Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/toyOQH73vFvpqgV5nYSC-e09j4k.roa
File: toyOQH73vFvpqgV5nYSC-e09j4k.roa (raw, json)
Hash identifier: HosH6h/sNKBbJiLP9DVSKrxPDwvIj+B21wzwElBqNEM=
Subject key identifier: B6:8C:8E:40:7E:F7:BC:5B:E9:AA:05:79:9D:84:82:F9:ED:3D:8F:89
Certificate issuer: /CN=2bbbd639efb113d19688a1acce6945bb6c6a9ac5
Certificate serial: 018CC94DCA6D26B5B388FA96CD94B61FE062
Authority key identifier: 2B:BB:D6:39:EF:B1:13:D1:96:88:A1:AC:CE:69:45:BB:6C:6A:9A:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/toyOQH73vFvpqgV5nYSC-e09j4k.roa
Signing time: Tue 02 Jan 2024 08:32:47 +0000
ROA not before: Tue 02 Jan 2024 08:32:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31034
IP address blocks: 185.58.192.0/22 maxlen: 24
109.70.244.0/22 maxlen: 24
109.70.240.0/22 maxlen: 24
2a04:e101::/32 maxlen: 32
2a04:e100::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:ca:6d:26:b5:b3:88:fa:96:cd:94:b6:1f:e0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbbd639efb113d19688a1acce6945bb6c6a9ac5
Validity
Not Before: Jan 2 08:32:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b68c8e407ef7bc5be9aa05799d8482f9ed3d8f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:20:0f:21:9c:11:68:e3:91:db:54:b8:d7:2e:
45:86:d4:e6:49:ca:98:e8:ca:75:d2:5f:f3:b6:bb:
c8:0d:88:28:44:ce:6b:4b:33:f7:5d:9f:fb:b9:33:
31:b7:05:92:85:b5:dd:94:14:5a:de:c0:07:e3:09:
82:3c:ce:96:56:59:00:0a:41:5e:7e:8e:32:61:86:
b3:35:f4:2d:b2:71:13:4a:d7:93:9c:d9:fa:bf:c0:
54:ee:a0:57:a3:49:dd:77:6f:25:ba:c4:8d:e3:c5:
c9:be:65:6f:6c:a6:d5:99:d9:76:14:37:d5:0d:45:
09:fe:c5:3b:7e:dc:63:e8:42:45:d3:1a:2a:1b:73:
40:ee:dd:52:37:c9:b4:ff:22:6d:64:78:5e:e7:72:
99:cf:39:cc:26:3a:12:ec:72:a1:88:5a:75:99:2a:
5e:52:87:30:ac:2d:fa:fe:52:0b:c9:30:71:c2:cc:
3a:f8:a7:0f:32:51:3c:32:96:87:81:cb:14:61:b3:
c8:ee:35:40:d1:a5:98:17:0b:82:48:85:87:ec:c2:
96:a1:f9:ed:3e:1a:9a:a4:fe:88:89:e2:35:9b:de:
ee:91:a7:83:90:3b:fb:57:24:c0:2a:0e:52:24:80:
09:20:4f:dc:71:be:4a:48:48:8e:f7:75:21:ae:b8:
dd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8C:8E:40:7E:F7:BC:5B:E9:AA:05:79:9D:84:82:F9:ED:3D:8F:89
X509v3 Authority Key Identifier:
keyid:2B:BB:D6:39:EF:B1:13:D1:96:88:A1:AC:CE:69:45:BB:6C:6A:9A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7vWOe-xE9GWiKGszmlFu2xqmsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/toyOQH73vFvpqgV5nYSC-e09j4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5008a-0f42-4557-9feb-3984c213e214/1/K7vWOe-xE9GWiKGszmlFu2xqmsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.70.240.0/21
185.58.192.0/22
IPv6:
2a04:e100::/31
Signature Algorithm: sha256WithRSAEncryption
c7:94:4f:c0:23:c7:16:46:48:88:71:65:7f:71:b7:a9:ed:8f:
ae:85:f9:6c:33:75:c7:eb:e1:09:8f:8b:3d:eb:6c:d4:a4:f8:
1c:fb:fb:fa:c1:d0:d4:d7:84:19:20:64:d6:a1:eb:61:f8:e3:
1e:bf:1d:c6:f2:4b:33:68:8e:b0:04:8a:62:7f:72:3e:5f:63:
46:39:c9:8d:46:4d:3d:fd:65:9a:55:18:10:a1:a6:16:f5:c6:
15:61:64:9b:0e:af:5d:ab:e5:bb:4b:e1:e3:c6:15:12:56:bf:
60:c0:4e:e9:c4:39:3f:f2:f5:85:1f:43:f0:81:aa:77:8a:ba:
19:e7:0d:ff:34:19:98:de:b4:11:34:63:03:6e:30:9d:65:9c:
32:81:f1:bd:01:0f:ec:e7:27:f9:51:23:cf:00:0e:8a:07:49:
75:36:b6:7b:d8:f4:21:61:1e:38:aa:b1:b0:92:ca:6f:67:40:
35:5c:49:50:4a:1b:8a:69:72:6c:5f:59:b3:a6:5c:47:02:b2:
45:0b:6d:bf:3f:36:de:67:a7:31:c6:89:b9:0c:82:1a:59:26:
8a:e9:85:71:bf:20:77:b2:b7:48:d3:c5:c0:0c:b9:34:4e:5a:
05:3d:e8:54:b6:9f:29:ab:96:b1:26:fd:0a:94:6d:dd:54:45:
3b:1b:14:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:15:16 2024 by rpki-client on console-fra.rpki-client.org