Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/ozoLlf5cJ5xYHf1Spb5IeuGAm7g.roa
File: ozoLlf5cJ5xYHf1Spb5IeuGAm7g.roa (raw, json)
Hash identifier: 6NmfTfgXK06zcd+DXqwIy1mqv9jafUfp8LH/z4S5a2Y=
Subject key identifier: A3:3A:0B:95:FE:5C:27:9C:58:1D:FD:52:A5:BE:48:7A:E1:80:9B:B8
Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456
Certificate serial: 018CEE4753F0F025990E99BFBDE87F6603F3
Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/ozoLlf5cJ5xYHf1Spb5IeuGAm7g.roa
Signing time: Tue 09 Jan 2024 12:51:41 +0000
ROA not before: Tue 09 Jan 2024 12:51:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51765
IP address blocks: 109.107.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 23:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:47:53:f0:f0:25:99:0e:99:bf:bd:e8:7f:66:03:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456
Validity
Not Before: Jan 9 12:51:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a33a0b95fe5c279c581dfd52a5be487ae1809bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:8e:cc:33:a7:b7:b7:02:b2:42:38:df:ab:
c7:84:12:41:e5:9d:98:49:d4:c1:90:da:bc:0a:9e:
38:2c:ef:a0:1d:47:bc:29:b3:a2:59:a9:51:c3:97:
e4:ae:01:ae:66:70:c5:8d:a1:b9:cf:1c:d5:ef:94:
63:06:99:ec:b9:32:15:f3:3d:cf:1a:bb:2e:43:c0:
a7:6e:2f:f0:f3:11:a5:f9:4c:a4:75:d1:5a:91:c7:
89:ca:82:a2:14:f9:00:1c:06:e1:90:10:a9:a4:b9:
4d:72:23:0b:48:aa:51:fd:96:9f:a8:68:1f:44:bc:
ec:90:f7:ab:bd:05:80:f9:3c:11:f0:be:d1:42:d3:
8d:d7:cd:2b:d7:b3:a8:15:51:c1:ac:8d:5b:64:f9:
8a:a0:72:b6:97:f7:10:1b:ef:a4:8d:a9:15:11:fe:
03:8a:ad:2c:a2:ce:a8:34:ef:5c:51:73:31:fd:60:
0a:fd:11:00:e2:06:9a:ac:28:69:73:af:b7:05:c9:
e2:8d:c5:2a:2f:f5:56:f9:f3:cc:c0:6d:5c:9f:60:
02:13:31:f5:37:bf:1e:c6:a8:ec:b6:bd:c6:cf:e9:
38:e0:2c:f8:0a:2e:69:66:99:b1:ef:26:7e:e6:21:
bc:26:9a:5b:84:da:b1:c8:11:6e:5a:38:7e:e8:24:
77:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3A:0B:95:FE:5C:27:9C:58:1D:FD:52:A5:BE:48:7A:E1:80:9B:B8
X509v3 Authority Key Identifier:
keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/ozoLlf5cJ5xYHf1Spb5IeuGAm7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.171.0/24
Signature Algorithm: sha256WithRSAEncryption
51:17:0e:66:4c:93:67:a3:3a:92:fd:02:df:7f:44:03:c0:d5:
80:c4:f4:df:c8:ee:78:35:94:71:ba:58:30:3e:68:87:c7:2b:
70:a0:28:41:79:43:61:ba:57:9e:4c:12:4b:b1:a5:6e:1f:8a:
38:59:ce:2e:0b:68:c3:8d:9d:4f:02:e7:65:96:35:38:e2:ad:
15:ab:7c:a5:f9:a8:0f:05:d7:8f:82:c4:dd:64:d8:ea:02:18:
e4:f3:d8:62:ed:5e:68:04:4e:92:e6:97:ab:98:b6:6c:23:06:
06:c3:aa:61:16:2d:cf:eb:15:37:03:2a:e9:be:42:23:04:64:
f1:c7:6c:4e:67:e8:43:05:1d:50:7a:15:e5:88:99:e9:c9:bc:
f6:6f:3a:3c:aa:da:44:ad:e2:f3:ce:c9:51:64:d9:96:43:cf:
c0:01:b2:28:f6:de:43:4b:67:86:86:aa:cd:9c:07:47:2c:ff:
26:ad:c2:59:d9:58:0a:79:75:e6:70:72:5a:1e:e4:66:96:81:
e0:40:af:bb:05:86:96:41:9d:19:df:62:ec:a1:e1:e9:ef:9c:
4c:0a:eb:50:99:d2:a8:18:40:84:99:b4:69:49:3e:1a:90:fe:
94:67:10:85:b5:0c:a0:6d:e8:d5:fb:86:b9:78:1c:53:79:74:
8c:76:67:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 06:44:24 2024 by rpki-client on console-ams.rpki-client.org