yn19mnk.roa (raw, json)
Hash identifier: 9Ce41iM9s5rvfcye1f4mKF4Fo7bQih4UQxNSUvPDvqI=
Subject key identifier: D4:E5:F9:B3:F0:49:E9:A8:EB:BE:12:84:5C:E1:BB:CA:7D:7D:9A:79
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01910304B13785EF202C5235C9C5E8CB6ADA
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1OX5s_BJ6ajrvhKEXOG7yn19mnk.roa
Signing time: Tue 30 Jul 2024 09:42:04 +0000
ROA not before: Tue 30 Jul 2024 09:42:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42689
IP address blocks: 109.121.32.0/24 maxlen: 24
109.121.35.0/24 maxlen: 24
109.121.41.0/24 maxlen: 24
109.121.46.0/24 maxlen: 24
212.69.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:03:04:b1:37:85:ef:20:2c:52:35:c9:c5:e8:cb:6a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 30 09:42:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4e5f9b3f049e9a8ebbe12845ce1bbca7d7d9a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7f:4f:de:f3:82:a9:d4:da:37:ec:6e:41:f1:
05:c6:ae:b8:26:6d:12:10:7d:62:71:f5:fb:c9:97:
68:6b:4f:68:6a:78:81:45:67:5b:44:04:14:3b:49:
12:4b:f3:f8:78:e3:92:a1:0d:d4:e0:b4:a5:e2:64:
96:05:1f:ba:5a:5d:10:ef:1d:4a:74:a2:4b:3e:75:
ec:75:d3:f0:ce:22:b4:03:e5:f1:45:cd:0c:de:a9:
39:c5:45:49:29:7f:da:39:23:06:de:c9:c5:93:bf:
a0:92:33:af:d8:59:53:80:5e:70:68:d1:35:48:50:
8a:77:26:06:59:ab:53:a8:9f:d2:45:be:18:05:73:
c0:a3:b1:03:ee:6c:a9:8b:97:b7:c7:a9:ea:d8:21:
d5:81:00:a6:6d:8c:10:55:0f:28:6f:41:42:dd:0a:
b1:8e:08:cb:78:62:8a:da:b3:1b:5f:f8:66:e3:21:
1b:cc:bd:9a:58:db:5f:b2:32:de:27:d3:75:24:a6:
1e:1f:99:75:cc:d6:f5:f9:cb:17:7d:be:45:1c:a2:
aa:9b:51:87:32:6a:76:aa:c8:1c:a8:8f:50:45:cf:
14:c0:05:db:51:2e:e3:0f:4e:dc:da:2f:be:78:8c:
4d:d6:70:5e:dc:f7:30:2a:94:ca:74:3b:46:9c:b7:
b2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E5:F9:B3:F0:49:E9:A8:EB:BE:12:84:5C:E1:BB:CA:7D:7D:9A:79
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/1OX5s_BJ6ajrvhKEXOG7yn19mnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.32.0/24
109.121.35.0/24
109.121.41.0/24
109.121.46.0/24
212.69.10.0/24
Signature Algorithm: sha256WithRSAEncryption
42:fc:11:3f:3c:cd:f4:f2:4a:f5:49:d8:d5:0c:cf:cc:76:41:
a4:fd:1a:63:0d:7a:9d:03:20:49:e7:87:72:9b:1b:06:a0:10:
d0:a3:ff:f2:4f:9d:3c:f9:0f:36:6e:42:bc:15:6a:17:71:f8:
e6:70:01:70:08:65:dc:b9:6d:e6:06:18:f7:28:d2:99:77:7c:
0f:5d:70:24:d5:3f:0d:14:3c:3a:23:be:a6:b8:a7:64:e1:0f:
03:91:f2:60:72:25:b9:21:9f:91:5a:1b:cb:d4:83:f3:db:80:
24:e1:c6:6f:41:71:11:2a:cf:3c:36:65:dc:f4:07:f4:67:e3:
b9:c3:f8:6c:98:b4:80:17:f4:52:8a:3f:ec:92:dd:e5:31:01:
a3:29:46:5e:aa:95:a3:ad:e8:41:d7:95:86:7c:b4:b7:74:2b:
c8:81:11:c9:6d:d3:bf:c5:2f:5a:0c:1a:c0:4b:98:76:e3:11:
74:17:f4:2c:b0:3e:11:ed:61:70:87:25:44:a1:54:cb:ad:c2:
4b:77:86:bd:03:22:b9:00:a8:15:ea:8e:bd:93:45:d7:b9:2f:
97:30:b6:e7:18:6a:46:4a:43:1d:d0:0a:09:17:5a:d3:c4:f2:
38:91:de:49:83:26:d7:ee:13:2e:9c:3a:93:92:77:fa:ee:9c:
a7:6b:97:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:53 2024 by rpki-client on console-ams.rpki-client.org