Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/YoB-anhysaNEUrlQQtFx0-5dhmA.roa
File: YoB-anhysaNEUrlQQtFx0-5dhmA.roa (raw, json)
Hash identifier: qw+R/z2Rj7NLhUAOHsWk5yE2JzIZT2s20cy45v0aJTY=
Subject key identifier: 62:80:7E:6A:78:72:B1:A3:44:52:B9:50:42:D1:71:D3:EE:5D:86:60
Certificate issuer: /CN=f141d664698b70ffb2a26f684b47deb6c8d59a53
Certificate serial: 018CC795125DF99EF4421A4C6140EFC7E971
Authority key identifier: F1:41:D6:64:69:8B:70:FF:B2:A2:6F:68:4B:47:DE:B6:C8:D5:9A:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/YoB-anhysaNEUrlQQtFx0-5dhmA.roa
Signing time: Tue 02 Jan 2024 00:31:24 +0000
ROA not before: Tue 02 Jan 2024 00:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201336
IP address blocks: 109.71.249.0/24 maxlen: 24
109.71.248.0/24 maxlen: 24
109.71.248.0/22 maxlen: 22
109.71.251.0/24 maxlen: 24
109.71.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:12:5d:f9:9e:f4:42:1a:4c:61:40:ef:c7:e9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f141d664698b70ffb2a26f684b47deb6c8d59a53
Validity
Not Before: Jan 2 00:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62807e6a7872b1a34452b95042d171d3ee5d8660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:97:9b:50:27:1d:5d:29:42:5e:8f:05:19:1b:
4b:9b:dc:8e:b3:6f:d2:4e:07:7e:03:96:89:a6:21:
31:75:31:cd:09:83:0c:30:4a:39:42:4b:ae:63:61:
7a:ce:a5:3f:c2:b3:9e:60:73:1b:f1:11:42:9c:4d:
d6:39:50:b1:34:f8:e8:90:2e:83:50:b1:76:e1:0b:
b9:fe:00:74:92:14:85:32:63:42:63:68:fa:2c:1d:
53:55:ac:e5:59:c6:5e:42:11:b3:cb:6f:26:a3:2a:
f9:0f:54:4a:a6:44:c5:5f:d6:35:5a:e0:64:83:b6:
20:7a:7f:c6:94:8e:c7:32:5b:3d:4e:78:ab:c2:f9:
17:0d:89:02:48:e4:c6:b9:22:c1:f5:ec:51:08:dc:
08:59:e4:e7:c5:8f:9e:54:0c:e8:1e:2b:6d:0e:03:
73:bd:b3:71:51:8d:3a:ea:bf:a7:aa:08:6b:39:ac:
63:8b:c6:37:d7:d0:12:0c:41:5e:6f:dc:6f:70:0f:
2f:30:27:7a:7e:8a:d7:39:46:cc:5c:fa:00:74:8b:
eb:f5:46:6d:9a:29:c3:36:29:ba:0d:43:f8:f0:9d:
28:56:64:84:11:4c:e6:83:16:9f:fd:66:68:de:74:
17:66:b4:df:05:d2:dd:3d:72:f0:cd:b9:0b:33:47:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:80:7E:6A:78:72:B1:A3:44:52:B9:50:42:D1:71:D3:EE:5D:86:60
X509v3 Authority Key Identifier:
keyid:F1:41:D6:64:69:8B:70:FF:B2:A2:6F:68:4B:47:DE:B6:C8:D5:9A:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/YoB-anhysaNEUrlQQtFx0-5dhmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.248.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:a9:db:df:3d:fe:3f:a6:2e:04:db:d0:f0:33:fe:a4:cd:10:
3f:0f:09:aa:0f:0f:9c:bc:50:a0:bb:5a:58:8f:45:f2:d7:6a:
9c:36:38:ba:7a:d8:4b:35:11:7f:8f:69:49:50:ad:41:cd:18:
c8:f7:af:f2:c5:22:d9:fb:dc:1a:c2:2b:7c:f7:3f:13:74:e8:
a8:2c:fc:bd:5a:77:76:8d:89:57:48:b9:b8:fe:18:ff:c1:f2:
41:4b:3d:88:24:69:c4:e1:88:dc:c6:8b:85:44:a1:7c:16:f2:
61:54:cd:b0:07:4c:72:ef:4c:ab:9d:32:7d:4e:b5:ef:92:43:
02:94:af:d0:a0:1b:6a:bf:57:8d:78:1e:6c:d6:85:32:04:d4:
be:99:15:cc:81:aa:c6:81:6a:49:f0:61:2d:4a:04:1d:70:d6:
14:73:40:c8:dc:9a:8f:eb:f1:4e:2f:cf:0e:cc:9c:0a:fa:41:
43:95:9a:11:0d:2f:af:08:f0:35:23:48:64:50:04:a2:38:f5:
e4:4c:70:5d:4c:7c:d8:ba:1d:46:9c:ca:91:f7:b0:09:fe:dd:
7c:e9:39:7a:ce:21:cc:3e:5c:a4:fa:43:ac:b2:b5:44:b6:9c:
d1:21:87:72:86:c2:95:ac:43:92:26:83:e7:ca:2c:f4:34:a1:
ba:3a:be:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 09:40:33 2024 by rpki-client on console-fra.rpki-client.org