Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/_7nPrFl4IyEZQfV99GXbvDeXrts.roa
File: _7nPrFl4IyEZQfV99GXbvDeXrts.roa (raw, json)
Hash identifier: od5U5eRca9U32VcKyhw0ZbIN4OT7yqvduJtS+RWhCas=
Subject key identifier: FF:B9:CF:AC:59:78:23:21:19:41:F5:7D:F4:65:DB:BC:37:97:AE:DB
Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456
Certificate serial: 018CEE475576406AA38C5D4390C66079C563
Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/_7nPrFl4IyEZQfV99GXbvDeXrts.roa
Signing time: Tue 09 Jan 2024 12:51:41 +0000
ROA not before: Tue 09 Jan 2024 12:51:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56380
IP address blocks: 109.107.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:47:55:76:40:6a:a3:8c:5d:43:90:c6:60:79:c5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456
Validity
Not Before: Jan 9 12:51:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffb9cfac597823211941f57df465dbbc3797aedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bf:54:01:56:e6:65:0c:10:21:70:5e:64:2c:
9a:03:4d:34:16:b9:85:de:19:b8:6a:e7:01:c0:f4:
88:1b:65:4b:42:fc:fb:a1:ec:56:88:a1:24:da:30:
43:e5:0e:27:58:20:c1:48:fe:e0:29:e1:4d:d6:f7:
c5:f9:05:17:cc:61:32:3a:13:e6:c3:52:44:7b:3a:
54:66:9d:3a:60:9b:27:80:d7:34:be:21:5c:ea:bb:
c0:32:32:3d:1d:71:d6:5d:70:dc:27:d1:52:75:06:
3b:b4:c1:d8:18:53:e9:bc:94:35:05:ef:ff:ea:ee:
99:8e:39:99:0f:79:cd:d9:1b:0b:77:67:fc:3e:04:
4b:6b:83:93:7e:45:ce:38:f8:04:86:a2:c8:8c:98:
62:61:ae:88:16:5e:9f:f8:b2:bd:e2:78:72:0c:86:
22:96:c6:7c:76:c2:86:a8:0a:40:f9:40:32:f6:5b:
6a:b5:a9:27:48:71:2b:36:ff:4a:b6:3c:61:f5:4b:
82:7f:77:18:2b:5f:18:99:b4:42:75:ce:4d:92:8f:
be:ba:5e:b6:10:e2:a1:d0:90:3a:85:58:30:b6:fc:
38:0f:98:d0:32:01:de:ef:fd:c7:16:15:9e:35:40:
a2:72:a2:43:7e:ea:4e:e0:08:b9:df:67:50:eb:c6:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B9:CF:AC:59:78:23:21:19:41:F5:7D:F4:65:DB:BC:37:97:AE:DB
X509v3 Authority Key Identifier:
keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/_7nPrFl4IyEZQfV99GXbvDeXrts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.183.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:2e:97:58:2d:62:f8:77:2a:c1:5f:4c:bd:c8:c0:1d:e3:81:
a3:48:ba:b7:64:57:96:d1:b5:03:6d:01:b1:93:aa:87:d1:60:
12:ce:0f:4e:9b:47:62:07:59:ef:1c:4f:d0:af:cb:0b:06:60:
c1:cb:22:75:30:be:9d:6d:cf:10:20:95:db:ef:84:3c:cd:7e:
82:d9:46:2c:37:93:ed:f4:3f:04:87:b5:ad:2f:31:36:54:6a:
52:00:6e:b7:7e:c4:fc:b7:50:bc:47:b6:c6:db:06:88:d8:58:
98:61:c4:45:6f:20:de:8f:fd:96:e8:d5:d7:c9:b7:45:79:d0:
20:7f:c2:bf:68:b4:fa:e9:65:c4:c8:14:12:50:92:e6:60:45:
b4:dc:d2:7f:97:12:7e:44:f6:7e:6e:b6:d0:61:6e:f7:ab:86:
fb:6d:72:c9:0e:cb:70:4a:0a:49:e3:24:4f:69:bd:2b:94:cb:
dd:14:83:1f:dd:92:8f:60:95:ac:88:e3:a7:8d:eb:c1:0b:c1:
57:cc:b7:a0:7e:02:a7:b1:bb:bc:c5:a8:ad:05:49:be:68:83:
10:ef:02:df:10:9d:bb:0f:f8:38:61:ae:85:08:0e:52:a1:28:
b3:0e:cf:d3:91:11:37:27:9d:57:0a:ca:94:3a:57:47:89:61:
03:55:42:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 18:47:30 2024 by rpki-client on console-ams.rpki-client.org