Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/BPoHn-9SkOiAWoF7pLXexdsZeGE.roa
File: BPoHn-9SkOiAWoF7pLXexdsZeGE.roa (raw, json)
Hash identifier: yUeLbqsmMgez1OCl8ODnCGRiDbKmXUbNj31KueHxxWE=
Subject key identifier: 04:FA:07:9F:EF:52:90:E8:80:5A:81:7B:A4:B5:DE:C5:DB:19:78:61
Certificate issuer: /CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Certificate serial: 018FECA0BAFF2F6C4BB7C14038D4A84C61AE
Authority key identifier: 89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/BPoHn-9SkOiAWoF7pLXexdsZeGE.roa
Signing time: Thu 06 Jun 2024 08:18:27 +0000
ROA not before: Thu 06 Jun 2024 08:18:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50710
IP address blocks: 109.224.0.0/18 maxlen: 18
109.224.0.0/21 maxlen: 21
109.224.1.0/24 maxlen: 24
109.224.2.0/23 maxlen: 23
109.224.4.0/22 maxlen: 22
109.224.8.0/21 maxlen: 21
109.224.8.0/22 maxlen: 22
109.224.12.0/23 maxlen: 23
109.224.12.0/24 maxlen: 24
109.224.13.0/24 maxlen: 24
109.224.14.0/23 maxlen: 23
109.224.14.0/24 maxlen: 24
109.224.15.0/24 maxlen: 24
109.224.16.0/22 maxlen: 22
109.224.20.0/22 maxlen: 22
109.224.24.0/22 maxlen: 22
109.224.28.0/24 maxlen: 24
109.224.29.0/24 maxlen: 24
109.224.30.0/23 maxlen: 23
109.224.32.0/22 maxlen: 22
109.224.32.0/24 maxlen: 24
109.224.36.0/22 maxlen: 22
109.224.40.0/21 maxlen: 21
109.224.40.0/24 maxlen: 24
109.224.41.0/24 maxlen: 24
109.224.42.0/23 maxlen: 23
109.224.42.0/24 maxlen: 24
109.224.43.0/24 maxlen: 24
109.224.44.0/22 maxlen: 22
109.224.44.0/24 maxlen: 24
109.224.45.0/24 maxlen: 24
109.224.46.0/24 maxlen: 24
109.224.47.0/24 maxlen: 24
109.224.48.0/21 maxlen: 21
109.224.48.0/22 maxlen: 22
109.224.52.0/22 maxlen: 22
109.224.56.0/21 maxlen: 21
109.224.56.0/22 maxlen: 22
109.224.60.0/22 maxlen: 22
185.118.96.0/22 maxlen: 22
185.118.96.0/24 maxlen: 24
185.141.9.0/24 maxlen: 24
185.141.10.0/24 maxlen: 24
185.141.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ec:a0:ba:ff:2f:6c:4b:b7:c1:40:38:d4:a8:4c:61:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Validity
Not Before: Jun 6 08:18:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04fa079fef5290e8805a817ba4b5dec5db197861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3f:01:3b:c5:ed:47:7c:6b:e0:35:07:f2:df:
8e:8d:89:0f:20:1a:d4:a5:cc:f7:8c:c7:13:81:d7:
ad:c2:7d:34:f1:bb:15:fe:b1:33:de:fb:26:1d:8b:
7e:5a:4b:30:0f:4b:7f:b0:7c:68:7f:a5:09:2d:80:
f3:d3:b7:9d:59:ac:9f:5b:30:b5:21:7d:3d:97:28:
46:c8:40:39:ab:38:f2:9c:06:c3:e0:3f:00:18:67:
b8:57:ef:fa:ef:4e:d6:ca:fa:1d:e1:80:b2:ff:ce:
bd:a9:0b:65:d1:fe:3c:8e:b6:00:e9:9d:25:29:5a:
f7:db:f0:46:3a:37:0b:0f:d2:c4:b7:f0:23:28:15:
13:1a:82:fd:ee:0c:1e:e7:c4:46:6a:da:01:db:66:
3a:95:00:b1:a4:a4:24:3a:ec:58:3a:78:58:b6:f1:
d1:00:48:fb:89:24:86:56:c9:e9:21:38:d0:de:09:
e4:b8:7e:94:d4:d3:02:f3:4b:12:b4:f0:0e:27:e4:
a1:cd:2a:33:9c:e5:cf:b7:62:0b:30:cc:45:55:f0:
0e:20:f8:e9:27:48:7a:a9:a5:c1:c2:76:79:d0:2c:
53:ba:d5:17:50:5e:18:a6:ed:df:a7:b5:af:c5:56:
7d:04:5f:71:e6:b0:8c:35:2a:73:fd:b5:20:6f:b4:
59:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FA:07:9F:EF:52:90:E8:80:5A:81:7B:A4:B5:DE:C5:DB:19:78:61
X509v3 Authority Key Identifier:
keyid:89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/BPoHn-9SkOiAWoF7pLXexdsZeGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.224.0.0/18
185.118.96.0/22
185.141.9.0-185.141.11.255
Signature Algorithm: sha256WithRSAEncryption
3e:9b:f8:d3:83:e9:83:e5:c8:b5:df:78:b8:8a:45:5a:6e:07:
b3:96:cb:1f:d7:08:1c:0e:f6:28:37:46:9c:ca:e0:b8:49:d2:
05:2b:93:c1:8d:68:f7:c9:34:1a:7a:34:02:72:d7:5b:e8:76:
cd:ae:13:4c:c3:cb:6c:8d:56:18:92:38:de:85:3f:33:08:33:
c6:e2:cf:a4:36:f8:2e:94:11:61:01:44:c2:ac:c3:d9:8a:9c:
aa:35:b5:32:15:53:b1:d2:8d:b2:f4:3a:97:da:15:9e:5e:b8:
32:3e:7c:54:27:22:a4:81:e3:f5:9a:03:26:8f:95:5e:ee:18:
bd:90:cf:18:27:d1:7a:0b:f7:48:2a:12:fa:af:6f:b7:8f:07:
3c:4a:20:f5:34:ba:3b:58:71:60:98:77:d8:c2:19:e5:14:20:
98:22:0a:44:2b:ac:50:80:e6:06:4b:f3:09:3d:9b:c5:29:fd:
c5:0a:67:60:54:db:7e:4c:9a:4b:67:66:0a:c5:1a:1a:4c:9e:
9c:98:c5:f9:17:4a:e6:59:57:44:ea:54:48:68:34:52:29:85:
e9:a9:c7:ca:75:c5:af:4f:ad:ec:62:d1:2b:1b:31:a1:58:b9:
88:ce:6f:e6:42:e5:85:0a:93:6f:0c:32:d9:2b:72:3a:ac:57:
07:c5:32:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:40:41 2024 by rpki-client on console-fra.rpki-client.org