Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/_vcxWZJHmCi5gFbsO3LW4-YH3-M.roa
File: _vcxWZJHmCi5gFbsO3LW4-YH3-M.roa (raw, json)
Hash identifier: lZroghrXbNbJMK/kkX5LoAfxQ5sgYYQNoEYkJ7G5NZo=
Subject key identifier: FE:F7:31:59:92:47:98:28:B9:80:56:EC:3B:72:D6:E3:E6:07:DF:E3
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 0190E8FE6725FC2B211ABE5B94CB8D8F2ED4
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/_vcxWZJHmCi5gFbsO3LW4-YH3-M.roa
Signing time: Thu 25 Jul 2024 08:25:04 +0000
ROA not before: Thu 25 Jul 2024 08:25:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39251
IP address blocks: 109.160.52.0/24 maxlen: 24
109.160.53.0/24 maxlen: 24
109.160.54.0/24 maxlen: 24
109.160.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e8:fe:67:25:fc:2b:21:1a:be:5b:94:cb:8d:8f:2e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jul 25 08:25:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fef7315992479828b98056ec3b72d6e3e607dfe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:80:f8:0f:b9:c0:e1:37:77:8a:15:c2:96:
e7:2d:54:28:9a:71:9e:be:3a:16:b1:30:3e:9e:ef:
34:98:bf:f1:0a:2e:67:22:dc:f9:e0:23:b9:7f:b2:
ab:1e:b7:1b:4b:26:1e:cb:d6:90:5c:76:f0:d2:04:
5c:b4:df:12:3f:54:04:0d:41:71:b5:15:4c:52:e3:
2a:3b:5f:f8:77:0b:c3:27:e8:fd:3e:ee:1f:b3:53:
2b:85:9e:f6:29:0c:21:76:e0:e9:15:0a:10:1b:ea:
27:b5:80:86:41:34:1a:65:c6:25:9e:c9:3b:86:6b:
7e:33:e2:82:b0:fb:9e:78:cd:81:dd:2b:9e:ef:f8:
bd:90:28:59:9b:01:a8:6e:4c:bb:f0:05:fa:14:d9:
76:c1:4a:39:5b:f5:1f:f6:7e:c5:97:6f:64:76:a4:
0d:6b:cb:97:25:d8:3a:b5:91:23:4f:0e:c6:f9:d9:
0c:89:01:53:57:a0:cc:35:f4:bb:0f:d1:83:a5:9a:
03:67:ca:1f:64:a2:c0:e4:2f:06:ea:46:c9:24:f4:
9d:20:74:7c:8c:8b:a7:0a:e4:7e:81:0b:db:f3:80:
8a:b6:64:58:64:86:56:38:86:d2:73:0e:35:ec:03:
4d:b8:0c:be:88:3a:a2:17:76:e3:15:61:1d:fe:b1:
79:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F7:31:59:92:47:98:28:B9:80:56:EC:3B:72:D6:E3:E6:07:DF:E3
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/_vcxWZJHmCi5gFbsO3LW4-YH3-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.52.0/22
Signature Algorithm: sha256WithRSAEncryption
49:e7:6b:4f:55:06:93:af:e2:9b:fb:66:a8:7d:bf:95:4a:2f:
30:1c:e0:f6:c7:2b:a1:30:60:b7:83:85:55:15:1b:8e:b3:e5:
ac:3a:0a:0d:ae:d5:38:71:8c:f0:97:0f:f6:76:fe:f1:c3:fb:
f1:0a:5a:d5:fa:1a:82:cb:e6:95:0c:ab:15:1c:04:01:20:20:
3a:ab:31:d3:ff:d4:f7:d7:ec:8f:0c:05:32:38:ae:43:55:d2:
20:47:da:45:1d:cd:74:18:4f:87:4c:01:5b:54:c3:ed:00:fc:
c8:fa:dc:77:a3:19:47:d3:7c:c9:05:9d:ee:ec:b3:81:9a:24:
39:05:fc:07:2c:f2:56:17:d3:ee:eb:9e:fb:1b:f4:2d:b0:81:
ba:62:a4:03:f7:99:5f:b7:04:52:76:39:6b:ad:8a:de:d5:b3:
2a:d4:b3:6e:66:80:6d:3e:72:a7:d0:a3:2e:7d:cd:f5:c0:14:
cf:4f:d1:ad:c3:63:e3:67:34:0b:09:db:e3:7e:bd:ea:e9:78:
3e:7d:9f:25:ce:29:67:2a:f5:53:14:2d:32:5c:21:82:86:0d:
ad:1f:63:9d:20:ac:0f:f8:c9:8d:a2:e8:70:f1:25:08:0a:8d:
f6:16:a8:e6:bf:8b:19:88:17:dc:f8:80:53:07:be:c7:29:c7:
cd:1b:c2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:14:51 2024 by rpki-client on console-fra.rpki-client.org