Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/9cgOLKHfBXic18SWWWVJ8dJVKC0.roa
File: 9cgOLKHfBXic18SWWWVJ8dJVKC0.roa (raw, json)
Hash identifier: bxoYgPgCFjPlDgxzdQn5McCph4gAeiEInaVog9CmMIo=
Subject key identifier: F5:C8:0E:2C:A1:DF:05:78:9C:D7:C4:96:59:65:49:F1:D2:55:28:2D
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 0192C7ED18520A5FCAFBE948AD532177B202
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/9cgOLKHfBXic18SWWWVJ8dJVKC0.roa
Signing time: Sat 26 Oct 2024 08:24:17 +0000
ROA not before: Sat 26 Oct 2024 08:24:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210392
IP address blocks: 109.95.66.0/24 maxlen: 24
109.95.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c7:ed:18:52:0a:5f:ca:fb:e9:48:ad:53:21:77:b2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: Oct 26 08:24:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5c80e2ca1df05789cd7c496596549f1d255282d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:51:b7:06:75:a6:18:01:86:a3:92:ad:40:
a7:df:ed:51:61:48:d5:c4:76:7e:72:97:d9:a8:22:
a6:1f:28:fb:84:a5:58:72:61:7d:6c:8b:af:49:fd:
c0:d3:3f:7e:00:d7:e2:c2:24:9c:73:6d:49:fd:ad:
58:44:42:0f:f9:78:73:aa:82:f3:77:cb:fd:ae:ce:
12:ec:a2:04:69:ea:0b:e0:8b:a6:ba:a7:b1:cf:b5:
8c:d6:a5:72:91:e5:85:64:4d:b7:09:12:00:ad:7a:
f6:64:81:53:8a:a6:73:aa:63:86:57:e0:c2:20:a6:
4a:a0:19:6a:dc:d6:ee:b7:5b:64:9e:39:8c:53:04:
16:cb:f3:41:a8:52:27:d0:2f:e6:94:2b:17:08:93:
c0:5d:af:22:81:14:fa:aa:26:99:46:01:7b:7f:80:
9f:0f:9b:c8:73:7b:70:b4:c9:79:44:26:01:89:ec:
72:50:bd:ab:d2:0d:3c:e2:d5:62:ef:a5:c9:c8:1d:
56:47:10:89:a2:2d:54:5b:0b:65:4b:ca:59:22:8c:
7e:d5:7f:4a:13:2b:51:7e:db:e5:b8:ae:ab:b9:66:
d5:ea:0f:b3:59:bd:d5:73:cf:5c:23:4c:d4:8f:07:
7e:31:c8:33:db:da:9b:1d:e0:55:01:50:3f:97:6b:
e7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C8:0E:2C:A1:DF:05:78:9C:D7:C4:96:59:65:49:F1:D2:55:28:2D
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/9cgOLKHfBXic18SWWWVJ8dJVKC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.66.0/23
Signature Algorithm: sha256WithRSAEncryption
d7:95:b7:73:03:f9:17:e8:67:86:ea:d7:a7:6f:be:2e:88:17:
bc:bb:81:75:55:bf:d6:66:2a:ac:dd:af:67:60:e7:1a:f1:c2:
7c:43:86:21:ee:8b:44:21:35:f8:f9:f9:29:74:8b:b0:b5:9e:
f6:19:ec:2c:44:5d:6f:f5:8e:6e:e6:97:c6:b9:b7:c1:13:94:
dd:c9:d1:f3:1e:18:1d:28:c5:34:f4:3b:27:10:8f:71:fb:5b:
21:a9:19:bb:bf:9f:73:d4:68:e9:13:1b:20:1d:db:6f:bc:9b:
06:de:0c:1c:12:bc:9f:35:c1:a8:00:f9:80:b9:66:f8:a7:ad:
a1:66:bc:ab:98:97:47:60:17:83:42:f4:be:2e:58:f3:56:eb:
8c:2b:fc:37:e3:d7:cb:d1:bc:18:b1:04:ec:ff:a9:36:35:a8:
7f:68:f0:19:a9:f1:cc:8a:65:28:72:ee:d4:96:36:fc:e7:49:
76:f0:11:e1:e0:d8:1a:2d:24:0f:5e:48:45:ff:6b:c9:f3:58:
55:9e:fd:ea:4f:66:68:08:d9:14:3c:20:3d:0e:7d:cd:4e:f2:
c2:2d:fb:ee:2a:0d:28:14:72:c2:2b:d0:9a:bf:07:c8:67:a7:
41:6b:5d:98:2e:7e:bd:5b:d7:51:58:49:0d:70:ed:21:a0:b6:
6b:a9:b8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:29:56 2024 by rpki-client on console-ams.rpki-client.org