Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/oSzGKLwD7bpCEerBfjX_H-ANHu8.roa
File: oSzGKLwD7bpCEerBfjX_H-ANHu8.roa (raw, json)
Hash identifier: REPypt4hwV4kbxN7EfW5EOHK1+dMWwz7YFtD/NlkdIQ=
Subject key identifier: A1:2C:C6:28:BC:03:ED:BA:42:11:EA:C1:7E:35:FF:1F:E0:0D:1E:EF
Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456
Certificate serial: 019136B088C9EEEB6D3F44F86B21E3092DCD
Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/oSzGKLwD7bpCEerBfjX_H-ANHu8.roa
Signing time: Fri 09 Aug 2024 10:30:24 +0000
ROA not before: Fri 09 Aug 2024 10:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51765
IP address blocks: 109.107.171.0/24 maxlen: 24
109.107.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:36:b0:88:c9:ee:eb:6d:3f:44:f8:6b:21:e3:09:2d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456
Validity
Not Before: Aug 9 10:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a12cc628bc03edba4211eac17e35ff1fe00d1eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e9:96:18:e3:e0:20:57:a0:dd:bc:53:09:dc:
69:f2:43:73:89:20:fe:83:d1:d0:ed:61:55:d2:b1:
6e:c6:ea:ca:8e:64:32:6b:9d:a9:be:93:0c:93:61:
6f:4c:1e:f3:3b:52:40:52:6c:ac:dd:0e:94:2d:8c:
e4:da:19:64:8c:9b:92:e8:de:76:ef:37:f0:bf:ce:
19:8d:34:1e:0d:29:e3:e9:4c:ff:85:fd:a3:0e:6e:
39:6d:42:b8:ef:dc:c1:46:45:f0:bd:f7:42:d8:00:
b5:89:c5:01:7d:9d:7c:78:d8:e1:c0:74:46:90:7b:
b5:74:d4:ad:cd:eb:48:2b:23:56:63:15:0c:73:6f:
2f:c4:85:14:08:1b:07:8a:c7:18:b6:35:58:b4:25:
11:e8:58:b1:fe:78:f5:86:d9:a2:98:75:96:ab:6b:
b2:eb:57:c7:cb:f9:d7:93:b9:ba:7e:eb:86:81:37:
50:9d:ef:fb:35:c7:2a:12:7c:69:0e:25:5c:94:ee:
04:37:0a:b9:2d:f1:c9:e3:28:2c:ef:b4:99:6a:17:
a7:c6:1b:c8:61:c9:93:b7:06:63:75:f5:d6:55:8e:
ee:2b:da:4a:20:2f:53:4b:8f:25:cf:ce:38:35:8e:
77:58:62:d1:34:ea:64:99:4d:dd:c9:79:7c:fc:15:
c5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2C:C6:28:BC:03:ED:BA:42:11:EA:C1:7E:35:FF:1F:E0:0D:1E:EF
X509v3 Authority Key Identifier:
keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/oSzGKLwD7bpCEerBfjX_H-ANHu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.171.0/24
109.107.182.0/24
Signature Algorithm: sha256WithRSAEncryption
39:71:d3:b5:d4:06:8f:15:fa:13:5f:56:10:96:32:0c:ab:7c:
4f:ee:87:12:21:94:dd:57:b0:cd:78:ac:b6:91:38:e1:6c:e9:
2e:98:bf:9f:8e:4b:b2:00:ce:1e:be:28:20:d2:23:52:05:98:
77:b9:f1:ca:c9:5b:d4:42:c4:69:30:5e:8a:6f:e8:02:e2:8b:
e7:1d:6c:b1:3e:c3:01:e1:95:e3:4a:84:3d:91:ab:e0:13:40:
c1:ee:a8:47:04:a7:64:67:85:33:3f:c0:d9:1d:c3:30:75:f5:
8c:e6:a5:20:12:4c:6a:4f:61:31:74:2d:a4:e8:30:0c:3a:c9:
11:da:99:bc:2f:ea:5b:b7:e9:54:b0:8e:8e:fb:b6:e0:10:99:
7b:b2:d4:74:b7:91:f4:49:23:db:3d:fe:9b:68:b6:7b:d6:94:
bc:0f:e7:b1:5e:81:63:b0:1c:d9:5d:dc:68:42:56:96:52:f4:
42:46:e9:2a:ed:5b:cb:09:30:30:28:d5:37:3a:13:8b:32:f0:
a7:87:1f:c9:b7:bd:96:e3:9f:6f:ea:ca:bb:97:1c:65:08:b1:
2c:a8:07:9e:6c:7a:12:d4:95:e2:26:fb:5e:d7:2b:f4:af:89:
be:7a:56:d1:97:0e:63:d4:25:e6:3b:8f:96:00:d0:8a:d9:a1:
b7:50:ef:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:01:51 2024 by rpki-client on console-fra.rpki-client.org