Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/r2Wz3Z6XhvQQ0saZI0yzE7G9eo0.roa
File: r2Wz3Z6XhvQQ0saZI0yzE7G9eo0.roa (raw, json)
Hash identifier: 5jxG+AXZPKNjgtRHoKARADqI7e/2DZVo+fhZFwz47mU=
Subject key identifier: AF:65:B3:DD:9E:97:86:F4:10:D2:C6:99:23:4C:B3:13:B1:BD:7A:8D
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018D547B40479B84B1505C6EE59F7E4062FA
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/r2Wz3Z6XhvQQ0saZI0yzE7G9eo0.roa
Signing time: Mon 29 Jan 2024 09:09:39 +0000
ROA not before: Mon 29 Jan 2024 09:09:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 109.121.40.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
109.233.184.0/24 maxlen: 24
109.233.185.0/24 maxlen: 24
178.253.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:54:7b:40:47:9b:84:b1:50:5c:6e:e5:9f:7e:40:62:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 29 09:09:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af65b3dd9e9786f410d2c699234cb313b1bd7a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d6:cf:cd:5f:dd:dc:ce:39:83:a3:a7:b9:27:
90:da:c4:7c:1b:97:aa:9c:c7:83:5d:09:9a:49:38:
49:82:45:79:86:2d:cc:b0:f5:c3:db:10:af:53:77:
0c:da:73:9a:9c:ab:04:8c:2e:96:9e:ba:d4:51:bd:
41:37:9c:7d:be:3c:22:49:06:29:5e:37:e5:00:27:
57:68:b4:17:8d:7e:bb:7f:a3:7f:aa:e0:8d:f0:2d:
d3:6c:3a:bb:84:30:10:1e:c8:3c:86:75:f8:b8:83:
79:5d:b5:4b:36:37:96:47:91:c9:06:24:a7:c1:af:
98:03:31:12:a2:fe:5c:2f:8e:cb:8b:2f:e4:b6:41:
ec:54:1a:dc:ad:3b:3f:5a:ff:4b:ec:54:07:49:c4:
5f:43:b1:ba:6f:19:e1:5b:d5:df:27:4f:a6:31:0a:
6a:a8:ba:3d:4e:f9:d9:91:d2:e6:e2:48:86:93:08:
53:c5:c1:b8:8d:71:df:f3:94:e0:02:3f:7e:a4:b8:
a4:db:59:f5:60:82:80:16:60:17:33:a5:e5:1e:96:
fb:f8:11:ce:b1:f4:25:44:9d:6b:e5:64:ae:53:95:
2a:84:93:32:58:af:e4:01:3b:25:b3:6c:31:b1:d7:
d2:e6:06:40:29:3d:3a:44:ac:38:b9:6c:8a:24:1d:
a5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:65:B3:DD:9E:97:86:F4:10:D2:C6:99:23:4C:B3:13:B1:BD:7A:8D
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/r2Wz3Z6XhvQQ0saZI0yzE7G9eo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.40.0/24
109.121.43.0/24
109.233.184.0/23
178.253.237.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:c0:a7:6f:1a:03:70:34:d3:19:c3:38:2c:b1:d5:6e:70:0b:
6a:a0:50:76:30:ad:cc:3a:89:70:d5:f4:6b:77:b5:a6:c2:3b:
e0:7c:d5:b9:c2:26:41:3e:b6:59:2e:ad:35:82:70:92:da:88:
90:09:5a:29:90:1e:f0:ca:d3:dd:5f:45:19:8f:22:a6:32:5d:
74:af:07:2c:11:c9:da:6b:87:bd:85:5b:6c:a9:ed:79:cc:98:
8c:b3:c7:93:f5:36:35:e0:5f:b7:24:3a:7d:f5:2e:c4:f7:0f:
58:03:c9:e3:8b:a3:10:a6:00:60:89:dc:6d:f7:4a:e4:b1:a6:
15:6c:fb:04:35:41:f8:9e:a6:81:8a:ae:a5:5f:40:fe:d6:b2:
33:11:b8:2c:35:33:73:ef:34:3a:37:ee:61:a4:3a:4a:27:07:
8f:95:1e:11:90:f8:8e:c4:1b:df:56:57:fe:76:13:4d:13:38:
12:c6:0a:98:cb:7f:86:af:e2:f1:9d:6d:f5:43:08:3c:2d:d0:
6b:b6:bd:00:a7:b8:a2:a3:1a:7c:07:87:ef:86:55:b9:56:30:
be:9b:62:98:e6:c6:df:04:30:bd:45:aa:81:f8:39:97:98:83:
5e:4b:16:38:db:69:9a:78:68:39:a3:50:5d:2c:3c:c0:25:43:
54:fa:65:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:53 2024 by rpki-client on console-ams.rpki-client.org