Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/0vuiRDCEB9CQ7dclgRJ8LhFv3mo.roa
File: 0vuiRDCEB9CQ7dclgRJ8LhFv3mo.roa (raw, json)
Hash identifier: v9WveenLH6IxR0zvMDUz5fe89Lje3RXrxjgVL86m87A=
Subject key identifier: D2:FB:A2:44:30:84:07:D0:90:ED:D7:25:81:12:7C:2E:11:6F:DE:6A
Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456
Certificate serial: 018CEE41D49927F42496D720DFD0EF24DA9C
Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/0vuiRDCEB9CQ7dclgRJ8LhFv3mo.roa
Signing time: Tue 09 Jan 2024 12:45:40 +0000
ROA not before: Tue 09 Jan 2024 12:45:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216334
IP address blocks: 109.107.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 15:21:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:41:d4:99:27:f4:24:96:d7:20:df:d0:ef:24:da:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456
Validity
Not Before: Jan 9 12:45:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2fba244308407d090edd72581127c2e116fde6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:af:39:63:bd:39:b8:21:21:7c:52:91:1c:46:
2a:c0:e7:c9:c9:4b:b6:87:dc:25:3d:51:95:68:a1:
2b:0b:12:50:aa:60:3d:a3:90:2f:80:c3:88:49:b0:
2a:3a:e4:75:ae:c7:18:64:e0:32:5c:54:16:e8:4c:
3e:54:02:cb:6f:d6:0b:16:15:74:af:12:08:cf:48:
a5:54:9f:ac:ea:79:0b:c5:2d:69:d4:91:e7:63:76:
ad:1d:4a:6e:40:e4:9a:aa:3d:98:17:9e:b3:ba:21:
d2:05:fd:37:6f:ca:b0:62:e8:01:d5:57:fa:67:7e:
51:b7:34:16:b2:2c:9e:89:7a:3a:0e:b4:65:83:c9:
68:97:de:9a:26:6b:cc:4f:42:47:64:4c:c1:4d:81:
db:a4:f7:c3:1a:a8:98:c7:15:d9:87:20:1c:b0:bd:
41:ee:df:44:85:f6:87:71:f4:75:49:7d:09:4f:ff:
c6:76:77:c0:94:bb:1c:80:06:d1:79:31:e1:1b:ee:
5a:87:60:32:05:d8:9b:14:dc:77:82:be:fb:fe:c7:
c6:3d:01:b9:27:21:3e:c4:63:e9:2b:70:ee:5a:a1:
6d:3d:5d:02:bd:24:cb:82:11:60:4e:04:05:1c:60:
e8:e0:b6:e9:e4:70:1f:8e:c0:a9:97:c7:5a:14:fa:
c7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FB:A2:44:30:84:07:D0:90:ED:D7:25:81:12:7C:2E:11:6F:DE:6A
X509v3 Authority Key Identifier:
keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/0vuiRDCEB9CQ7dclgRJ8LhFv3mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.161.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:db:22:b2:0b:4e:95:c1:c8:6c:b0:56:d9:53:a6:de:84:94:
7e:76:59:d0:f4:4c:fa:5c:85:d8:4c:fe:3f:09:71:4a:ff:4a:
1f:76:b8:5c:a3:11:64:b8:51:46:f2:58:92:8f:2d:16:6d:c2:
ef:bc:ad:64:9f:87:14:53:5b:a4:ae:da:4f:93:9c:a0:a5:fd:
da:60:c5:ce:aa:07:e5:e1:cc:01:cf:9e:6f:d8:db:57:d5:ca:
e6:8a:0a:10:45:5f:91:a2:66:47:e1:f5:20:1d:7d:5c:e1:c8:
6a:5b:41:7c:37:e4:27:02:41:9a:03:03:09:1f:89:d9:bd:df:
24:1e:ed:58:25:a3:08:18:ed:01:53:fe:b3:be:d5:4a:d3:14:
57:4c:e3:70:b0:61:d6:b6:ec:fa:e9:61:31:7f:fe:2d:2f:be:
cf:c7:0f:7f:f5:33:c5:17:f5:84:25:87:66:91:a4:2e:4a:02:
11:01:08:29:4d:c2:2d:80:97:c8:89:a4:0d:a5:4e:1c:23:75:
e2:16:cf:20:39:ef:25:64:d8:44:55:22:1d:95:36:aa:ef:4d:
12:72:64:d0:cd:83:a5:5f:06:f4:57:99:ee:ca:df:c4:65:bc:
04:3d:ba:37:77:b8:5e:d3:39:1f:b5:fc:b9:e0:f0:f6:ac:fb:
f9:29:84:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzuQdSZJ/Qkltcg39DvJNqcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4
ZmU0NTYwHhcNMjQwMTA5MTI0NTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmZiYTI0NDMwODQwN2QwOTBlZGQ3MjU4MTEyN2MyZTExNmZkZTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK85Y705uCEhfFKRHEYqwOfJyUu2
h9wlPVGVaKErCxJQqmA9o5AvgMOISbAqOuR1rscYZOAyXFQW6Ew+VALLb9YLFhV0
rxIIz0ilVJ+s6nkLxS1p1JHnY3atHUpuQOSaqj2YF56zuiHSBf03b8qwYugB1Vf6
Z35RtzQWsiyeiXo6DrRlg8lol96aJmvMT0JHZEzBTYHbpPfDGqiYxxXZhyAcsL1B
7t9EhfaHcfR1SX0JT//GdnfAlLscgAbReTHhG+5ah2AyBdibFNx3gr77/sfGPQG5
JyE+xGPpK3DuWqFtPV0CvSTLghFgTgQFHGDo4Lbp5HAfjsCpl8daFPrHlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNL7okQwhAfQkO3XJYESfC4Rb95qMB8GA1UdIwQY
MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt
ZGVlM2VkNDk3YWVlLzEvMHZ1aVJEQ0VCOUNRN2RjbGdSSjhMaEZ2M21vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl
LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWuhMA0G
CSqGSIb3DQEBCwUAA4IBAQCi2yKyC06VwchssFbZU6behJR+dlnQ9Ez6XIXYTP4/
CXFK/0ofdrhcoxFkuFFG8liSjy0WbcLvvK1kn4cUU1ukrtpPk5ygpf3aYMXOqgfl
4cwBz55v2NtX1crmigoQRV+RomZH4fUgHX1c4chqW0F8N+QnAkGaAwMJH4nZvd8k
Hu1YJaMIGO0BU/6zvtVK0xRXTONwsGHWtuz66WExf/4tL77Pxw9/9TPFF/WEJYdm
kaQuSgIRAQgpTcItgJfIiaQNpU4cI3XiFs8gOe8lZNhEVSIdlTaq700ScmTQzYOl
Xwb0V5nuyt/EZbwEPbo3d7he0zkftfy54PD2rPv5KYSu
-----END CERTIFICATE-----
Generated at Thu May 9 23:48:15 2024 by rpki-client on console-ams.rpki-client.org