Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/tUJ7Nt4jyOnG-YeQ5sPyAvcQkkQ.roa
File: tUJ7Nt4jyOnG-YeQ5sPyAvcQkkQ.roa (raw, json)
Hash identifier: KQc31qB2c8zsTQcNP1zaByEJviR0VKpOZjqnYdwi6FI=
Subject key identifier: B5:42:7B:36:DE:23:C8:E9:C6:F9:87:90:E6:C3:F2:02:F7:10:92:44
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018CC5DC9DF98F1B0FAAF9973F7A9FEAE964
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/tUJ7Nt4jyOnG-YeQ5sPyAvcQkkQ.roa
Signing time: Mon 01 Jan 2024 16:30:19 +0000
ROA not before: Mon 01 Jan 2024 16:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208046
IP address blocks: 109.205.211.0/24 maxlen: 24
109.205.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:9d:f9:8f:1b:0f:aa:f9:97:3f:7a:9f:ea:e9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 16:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5427b36de23c8e9c6f98790e6c3f202f7109244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c0:74:82:83:c1:5d:d7:49:16:cd:87:a9:b0:
b8:c9:6a:53:a7:dc:dd:97:50:82:54:97:1d:27:8e:
4f:83:0a:c2:93:5e:11:cb:cb:3f:4e:39:8d:ab:f2:
23:a9:b5:94:24:89:28:1e:bd:5f:62:e9:10:c4:d8:
05:9b:5f:f1:5f:b8:13:8e:49:02:4c:c5:e6:d4:33:
61:7e:cb:7b:12:c7:3d:69:d4:0f:3e:15:b4:91:3b:
18:55:20:a5:b5:9c:4e:c4:94:d3:57:d9:37:9c:ea:
d5:17:3e:cd:57:5b:d7:4b:f7:a3:e7:e5:66:ee:1b:
ba:c7:d9:64:58:f9:ce:c6:74:e8:ed:12:4e:38:08:
09:f6:5d:cc:78:5e:b7:12:33:06:d4:23:60:0c:4d:
e2:86:2d:2b:fd:2c:cc:6d:c9:b0:15:f0:89:4c:ca:
10:32:da:16:c5:f5:2d:c1:90:1d:6e:3c:b0:c4:af:
e9:5f:39:85:51:b5:21:55:49:b4:78:e3:38:7a:db:
f5:e6:43:ae:22:c2:f7:67:12:6f:f2:83:d5:20:d9:
11:6f:83:ae:e2:c7:a9:05:f7:2e:cf:c0:e1:db:74:
74:98:c1:22:c5:a0:d6:3d:4f:85:70:e7:62:0c:0b:
14:3a:51:cf:c5:17:b8:95:5f:61:c1:de:71:19:3c:
64:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:42:7B:36:DE:23:C8:E9:C6:F9:87:90:E6:C3:F2:02:F7:10:92:44
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/tUJ7Nt4jyOnG-YeQ5sPyAvcQkkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.211.0/24
109.205.214.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:9e:71:12:a4:ca:d8:a2:98:27:45:c9:5b:90:fe:55:2d:99:
27:6e:40:e4:15:e2:f7:4c:d2:65:00:c3:24:02:c6:00:c8:6c:
c1:ea:cc:c5:5e:87:f2:66:ae:f8:52:38:e5:7a:45:53:2b:fb:
63:ed:78:7b:43:fc:22:8d:04:15:60:d6:f3:b9:d2:ee:15:1c:
3d:3b:c0:dd:67:6c:ce:9c:e7:f5:1b:9d:ac:c3:a6:da:0f:9a:
a1:96:7b:66:3f:3f:01:7a:d5:a6:1d:71:ee:dc:58:4f:30:44:
eb:56:8d:54:df:7f:1b:97:79:56:61:a2:04:45:6b:fb:48:88:
2b:e3:22:37:25:30:83:51:0d:b7:1f:9c:8c:c2:3d:dd:f6:b7:
79:3a:4b:4f:9e:34:26:62:68:6a:24:b1:92:bf:cb:1a:89:65:
7d:88:6c:48:75:d6:fb:7c:0d:dd:67:e5:e2:85:e8:0d:1d:75:
08:ee:e3:c5:71:85:45:4d:b2:34:ee:55:eb:4c:6c:e2:74:94:
9b:d1:db:ae:98:45:2c:75:31:04:6b:89:2d:47:8f:77:75:75:
c4:95:c2:5e:6e:47:b6:3c:46:03:c6:d4:4f:6c:ed:5e:16:52:
0a:19:d8:21:79:60:42:15:33:03:72:c2:58:87:07:16:1b:2f:
a2:68:af:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 08:38:42 2024 by rpki-client on console-fra.rpki-client.org