Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/5UbKU9T8qTjdjVTZx4buYJEwCiE.roa
File: 5UbKU9T8qTjdjVTZx4buYJEwCiE.roa (raw, json)
Hash identifier: XYeMaPJ7Xd51a2FabrF1aR7YKrAfwqYSZREmN97xnrY=
Subject key identifier: E5:46:CA:53:D4:FC:A9:38:DD:8D:54:D9:C7:86:EE:60:91:30:0A:21
Certificate issuer: /CN=444fd414bbbb50c9ffb5e8cf06654f79fb5876cc
Certificate serial: 0192B43D2029A78C68B09758620A8CC4D5C8
Authority key identifier: 44:4F:D4:14:BB:BB:50:C9:FF:B5:E8:CF:06:65:4F:79:FB:58:76:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RE_UFLu7UMn_tejPBmVPeftYdsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/5UbKU9T8qTjdjVTZx4buYJEwCiE.roa
Signing time: Tue 22 Oct 2024 12:39:17 +0000
ROA not before: Tue 22 Oct 2024 12:39:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210603
IP address blocks: 109.107.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RE_UFLu7UMn_tejPBmVPeftYdsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 18:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b4:3d:20:29:a7:8c:68:b0:97:58:62:0a:8c:c4:d5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=444fd414bbbb50c9ffb5e8cf06654f79fb5876cc
Validity
Not Before: Oct 22 12:39:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e546ca53d4fca938dd8d54d9c786ee6091300a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a5:93:a3:9a:09:cf:ee:07:80:ac:b8:3d:8e:
cf:de:c5:ab:52:06:55:f3:2a:67:94:76:73:7b:66:
0b:df:83:8e:50:fe:c6:ae:29:61:bc:dd:70:7b:32:
1c:ad:4a:cc:c8:20:8f:25:3a:2c:5a:c9:ae:53:3e:
6e:ae:81:e6:a5:76:61:c7:89:ed:8b:f3:46:40:c9:
b8:f5:d3:fb:92:c2:af:e6:cf:2a:11:43:c5:54:b5:
1e:ed:da:8a:70:e7:22:aa:28:e2:62:37:79:d6:80:
e7:c9:71:07:3b:ee:02:b9:3b:4a:0c:01:8c:15:f4:
36:00:7c:ee:2f:3f:62:b8:04:d0:ad:c8:8b:bb:3b:
86:e9:7b:d0:55:c1:83:ed:3d:36:f9:2a:16:4c:e8:
2f:47:60:02:39:38:e6:af:9c:a6:81:1e:80:a3:de:
10:9a:d5:7d:aa:12:b7:09:75:2f:01:75:58:0b:0a:
9a:21:0e:dd:28:13:e0:72:18:48:75:b9:3f:8c:5d:
f2:76:ab:1c:4b:aa:10:34:21:5b:1c:3c:46:93:71:
3c:bf:8c:a0:bf:72:4b:49:7f:65:5c:31:dc:aa:85:
df:ba:3e:fc:72:52:57:57:10:a7:60:d2:2e:88:25:
79:de:2b:26:24:40:4f:63:d2:fc:53:fd:0c:48:52:
c1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:46:CA:53:D4:FC:A9:38:DD:8D:54:D9:C7:86:EE:60:91:30:0A:21
X509v3 Authority Key Identifier:
keyid:44:4F:D4:14:BB:BB:50:C9:FF:B5:E8:CF:06:65:4F:79:FB:58:76:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RE_UFLu7UMn_tejPBmVPeftYdsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/5UbKU9T8qTjdjVTZx4buYJEwCiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.131.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:38:60:87:04:98:fd:ae:df:70:c0:0f:5a:45:8d:16:88:a1:
d4:cb:7c:da:0b:e9:db:cd:50:80:0a:95:b6:f4:e1:e8:d4:55:
89:47:fc:eb:cd:30:a3:3f:08:c4:34:fd:d6:a3:27:7e:3d:13:
35:22:50:b4:0e:7e:b3:39:98:40:49:e5:7e:09:ba:52:a6:91:
6c:6c:cd:95:6a:0f:61:dd:80:dd:f3:e3:28:82:b1:b3:6b:36:
a0:0b:84:27:83:ac:db:33:8e:51:53:e9:87:f4:ac:3b:21:f7:
de:d5:3b:e7:13:50:e8:52:62:50:98:1f:9e:7e:92:ca:46:37:
ce:02:6a:a6:fb:17:be:bb:90:3b:73:03:f7:bc:1c:6f:29:00:
de:fe:2f:36:79:ab:30:4b:85:dc:1b:0f:46:dc:ae:c8:91:f5:
58:58:8a:76:87:9b:3a:2f:d7:64:c9:bc:7e:fc:95:46:e2:00:
2f:b9:30:5d:dc:89:56:7a:4f:d9:a6:9d:15:0b:20:7e:e0:81:
65:92:51:c4:30:32:dd:b1:c0:de:b4:da:c5:fb:39:18:79:11:
bb:ed:17:a1:02:56:96:f4:52:56:ec:df:d5:84:44:f2:a8:dc:
0a:2d:e2:75:28:2f:ba:40:f5:c8:00:d0:88:d2:92:fc:0b:12:
99:6b:19:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:58:02 2024 by rpki-client on console-fra.rpki-client.org