Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/yCv7etAYaibf4OILHU6IZERLqWU.roa
File: yCv7etAYaibf4OILHU6IZERLqWU.roa (raw, json)
Hash identifier: 7TfruWOcv4evuHsY0LE9YAaB7mA4zbxechuazIGW33I=
Subject key identifier: C8:2B:FB:7A:D0:18:6A:26:DF:E0:E2:0B:1D:4E:88:64:44:4B:A9:65
Certificate issuer: /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Certificate serial: 018DCB3F1F5D89B345EF66E9DBBD5AF448E2
Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/yCv7etAYaibf4OILHU6IZERLqWU.roa
Signing time: Wed 21 Feb 2024 10:38:48 +0000
ROA not before: Wed 21 Feb 2024 10:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29676
IP address blocks: 109.224.192.0/20 maxlen: 20
109.224.208.0/21 maxlen: 21
109.224.216.0/22 maxlen: 22
109.224.220.0/23 maxlen: 23
109.224.222.0/24 maxlen: 24
109.224.228.0/22 maxlen: 22
109.224.233.0/24 maxlen: 24
109.224.236.0/22 maxlen: 22
109.224.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cb:3f:1f:5d:89:b3:45:ef:66:e9:db:bd:5a:f4:48:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Validity
Not Before: Feb 21 10:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c82bfb7ad0186a26dfe0e20b1d4e8864444ba965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:ca:9e:0e:84:9d:cf:62:e1:28:89:42:42:
76:94:4a:df:df:86:5c:83:47:5f:52:bc:cf:7a:aa:
e5:07:d7:08:f9:4c:82:b7:de:2c:b6:f3:58:fb:1f:
86:d2:75:bf:94:13:10:2e:3e:1e:a0:f6:1f:6a:d3:
17:87:4c:de:86:e7:29:c1:61:06:d2:29:eb:8c:4d:
47:11:a8:ae:c0:f1:50:9a:a9:2d:95:97:1f:4b:6d:
e1:7c:97:ad:4f:fa:53:f1:1f:dd:ff:1b:15:bc:51:
c5:81:39:c2:4e:dc:6d:90:93:ce:5e:c5:e1:da:89:
02:0b:dd:02:43:c4:4a:75:7b:ff:a3:90:bf:1e:e7:
86:05:89:80:0e:cb:35:8c:81:78:14:92:27:11:e3:
9d:79:7a:97:fd:1e:b9:9c:b1:13:92:78:e3:a1:90:
1b:fd:8e:1b:41:73:b7:2d:b0:aa:43:86:61:f5:c5:
f1:24:9e:26:fa:62:31:21:86:2f:5b:db:34:e1:35:
3a:03:02:99:29:5a:5c:87:58:96:4d:58:14:37:bc:
dc:c6:ed:4a:dd:04:4f:2b:b2:54:ca:77:de:76:7d:
47:3e:d7:fc:0b:3f:76:3c:95:ff:77:09:f2:ca:77:
55:87:50:cc:eb:5b:24:25:f1:68:ab:b0:e7:54:ad:
48:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2B:FB:7A:D0:18:6A:26:DF:E0:E2:0B:1D:4E:88:64:44:4B:A9:65
X509v3 Authority Key Identifier:
keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/yCv7etAYaibf4OILHU6IZERLqWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.224.192.0-109.224.222.255
109.224.228.0/22
109.224.233.0/24
109.224.236.0/22
109.224.244.0/22
Signature Algorithm: sha256WithRSAEncryption
51:15:96:51:42:bf:ed:b3:b3:b0:72:d2:2c:a1:ff:96:dc:34:
b0:79:5a:31:24:c5:3f:d7:17:a0:24:0c:43:4a:e1:fa:9e:90:
20:d4:29:14:61:27:10:f2:28:81:36:a2:67:d3:c8:9f:b5:7f:
88:89:01:9d:5b:ac:f6:10:0f:77:a6:18:4b:67:0e:ce:55:39:
9b:82:fd:2a:87:61:11:e8:6e:f7:9e:8c:5a:71:65:b1:ae:39:
d8:ec:9b:e0:42:a6:7e:2a:fe:63:c3:4f:75:6c:b8:6c:19:e4:
84:0b:82:0d:f4:71:99:68:71:4e:a5:df:88:60:f7:19:9d:c9:
5d:1b:ba:39:ff:ef:75:2f:17:87:fe:18:ef:d1:9b:0e:31:47:
77:f8:11:24:ee:86:13:ca:e8:35:17:c9:9b:9b:74:41:92:ca:
41:c0:d7:2c:df:40:05:7e:4d:71:69:97:46:9e:0d:84:b3:f2:
ed:2d:6e:fd:c1:ed:6e:d9:c0:f1:f1:d0:53:86:fe:b6:0b:5d:
d7:13:36:16:f5:68:a3:14:7e:a8:1e:90:5a:b6:28:38:3d:99:
54:14:e1:91:ca:77:2c:f4:81:a7:20:fc:3b:73:fb:4f:52:08:
3a:9a:05:1a:9f:32:db:c4:3b:64:46:2b:13:27:36:9b:40:18:
10:f0:af:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:45:36 2024 by rpki-client on console-ams.rpki-client.org