Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/1-kelFZNGjMz_VDLATtxDjB_qi0Q.roa
File: 1-kelFZNGjMz_VDLATtxDjB_qi0Q.roa (raw, json)
Hash identifier: Gz7pKq0pfE5w3wP4jOEYbwF0jMvU7QbhkbPJWrntStY=
Subject key identifier: FA:47:A5:15:93:46:8C:CC:FF:54:32:C0:4E:DC:43:8C:1F:EA:8B:44
Certificate issuer: /CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Certificate serial: 018CC9BCD031F0C6142A5164BB0277181896
Authority key identifier: 54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/1-kelFZNGjMz_VDLATtxDjB_qi0Q.roa
Signing time: Tue 02 Jan 2024 10:34:03 +0000
ROA not before: Tue 02 Jan 2024 10:34:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25540
IP address blocks: 109.239.114.0/23 maxlen: 24
109.239.124.0/24 maxlen: 24
159.100.36.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d0:31:f0:c6:14:2a:51:64:bb:02:77:18:18:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Validity
Not Before: Jan 2 10:34:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa47a51593468cccff5432c04edc438c1fea8b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:6f:35:86:e0:fa:1c:bf:b9:9f:ee:b7:6d:
bd:29:0a:d4:5c:0a:71:a8:07:5f:fd:be:ba:e8:58:
0f:37:c2:37:54:d0:e7:61:3d:11:ff:31:c5:34:3d:
e9:08:18:68:34:c0:bf:36:fc:40:c9:bb:12:e8:2d:
14:78:3c:19:71:e7:58:f3:e5:46:32:b3:27:21:50:
6e:fc:9b:66:dc:be:61:e1:8f:6d:59:69:cd:e6:05:
f5:8e:c3:e9:47:7e:eb:7b:3d:33:43:34:e6:a6:23:
6d:69:1d:d2:0c:a0:f1:44:a0:8b:72:9e:f9:4b:85:
eb:bc:74:36:7d:7d:ef:9a:c2:da:6b:5a:cf:17:06:
81:57:b1:f6:cd:fc:ec:e2:fe:46:69:4f:cd:b3:ce:
a7:33:5a:70:0a:e8:8a:56:48:6d:0d:7c:6b:32:f5:
43:c4:61:d4:f1:a8:e9:3d:16:96:41:fe:cb:f1:6b:
14:11:61:1a:9e:95:02:53:9c:9d:7f:ca:f9:f4:ac:
a7:cd:7c:fb:09:45:02:91:88:11:8f:a0:6c:a4:37:
99:9b:05:42:0b:ea:6d:af:ca:45:38:b8:8e:0a:ae:
7f:a0:2d:74:f1:79:a2:07:24:c0:d9:98:89:d2:11:
8c:95:66:69:e7:51:2d:1c:4d:4c:b4:84:ed:ee:61:
45:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:47:A5:15:93:46:8C:CC:FF:54:32:C0:4E:DC:43:8C:1F:EA:8B:44
X509v3 Authority Key Identifier:
keyid:54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/1-kelFZNGjMz_VDLATtxDjB_qi0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.239.114.0/23
109.239.124.0/24
159.100.36.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:75:ca:f7:83:aa:4f:16:3b:e4:95:36:3c:23:2f:de:a1:8a:
01:03:40:dc:39:a9:93:8a:06:73:a6:9f:fe:9e:21:49:fd:cb:
d6:77:2a:fe:51:98:c4:2a:65:4c:d6:e5:6a:91:dc:61:f1:46:
43:97:0d:63:c3:0e:f5:c8:a2:22:3b:ea:30:ff:5d:80:06:30:
e3:e8:f9:06:e5:c8:cb:57:b1:69:da:49:34:1d:8b:93:6c:7b:
68:a7:a8:60:53:5a:e4:9b:c6:43:34:33:a3:27:41:a8:a5:d0:
49:78:4e:f4:da:3c:b8:37:09:16:d3:30:08:77:68:38:4a:ec:
72:9c:79:9b:9a:6a:03:36:27:0e:4e:a7:44:f1:d3:28:45:33:
3b:b1:25:e9:07:87:ac:67:d5:00:ee:d0:fd:d2:30:67:7f:80:
4d:48:21:09:38:06:fc:c9:d2:1c:e7:4b:1e:3d:b1:ab:0c:ed:
a0:37:98:5f:05:52:47:81:ea:12:4b:39:82:4b:71:c5:4f:0e:
4e:6f:b2:e7:ea:3f:da:ec:ac:f9:87:f9:08:2f:7f:29:ff:69:
5e:a5:0e:e0:ee:e0:c3:cc:b0:89:99:b0:f9:27:14:da:84:3c:
6a:d5:7b:11:50:59:b4:db:1a:39:6d:b7:a7:44:00:03:dc:3b:
c4:9c:30:df
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 8 05:13:20 2024 by rpki-client on console-fra.rpki-client.org