Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ec4Tmqtqghu4GrmaYeIAhIM4BJ4.roa
File: ec4Tmqtqghu4GrmaYeIAhIM4BJ4.roa (raw, json)
Hash identifier: lFlQ+277Qhffv1BtwH+8rRfy9fpCKpvPRu7sZKmte08=
Subject key identifier: 79:CE:13:9A:AB:6A:82:1B:B8:1A:B9:9A:61:E2:00:84:83:38:04:9E
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018CCE8FF414846F46185ABC4BE12974236A
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ec4Tmqtqghu4GrmaYeIAhIM4BJ4.roa
Signing time: Wed 03 Jan 2024 09:03:09 +0000
ROA not before: Wed 03 Jan 2024 09:03:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42689
IP address blocks: 109.121.32.0/24 maxlen: 24
109.121.35.0/24 maxlen: 24
109.121.46.0/24 maxlen: 24
212.69.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ce:8f:f4:14:84:6f:46:18:5a:bc:4b:e1:29:74:23:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 3 09:03:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79ce139aab6a821bb81ab99a61e200848338049e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8a:c2:44:69:8e:11:b8:6a:6c:41:cf:37:08:
35:f4:30:75:40:ad:c5:67:db:df:92:37:a3:bf:7d:
83:68:d5:13:9e:7a:e8:40:88:69:7d:ce:26:5d:a3:
7b:76:0f:c4:9c:42:1b:3c:05:49:c6:cf:1d:bf:37:
ae:76:8b:38:de:a7:53:87:29:05:63:d3:69:c8:71:
1e:fc:51:0b:7d:3e:93:f8:2f:58:6d:40:78:90:3c:
a4:9a:83:ab:6a:08:28:65:07:68:37:e0:65:32:7f:
32:b0:12:b2:cd:74:02:e7:3a:d0:61:a8:6e:80:f5:
4b:c7:e5:06:65:ea:02:e5:f9:8a:87:fd:95:3d:e6:
c9:85:7e:af:69:49:74:09:ad:7f:ef:e1:15:98:44:
73:18:1c:ae:c0:14:95:d8:26:b8:b9:57:1d:5d:8f:
c8:cb:c4:ba:1a:21:41:dc:70:f8:2f:92:49:ff:6a:
67:70:e4:dc:76:07:35:1c:ff:4a:42:37:67:1b:77:
64:07:25:bf:fb:cc:1c:25:24:97:06:48:73:05:48:
54:30:67:f7:dc:4f:25:b6:d0:58:fc:bc:fd:c9:6a:
f6:76:f9:0c:e7:32:e2:11:57:e1:ae:bf:86:61:5a:
e5:98:4d:bf:52:68:35:91:cb:88:18:00:c6:9f:4c:
f6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CE:13:9A:AB:6A:82:1B:B8:1A:B9:9A:61:E2:00:84:83:38:04:9E
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ec4Tmqtqghu4GrmaYeIAhIM4BJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.32.0/24
109.121.35.0/24
109.121.46.0/24
212.69.10.0/24
Signature Algorithm: sha256WithRSAEncryption
81:19:28:a8:40:1c:4b:3f:e5:5d:15:b6:2b:c2:5f:9a:56:a4:
e5:4d:a5:d2:7f:df:74:5b:3e:14:fa:c4:db:29:9b:7f:b6:66:
ee:78:ca:2e:a4:67:82:be:77:a7:48:9b:f4:e3:82:27:5b:6e:
e0:35:20:39:67:f8:83:6e:69:62:38:4c:7b:72:cb:93:d8:9b:
92:5f:05:4c:2e:f7:ef:a9:1b:2e:80:78:45:2c:1f:66:a6:f6:
48:59:f7:69:a3:06:a5:e1:7a:fb:56:cd:63:88:bb:93:92:11:
02:99:76:e2:d9:52:ca:7c:b6:76:52:c7:60:6a:49:61:28:58:
3b:c8:d0:67:2a:0d:7f:c5:24:9c:a3:8d:76:4b:a8:67:8b:f8:
46:39:95:ad:b4:07:e8:c5:2e:86:8b:6c:04:32:a9:1e:a1:e8:
34:8e:9b:c2:54:75:cb:37:a0:cf:80:7f:f2:83:d6:ad:c5:c5:
e6:0f:30:d6:ea:18:84:f7:75:83:5d:f3:e3:02:08:c7:38:a4:
88:6a:48:b3:ce:95:63:66:06:13:27:c0:14:ff:a0:79:0f:50:
35:dc:b1:08:d0:3e:a9:85:a3:8c:dc:03:48:f4:89:a2:7b:8c:
45:08:3a:9b:92:71:2b:e1:2f:48:a2:09:5f:c7:a0:fa:29:4c:
3b:a1:0b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 21:59:02 2024 by rpki-client on console-fra.rpki-client.org