Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/HrYcht0BVh8g1XESklWhuUHFwjE.roa
File: HrYcht0BVh8g1XESklWhuUHFwjE.roa (raw, json)
Hash identifier: rOKEPaAt0QXW2Tl0nVr3dmtjEWZ4joDHsE5TahEKMHQ=
Subject key identifier: 1E:B6:1C:86:DD:01:56:1F:20:D5:71:12:92:55:A1:B9:41:C5:C2:31
Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456
Certificate serial: 018CEE47567886A62E4CE2FEF0F639DBAD5F
Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/HrYcht0BVh8g1XESklWhuUHFwjE.roa
Signing time: Tue 09 Jan 2024 12:51:41 +0000
ROA not before: Tue 09 Jan 2024 12:51:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203727
IP address blocks: 109.107.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:47:56:78:86:a6:2e:4c:e2:fe:f0:f6:39:db:ad:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456
Validity
Not Before: Jan 9 12:51:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1eb61c86dd01561f20d571129255a1b941c5c231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:16:94:fa:b7:7a:a4:ef:59:3b:e7:d9:79:76:
6b:6e:4b:ec:77:26:e3:af:af:89:3f:ef:03:85:a8:
b2:eb:17:33:63:07:87:37:16:58:1c:5f:15:76:9a:
63:89:b8:2c:66:99:a2:ef:d5:67:11:3c:fe:e4:d3:
9a:26:f8:11:5e:89:53:2f:ac:cc:69:ab:6c:f8:17:
27:cb:04:79:0f:b0:c6:01:8b:93:ad:3a:43:54:c1:
ba:41:9a:88:bf:9c:67:64:e5:74:35:4c:d4:73:f9:
94:ac:03:ee:80:be:c7:c9:08:63:68:9e:d3:81:74:
07:10:e9:2c:e8:d5:4f:2b:8e:d7:ab:b9:59:c3:27:
9e:18:ac:e1:c8:d6:1b:10:4d:7b:b1:af:04:3e:f8:
17:cb:d6:9b:b0:82:2d:8f:95:27:19:61:2a:d2:26:
78:a9:4b:67:63:1d:f3:d0:61:c1:93:83:3b:76:57:
24:b2:d6:f4:c5:f9:0a:c3:8f:a6:da:9a:63:8e:1a:
29:fc:c0:9d:79:08:11:88:45:93:1c:69:c9:2f:b9:
3e:9e:a1:04:e0:5a:30:b1:83:58:7b:7f:82:ab:66:
db:f5:d3:a7:fd:ae:c3:67:ad:5d:49:c7:53:3d:54:
79:e7:f6:c0:ce:14:44:84:70:a6:48:40:bf:d9:53:
47:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B6:1C:86:DD:01:56:1F:20:D5:71:12:92:55:A1:B9:41:C5:C2:31
X509v3 Authority Key Identifier:
keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/HrYcht0BVh8g1XESklWhuUHFwjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.182.0/24
Signature Algorithm: sha256WithRSAEncryption
85:bb:a4:74:65:16:d2:36:31:a2:23:83:9c:82:e7:bd:f7:bd:
56:ff:bf:03:72:01:20:f6:a5:df:d6:62:ca:60:86:4e:09:88:
db:fc:9b:17:da:11:c0:c3:f6:67:ba:d0:73:df:37:36:be:fc:
21:3d:18:d6:66:82:ee:f8:50:21:43:f8:f5:4f:25:cd:23:73:
b4:e8:61:16:49:04:ec:4c:a6:28:7b:b9:96:f7:c1:db:3b:99:
80:f1:0b:a9:7d:da:13:97:7e:88:ac:db:64:ec:dd:b8:37:15:
7f:65:34:bc:e5:7f:7c:87:88:77:97:10:4b:7f:92:61:1b:35:
00:fe:6a:51:27:93:78:2d:f7:32:6b:98:e9:ae:4d:52:98:5e:
31:c3:2e:4f:60:19:77:1c:df:40:2a:43:d7:84:8a:1f:fe:01:
e3:68:1d:9d:c1:90:b2:2c:f5:61:32:34:a3:d3:68:46:a4:61:
c4:cf:3d:dd:f2:79:ff:47:6a:8e:b2:42:dd:9d:8c:e1:a9:3f:
54:0e:8a:0b:c1:8e:4f:3e:4d:38:b9:be:86:a0:19:79:9a:68:
4a:2a:0b:f9:8b:be:58:49:b1:85:fa:85:f8:f9:a1:71:06:9e:
4b:a0:c0:1f:14:d1:bd:6f:cb:6f:97:a5:32:84:01:b9:95:6e:
3a:0a:ba:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 12:46:54 2024 by rpki-client on console-ams.rpki-client.org