Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/0blcMW_whGxhPqH3Bh7yII884KE.roa
File: 0blcMW_whGxhPqH3Bh7yII884KE.roa (raw, json)
Hash identifier: B2k3tKcon+n0qILFNmxPA3UXLnIZ4I5KW9o1i+T+5AQ=
Subject key identifier: D1:B9:5C:31:6F:F0:84:6C:61:3E:A1:F7:06:1E:F2:20:8F:3C:E0:A1
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 018CC26D0052319F526230071BEE67DCFB04
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/0blcMW_whGxhPqH3Bh7yII884KE.roa
Signing time: Mon 01 Jan 2024 00:29:32 +0000
ROA not before: Mon 01 Jan 2024 00:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50269
IP address blocks: 109.95.64.0/21 maxlen: 21
109.95.64.0/24 maxlen: 24
109.95.68.0/24 maxlen: 24
109.95.67.0/24 maxlen: 24
109.95.66.0/24 maxlen: 24
109.95.71.0/24 maxlen: 24
109.95.70.0/24 maxlen: 24
109.95.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:00:52:31:9f:52:62:30:07:1b:ee:67:dc:fb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: Jan 1 00:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1b95c316ff0846c613ea1f7061ef2208f3ce0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a9:65:4a:b6:80:b6:f6:ac:8f:e2:5a:86:4d:
da:60:6d:7d:b7:2d:94:6e:07:6c:f6:cf:66:0a:a5:
df:55:3c:24:98:da:d7:08:f2:de:95:fa:1d:67:36:
95:2d:f7:56:c6:29:81:7a:df:00:13:ed:ca:60:b9:
52:ad:7d:aa:ba:48:63:2c:db:65:df:a6:66:49:98:
4f:3a:2a:c2:7a:4c:27:d1:b2:a5:2f:de:a6:46:b9:
78:ef:c7:86:39:f1:72:8f:7e:1f:d2:3c:7d:64:ea:
17:6a:e9:a7:5d:72:94:44:c2:17:fb:ba:d1:b6:59:
36:ab:7b:0b:2b:ab:34:a7:99:9f:16:99:f1:40:4a:
aa:a4:46:ad:dd:02:a3:b9:85:05:9a:2b:15:a3:69:
88:17:83:cc:3f:0a:4c:c6:be:ff:d4:22:ae:5b:bc:
7a:56:a9:b4:73:f7:ce:1a:1c:6d:28:8f:ad:6f:e5:
53:02:9a:07:62:92:bd:93:97:c4:5c:4e:26:9c:cb:
f7:b0:a3:be:b5:fe:6d:60:9e:ee:93:d5:cc:c6:2c:
6e:dc:28:6a:f8:05:8e:2b:ac:22:76:03:53:c6:15:
f8:b7:ce:11:fd:65:c7:0c:2a:55:f3:1e:30:80:55:
f1:99:7d:aa:59:c6:ec:6e:0a:c7:95:c2:5b:fb:a1:
9d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B9:5C:31:6F:F0:84:6C:61:3E:A1:F7:06:1E:F2:20:8F:3C:E0:A1
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/0blcMW_whGxhPqH3Bh7yII884KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.64.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:bf:55:a8:d0:42:1f:87:ba:e2:57:7c:4e:b0:11:dc:4e:63:
80:a5:77:36:d7:c4:09:86:6a:44:aa:89:fc:e6:94:69:16:81:
1b:57:a0:8e:fd:72:e3:32:ab:e5:e9:8b:22:86:13:24:c4:fe:
0d:d9:68:cc:8b:7d:58:ce:ea:6b:05:1f:1c:30:42:3b:3b:30:
d2:60:32:fa:c1:ad:3d:4e:58:7b:a0:c5:e0:09:9a:33:db:35:
1e:22:e1:a9:3b:da:ed:65:a0:fb:7d:a1:e7:83:89:03:63:36:
7e:b8:bb:76:7d:02:b5:d9:40:7f:1a:92:a1:2c:3a:c2:17:d9:
6b:98:02:f5:05:fc:23:17:e3:cc:dd:0c:42:9c:92:a1:fc:36:
dd:70:29:35:2e:d1:ed:1d:3b:c6:e1:1d:8b:bb:dd:47:1c:6f:
25:8a:78:c0:1c:ae:6d:b6:00:3a:05:f3:b2:91:15:6e:ca:fa:
04:bc:dc:85:fb:13:34:64:9d:d6:f1:37:6c:4b:7b:f9:4e:3d:
44:62:c1:ed:ba:d6:98:07:f7:1b:0f:17:a0:0b:4b:68:70:f4:
68:e0:6d:70:af:a8:bf:1c:9b:67:c8:05:84:b1:15:29:e9:ec:
f8:bc:8f:0d:c8:c2:7b:29:56:7e:db:ef:24:ae:38:88:87:17:
36:12:f1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:32:51 2024 by rpki-client on console-fra.rpki-client.org