Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/_xywnAxRzJYY7Cjr3ALQkOgTTg4.roa
File: _xywnAxRzJYY7Cjr3ALQkOgTTg4.roa (raw, json)
Hash identifier: ZggYFy57ZGK4VqEWNGh9subbabARy5JFyyqaus7pcoo=
Subject key identifier: FF:1C:B0:9C:0C:51:CC:96:18:EC:28:EB:DC:02:D0:90:E8:13:4E:0E
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018CC5DC971A83DD0C094FC07386392E3227
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/_xywnAxRzJYY7Cjr3ALQkOgTTg4.roa
Signing time: Mon 01 Jan 2024 16:30:17 +0000
ROA not before: Mon 01 Jan 2024 16:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19318
IP address blocks: 109.205.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:97:1a:83:dd:0c:09:4f:c0:73:86:39:2e:32:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 16:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff1cb09c0c51cc9618ec28ebdc02d090e8134e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c9:96:c7:22:58:3e:b7:d2:c6:08:30:67:cb:
6c:55:c9:f9:ff:94:a0:81:92:87:0d:4e:5f:5a:be:
6d:8a:d2:84:a3:5b:a9:36:fb:36:47:15:0b:a3:67:
e5:37:0b:86:06:9d:71:bb:1f:26:bd:17:58:a5:f6:
48:3f:e8:72:9d:1f:9b:31:76:35:e1:bd:16:52:54:
db:fa:67:9b:ad:b2:07:40:ce:10:6e:c1:21:0b:c9:
88:05:60:4b:88:3f:c0:1c:44:56:06:9d:43:52:13:
24:17:78:cd:17:9e:08:02:86:01:bf:f1:06:bf:2c:
61:31:5b:27:c0:46:cb:ef:f1:f9:82:f1:82:19:3a:
85:40:57:43:69:93:dc:dd:79:ea:67:b0:81:b1:c8:
fd:99:c7:23:c8:a5:16:03:07:cb:07:a4:bd:d8:d8:
ab:22:9d:47:10:1c:d8:18:88:cb:97:fb:77:0b:ac:
b4:e3:c5:b9:12:89:94:74:b1:08:79:ee:11:4e:6f:
7f:3e:b0:06:f5:09:46:2d:66:74:1d:ee:12:8e:15:
a2:b0:3d:2e:0f:2c:de:1c:03:aa:d4:fb:88:9d:62:
21:d9:82:68:be:38:1e:60:91:2c:a7:8f:ce:f6:ae:
f8:f8:78:d1:5c:dc:75:15:c1:99:28:12:d5:c1:38:
54:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1C:B0:9C:0C:51:CC:96:18:EC:28:EB:DC:02:D0:90:E8:13:4E:0E
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/_xywnAxRzJYY7Cjr3ALQkOgTTg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.213.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:f8:04:d1:1a:26:c3:4d:53:75:e2:9a:f6:4c:66:07:31:de:
e4:f6:cd:be:4b:5d:c2:b6:c2:d8:d9:58:b5:87:48:85:02:05:
ce:e4:ba:56:6f:b1:f9:61:7b:4f:c1:f9:ee:90:ef:8e:b5:84:
75:bf:0d:f1:83:98:f7:a3:ce:bb:a9:10:be:3a:5b:df:1d:01:
2f:d1:3f:82:69:aa:14:0d:ee:85:88:f2:3b:6f:06:25:77:4d:
bd:21:0f:e5:da:ad:5b:c9:50:8d:01:36:a6:f8:75:b0:5e:69:
b6:16:74:02:34:ac:2a:d3:9f:0e:56:04:b8:17:d4:5d:a6:94:
be:3a:e0:d6:68:0a:15:99:32:c4:95:c6:f3:5b:95:4c:24:2c:
40:46:04:b3:ca:10:c1:13:63:14:23:32:9b:32:bb:93:64:f7:
0e:d0:e2:c9:6d:81:d7:c4:83:20:e8:da:95:ae:66:88:67:c2:
dd:da:de:55:0f:8d:b3:78:20:1a:40:fd:86:77:37:78:55:f4:
07:52:3b:08:04:df:72:7f:1f:0c:b6:8c:53:4b:17:92:8c:da:
87:8d:d6:fd:9d:e4:bd:2d:35:bc:fb:aa:3a:63:c3:27:ae:ca:
f0:a9:6c:49:6e:34:17:57:b0:1f:2c:e6:55:7d:6e:6c:0e:a6:
39:f3:dc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 17:03:16 2024 by rpki-client on console-fra.rpki-client.org