Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/RRM9BrRh29k6M10KbaxYp4t7Ajs.roa
File: RRM9BrRh29k6M10KbaxYp4t7Ajs.roa (raw, json)
Hash identifier: TYYbjXKSUWgdgx4u9fTUxD2nUK+azLnHskXgqgiLQII=
Subject key identifier: 45:13:3D:06:B4:61:DB:D9:3A:33:5D:0A:6D:AC:58:A7:8B:7B:02:3B
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018CC80206F2BD94BDA0A754100A0385FE05
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/RRM9BrRh29k6M10KbaxYp4t7Ajs.roa
Signing time: Tue 02 Jan 2024 02:30:25 +0000
ROA not before: Tue 02 Jan 2024 02:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42575
IP address blocks: 109.68.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 03:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:06:f2:bd:94:bd:a0:a7:54:10:0a:03:85:fe:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 02:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45133d06b461dbd93a335d0a6dac58a78b7b023b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:25:0e:88:47:19:20:0f:66:88:1a:fa:1a:40:
90:22:4d:0f:94:63:d6:c9:ab:ea:bc:c3:3b:d7:ae:
5a:a2:3c:88:fc:85:e7:c2:c1:5e:a5:1a:23:10:9e:
4d:47:8a:80:83:2e:6a:44:e6:76:31:bb:dc:e6:98:
70:40:37:dc:be:90:9c:39:7c:06:72:02:9e:c6:08:
3b:d0:a4:7a:e0:a5:a3:af:fe:d3:92:c5:fa:25:7f:
18:0f:5b:41:62:2a:ee:db:02:d2:fc:75:e2:8e:13:
a7:10:b7:56:95:2d:87:22:dd:78:ea:18:4e:30:ec:
0b:86:52:b7:ce:65:4d:42:53:ce:53:23:8e:21:8d:
7a:88:06:a4:4c:8e:b6:bb:0a:e6:67:e5:bd:5a:a8:
a6:a0:6b:d2:b1:4d:ec:41:14:fb:7d:f1:7d:27:e9:
8a:d5:47:1a:92:c9:30:9f:f2:71:f3:7e:9f:7e:0c:
36:00:de:e0:73:2c:10:d9:fe:7a:10:10:ac:d6:32:
0c:fd:63:09:48:f3:93:57:cb:e1:34:93:0d:2f:e5:
88:0a:1e:94:3e:14:f8:db:de:13:6b:d1:8b:df:95:
ee:1f:41:d3:fc:c5:86:1f:d5:a4:dd:03:7b:f2:0f:
e4:f8:03:8d:f0:e4:0a:a1:df:ab:6f:72:68:f9:4e:
fa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:13:3D:06:B4:61:DB:D9:3A:33:5D:0A:6D:AC:58:A7:8B:7B:02:3B
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/RRM9BrRh29k6M10KbaxYp4t7Ajs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.68.169.0/24
Signature Algorithm: sha256WithRSAEncryption
02:6f:b5:af:96:b4:e1:86:14:6c:d5:ea:51:f0:b6:16:9b:a9:
f7:f4:0f:9f:b2:06:3e:4f:fa:47:38:10:eb:01:3a:ad:ce:42:
08:c8:ae:54:b5:66:ad:31:cd:e3:cc:65:10:62:97:c2:e0:0c:
6f:0b:64:63:c1:d4:66:f9:84:09:e8:b8:e1:ec:3e:ed:7b:0f:
f2:52:a3:f0:26:b1:5a:79:68:3c:01:9a:4d:47:dc:48:e6:16:
ad:ef:a1:cd:b9:8b:8b:95:63:cd:2d:85:f3:88:ec:47:bf:93:
5e:4d:c1:e6:5e:9d:02:1a:d9:99:8c:32:bc:57:d4:09:dc:a1:
f6:60:df:29:fe:6f:aa:40:37:97:74:59:fe:ae:e1:ac:b8:7f:
08:7d:75:27:b1:d1:83:3b:74:d6:16:ea:00:7e:8e:fa:a0:13:
1b:45:4a:8f:5d:07:e3:6d:7b:38:34:dc:68:32:e4:29:27:e9:
26:8e:37:fa:a6:c2:1f:34:eb:ca:9f:07:1b:d8:a6:fb:46:77:
1f:81:6f:96:f5:a8:2b:8f:0b:aa:88:02:e7:a8:21:c9:e8:39:
45:13:8d:ba:3d:30:8f:bb:ce:3c:8f:c3:ec:58:2f:6e:99:37:
c6:36:61:9b:e8:0f:79:58:a0:69:e1:69:83:17:bc:e6:50:2c:
5a:30:87:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:03:05 2024 by rpki-client on console-ams.rpki-client.org