Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/g9sKEcwGfONhQodB2UE5vur8DNo.roa
File: g9sKEcwGfONhQodB2UE5vur8DNo.roa (raw, json)
Hash identifier: XwGeO+nLWXfi/TATitdoXMU7qAZw/qOokEBUufNCAgQ=
Subject key identifier: 83:DB:0A:11:CC:06:7C:E3:61:42:87:41:D9:41:39:BE:EA:FC:0C:DA
Certificate issuer: /CN=304e59a223f4bcb823492fb1096c3a82310c03da
Certificate serial: 018F623C18D590789BC31285F0F2789A2408
Authority key identifier: 30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/g9sKEcwGfONhQodB2UE5vur8DNo.roa
Signing time: Fri 10 May 2024 11:20:56 +0000
ROA not before: Fri 10 May 2024 11:20:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12307
IP address blocks: 185.119.104.0/24 maxlen: 24
185.119.107.0/24 maxlen: 24
2a06:8a00::/29 maxlen: 29
2a06:8a00::/32 maxlen: 32
2a06:8a07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:62:3c:18:d5:90:78:9b:c3:12:85:f0:f2:78:9a:24:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=304e59a223f4bcb823492fb1096c3a82310c03da
Validity
Not Before: May 10 11:20:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83db0a11cc067ce361428741d94139beeafc0cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8a:64:76:3b:9f:86:88:59:8b:ca:e8:f1:36:
a4:ec:8a:51:bb:b0:ea:cb:c9:8c:6b:7a:5b:7e:64:
83:ad:d4:6e:10:71:ab:ed:18:5a:c3:f9:48:9e:d0:
ba:85:86:7a:1b:42:b2:3c:fc:e1:29:e2:e4:70:d1:
41:5a:7a:89:82:28:7b:cd:4e:28:72:d1:56:76:bf:
fd:5b:79:b1:ce:b3:76:ed:10:cf:98:40:d2:49:5f:
14:dc:b3:38:1e:97:19:6a:f5:df:e4:a0:8d:e9:11:
22:a4:38:d6:a0:38:57:56:e5:0b:1b:6a:dc:d8:2b:
7c:18:fe:f5:89:c2:fe:3b:0b:d6:33:0d:30:1c:66:
44:02:a4:71:ed:49:89:ce:91:44:53:51:de:c4:61:
12:78:3a:c8:e7:ff:25:c8:c9:80:d9:d7:7b:b0:e8:
aa:ab:b3:22:37:b4:eb:29:ec:7d:8d:66:cd:03:a7:
38:c3:79:61:bd:35:e5:c0:4f:74:25:f5:d6:0d:12:
3f:35:58:6b:93:9f:be:1e:f0:d1:31:79:a9:05:36:
0a:55:d7:e0:ef:23:c7:86:5a:c9:49:09:00:4d:c4:
66:3d:20:ba:e4:a5:9b:d8:24:ee:e4:c7:b1:c3:52:
5c:0f:a8:ce:18:05:c0:21:3b:8d:4f:c4:a9:67:4e:
95:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DB:0A:11:CC:06:7C:E3:61:42:87:41:D9:41:39:BE:EA:FC:0C:DA
X509v3 Authority Key Identifier:
keyid:30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/g9sKEcwGfONhQodB2UE5vur8DNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.104.0/24
185.119.107.0/24
IPv6:
2a06:8a00::/29
Signature Algorithm: sha256WithRSAEncryption
97:09:92:f9:3a:23:ca:80:a2:2d:f3:51:67:a9:ac:9e:d8:ac:
eb:10:7b:50:b4:da:3b:e0:f8:80:22:8a:ac:22:dc:d8:60:fd:
dd:ee:7b:b2:ad:09:50:69:ba:45:fe:39:f0:2f:ea:4f:0a:a2:
01:51:89:83:48:cd:1c:c6:32:7c:3b:fe:d5:87:f7:1d:06:a5:
f2:48:f8:4f:2d:21:a8:07:61:db:dc:02:43:80:74:d9:5c:ef:
2f:39:21:86:eb:ac:01:33:5c:3a:98:8a:6f:83:24:62:9f:f9:
aa:36:76:cd:4b:6f:0c:fc:31:22:31:e6:12:54:e4:e4:ea:37:
1b:ab:7f:cd:7a:45:cd:3d:97:73:7b:6c:4e:29:6c:ec:50:82:
35:b7:e9:35:6a:86:08:ba:73:94:c5:17:b2:b5:5e:ed:76:ac:
52:80:8b:33:a6:a8:29:05:61:f8:93:56:87:d1:80:f8:a0:95:
ce:88:eb:ab:d3:31:53:8c:c3:38:08:03:d5:f1:dd:eb:99:28:
7b:63:29:32:ee:43:f5:84:a0:ce:c6:59:ce:c4:09:dd:e2:0c:
96:7d:1b:b3:cf:1f:3a:72:dd:f2:1b:7f:2d:d4:b0:fd:57:36:
35:92:ac:94:04:f1:63:ea:8f:77:e6:dd:c8:62:a3:65:33:e8:
e7:8a:96:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:40:51 2024 by rpki-client on console-fra.rpki-client.org