Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/OiPLLBJyFUFlLQnvvSaliLQ0Gtk.roa
File: OiPLLBJyFUFlLQnvvSaliLQ0Gtk.roa (raw, json)
Hash identifier: yGP3P+HdNv6sA5ZwZQd9aMQcwCWsFcqxopI16RQytjk=
Subject key identifier: 3A:23:CB:2C:12:72:15:41:65:2D:09:EF:BD:26:A5:88:B4:34:1A:D9
Certificate issuer: /CN=e02d792c97dbd4482eb815cc9a4fb9f547af7a09
Certificate serial: 018CC5DD2444C52799EFDEB33A2977F68481
Authority key identifier: E0:2D:79:2C:97:DB:D4:48:2E:B8:15:CC:9A:4F:B9:F5:47:AF:7A:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C15LJfb1EguuBXMmk-59Uevegk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/OiPLLBJyFUFlLQnvvSaliLQ0Gtk.roa
Signing time: Mon 01 Jan 2024 16:30:53 +0000
ROA not before: Mon 01 Jan 2024 16:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210309
IP address blocks: 109.73.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4C15LJfb1EguuBXMmk-59Uevegk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:24:44:c5:27:99:ef:de:b3:3a:29:77:f6:84:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02d792c97dbd4482eb815cc9a4fb9f547af7a09
Validity
Not Before: Jan 1 16:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a23cb2c12721541652d09efbd26a588b4341ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:28:ff:2e:f0:b5:2c:f7:9a:bc:55:0b:0d:
a7:38:83:1a:32:89:c1:79:68:73:20:50:a6:8c:35:
6b:14:04:34:4b:4e:57:35:bf:13:3b:23:0f:c4:a9:
fe:e7:d2:fb:9a:42:65:08:74:49:7b:c1:fb:fd:a0:
18:c3:3c:32:a2:eb:d9:98:5d:20:ee:cb:c9:7f:91:
77:0b:97:08:28:34:2a:d8:16:8c:fc:c6:d9:18:ad:
97:ab:c2:4a:60:ba:9d:00:f2:48:99:27:b6:65:09:
f0:17:d0:91:e4:ce:66:52:17:0a:18:f5:4a:40:87:
ec:d7:4a:8a:02:21:a3:5c:bc:e4:5c:d3:6e:de:06:
8a:fc:d6:8e:ab:92:dc:06:97:ab:1a:75:c9:ba:40:
64:a2:34:b3:39:c2:ae:3d:f6:3f:de:03:92:38:93:
9b:28:b6:d4:9e:1a:6d:ce:0f:6a:6c:61:79:44:be:
12:fb:59:2a:eb:95:38:f0:9a:80:0b:c6:b9:c7:05:
32:ab:52:73:fa:b7:07:86:59:0d:7b:ff:20:32:2b:
5d:c5:00:c0:e6:56:66:4f:5f:85:9d:be:0d:7b:24:
d6:8c:d5:70:ea:5b:5f:3d:d1:cd:9b:0c:10:9c:83:
b1:f8:cf:95:2d:e6:8a:02:7a:0b:59:c7:aa:bb:a8:
ba:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:23:CB:2C:12:72:15:41:65:2D:09:EF:BD:26:A5:88:B4:34:1A:D9
X509v3 Authority Key Identifier:
keyid:E0:2D:79:2C:97:DB:D4:48:2E:B8:15:CC:9A:4F:B9:F5:47:AF:7A:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C15LJfb1EguuBXMmk-59Uevegk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/OiPLLBJyFUFlLQnvvSaliLQ0Gtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.73.136.0/22
Signature Algorithm: sha256WithRSAEncryption
10:ca:42:38:b0:f7:62:de:f2:fb:85:19:b3:5e:db:00:3d:37:
9f:a5:38:a8:b3:69:20:d3:e0:da:9f:ee:6f:2d:c0:9b:fc:e3:
6f:9a:26:ff:1a:0c:d0:9d:8a:0d:b6:9d:b1:b5:5b:c9:62:e3:
9d:fe:0c:77:6c:94:f5:6f:72:e1:30:6a:ba:99:5f:6a:b5:ad:
fe:ce:1f:3b:e0:c8:a6:e8:32:40:2f:0b:8c:40:9b:b0:f0:32:
59:50:f9:dd:2b:73:b1:d2:58:34:63:5b:b5:18:18:b1:45:e8:
17:5e:14:94:be:01:0b:69:65:63:1b:69:bd:7a:29:3a:7d:02:
88:f1:d4:be:da:da:77:67:32:1a:6f:44:86:03:46:a2:ba:41:
ac:f1:89:5b:59:46:01:8c:a2:d6:92:55:5e:1b:5c:d4:49:cd:
a8:60:84:28:e2:2a:cd:6b:b7:1f:b6:32:db:99:7e:c1:ff:a0:
1a:83:98:93:42:9f:a8:be:55:83:fb:06:a6:43:8e:ea:a5:c1:
f9:ef:e6:8d:5c:8d:48:bf:81:80:71:f6:c7:2b:45:85:c6:24:
60:00:ab:7a:89:c6:3f:bf:0d:8e:43:40:64:d2:bc:72:92:c8:
17:3c:d6:b0:b4:0a:f2:3a:21:18:3f:35:27:a8:86:34:47:15:
61:c9:a1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 09:58:00 2024 by rpki-client on console-fra.rpki-client.org