Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/V7K2alEgvDLkC1n7WNX14ehbmuY.roa
File: V7K2alEgvDLkC1n7WNX14ehbmuY.roa (raw, json)
Hash identifier: X+LypJsJyaXkYrWUqMHEaB2BGtVIrrLeBRkXa8nr62U=
Subject key identifier: 57:B2:B6:6A:51:20:BC:32:E4:0B:59:FB:58:D5:F5:E1:E8:5B:9A:E6
Certificate issuer: /CN=26425863c309f2655b884c1600394c4338e7fb41
Certificate serial: 018CC94D2CFCAA023ABC0A1B05AF3016E838
Authority key identifier: 26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/V7K2alEgvDLkC1n7WNX14ehbmuY.roa
Signing time: Tue 02 Jan 2024 08:32:07 +0000
ROA not before: Tue 02 Jan 2024 08:32:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 109.107.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:2c:fc:aa:02:3a:bc:0a:1b:05:af:30:16:e8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26425863c309f2655b884c1600394c4338e7fb41
Validity
Not Before: Jan 2 08:32:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57b2b66a5120bc32e40b59fb58d5f5e1e85b9ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ee:18:5f:61:9f:f2:e7:72:55:2a:74:ca:d1:
39:01:85:95:94:bb:b9:24:d9:d8:9c:1d:c9:d8:e3:
72:3f:3f:05:87:87:19:f8:0d:69:49:4e:d8:6c:9b:
8a:bb:f7:ab:2d:cb:aa:52:48:1b:d0:f0:6d:78:3f:
ea:b8:8a:f5:ba:2b:ca:3d:6a:e3:30:27:67:fb:8d:
d6:82:a2:14:b8:01:b9:60:56:0a:99:69:ed:e3:43:
a7:e3:0f:19:bc:12:e8:9e:d8:67:90:db:5c:fc:44:
f1:de:14:fd:11:21:cc:60:2c:c5:ba:39:8f:af:17:
e6:3c:29:97:5f:01:61:24:c1:5e:17:c1:08:ff:7f:
a2:01:a2:cd:f5:4c:40:66:3d:05:3d:b2:a5:4f:27:
65:49:a2:f2:74:13:68:6d:5c:1b:ca:ea:f2:f0:d7:
51:94:5f:80:c9:c8:e8:22:fb:5f:4b:1a:87:8f:05:
42:c5:7c:1f:29:59:20:9c:68:97:f9:83:8f:aa:1a:
db:d1:4b:d5:c0:76:12:aa:e8:9f:55:0a:8c:35:00:
82:92:13:ab:67:28:7e:8a:89:46:68:b8:69:c6:0e:
55:34:ca:f5:da:77:49:a7:5d:35:8d:b8:f8:46:60:
d3:75:f2:55:bd:99:8f:93:85:84:7a:04:f9:88:15:
aa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B2:B6:6A:51:20:BC:32:E4:0B:59:FB:58:D5:F5:E1:E8:5B:9A:E6
X509v3 Authority Key Identifier:
keyid:26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/V7K2alEgvDLkC1n7WNX14ehbmuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.154.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:cb:f9:6d:32:47:c7:91:06:6f:ba:cb:f3:6d:d3:36:55:bf:
ca:09:b0:fc:bd:0f:de:80:d5:f5:d9:fd:95:69:ea:d3:62:7c:
17:af:6b:00:d9:15:32:52:d5:db:07:aa:ec:48:49:6d:33:34:
71:62:25:4c:c3:30:ee:3a:1c:26:7d:1d:e2:77:cc:1c:71:bc:
39:df:64:db:10:26:eb:a4:af:cc:38:9c:c8:c5:76:be:40:14:
67:0b:7d:70:a2:e3:3a:07:66:5b:72:52:45:87:14:af:8b:67:
e2:73:71:e9:f4:05:2f:0e:6f:a7:34:84:10:7d:fa:d8:6e:59:
0e:8c:38:34:fd:d0:c6:6e:72:09:de:6f:7c:40:01:98:ce:31:
9c:47:49:13:c2:e3:d1:2d:e7:8b:c8:8d:2d:ea:2f:12:84:4f:
97:a2:8d:74:c2:a2:63:88:48:7c:1b:73:72:d0:09:35:41:8c:
86:28:e8:c5:79:45:29:d0:89:51:e8:73:5f:2b:43:23:ee:ea:
b8:51:42:ff:f3:37:3d:f2:66:f2:6f:fd:3a:65:da:41:66:9b:
57:a3:aa:9e:0b:7c:0a:aa:76:54:f5:f0:54:e2:33:fd:4c:32:
91:7e:da:97:37:c2:f6:01:85:c7:80:be:38:fb:da:b9:35:4d:
bf:1f:60:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTSz8qgI6vAobBa8wFug4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NDI1ODYzYzMwOWYyNjU1Yjg4NGMxNjAwMzk0YzQzMzhl
N2ZiNDEwHhcNMjQwMTAyMDgzMjA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2IyYjY2YTUxMjBiYzMyZTQwYjU5ZmI1OGQ1ZjVlMWU4NWI5YWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje4YX2Gf8udyVSp0ytE5AYWVlLu5
JNnYnB3J2ONyPz8Fh4cZ+A1pSU7YbJuKu/erLcuqUkgb0PBteD/quIr1uivKPWrj
MCdn+43WgqIUuAG5YFYKmWnt40On4w8ZvBLonthnkNtc/ETx3hT9ESHMYCzFujmP
rxfmPCmXXwFhJMFeF8EI/3+iAaLN9UxAZj0FPbKlTydlSaLydBNobVwbyury8NdR
lF+AycjoIvtfSxqHjwVCxXwfKVkgnGiX+YOPqhrb0UvVwHYSquifVQqMNQCCkhOr
Zyh+iolGaLhpxg5VNMr12ndJp101jbj4RmDTdfJVvZmPk4WEegT5iBWqhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFeytmpRILwy5AtZ+1jV9eHoW5rmMB8GA1UdIwQY
MBaAFCZCWGPDCfJlW4hMFgA5TEM45/tBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmtKWVk4TUo4bVZiaUV3V0FEbE1RempuLTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mMTBlMGUtMTZjYS00OGIwLWFiZGMt
YzE0ZjZiYTI1Y2IwLzEvVjdLMmFsRWd2RExrQzFuN1dOWDE0ZWhibXVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9mMTBlMGUtMTZjYS00OGIwLWFiZGMtYzE0ZjZiYTI1Y2Iw
LzEvSmtKWVk4TUo4bVZiaUV3V0FEbE1RempuLTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWuaMA0G
CSqGSIb3DQEBCwUAA4IBAQAOy/ltMkfHkQZvusvzbdM2Vb/KCbD8vQ/egNX12f2V
aerTYnwXr2sA2RUyUtXbB6rsSEltMzRxYiVMwzDuOhwmfR3id8wccbw532TbECbr
pK/MOJzIxXa+QBRnC31wouM6B2ZbclJFhxSvi2fic3Hp9AUvDm+nNIQQffrYblkO
jDg0/dDGbnIJ3m98QAGYzjGcR0kTwuPRLeeLyI0t6i8ShE+Xoo10wqJjiEh8G3Ny
0Ak1QYyGKOjFeUUp0IlR6HNfK0Mj7uq4UUL/8zc98mbyb/06ZdpBZptXo6qeC3wK
qnZU9fBU4jP9TDKRftqXN8L2AYXHgL44+9q5NU2/H2Ae
-----END CERTIFICATE-----
Generated at Tue May 21 13:57:38 2024 by rpki-client on console-ams.rpki-client.org