Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ks89367K5J8VpzgYFA0mTD9FAh0.roa
File: ks89367K5J8VpzgYFA0mTD9FAh0.roa (raw, json)
Hash identifier: Bq30v8kBLmpljfeOmoqo1iOJffmdzHBrbUcX8Kypo/U=
Subject key identifier: 92:CF:3D:DF:AE:CA:E4:9F:15:A7:38:18:14:0D:26:4C:3F:45:02:1D
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018E84B83B1CD922225C0455FE4367B0BED5
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ks89367K5J8VpzgYFA0mTD9FAh0.roa
Signing time: Thu 28 Mar 2024 11:00:50 +0000
ROA not before: Thu 28 Mar 2024 11:00:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196747
IP address blocks: 109.207.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:84:b8:3b:1c:d9:22:22:5c:04:55:fe:43:67:b0:be:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Mar 28 11:00:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92cf3ddfaecae49f15a73818140d264c3f45021d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ed:30:f9:8a:ca:75:1a:92:df:68:bb:c1:de:
cf:a2:9d:1f:78:a6:22:d2:ab:ec:ae:b2:09:27:d0:
3f:f2:ef:31:f8:14:69:0c:17:52:8b:3e:aa:1f:80:
dd:5e:5e:be:74:7e:b8:44:97:30:4e:1c:9d:eb:53:
2b:fb:60:ff:b7:be:cf:8d:6f:a0:3c:b4:4e:af:c8:
09:91:ba:c1:24:fd:9f:86:21:6a:f1:ff:d1:94:bd:
cf:a4:f3:8b:2c:12:ba:ed:68:36:85:59:6a:88:78:
54:d0:84:ca:f6:58:30:8a:2c:34:16:53:7a:3e:07:
d1:06:c3:23:01:c7:b7:c7:b4:7a:84:1b:be:1c:2f:
11:95:6e:b7:f8:29:c0:aa:1e:dd:52:17:a9:84:45:
11:7d:3d:da:f8:c8:72:20:95:ec:f0:cc:6b:41:26:
1b:84:18:2b:aa:7f:fe:6a:5b:e7:5f:df:4d:fd:1e:
61:dc:ad:0c:07:dd:f2:ba:79:5d:09:19:c1:b8:88:
bc:bc:d2:ab:01:75:8d:7b:70:39:f4:1c:47:e2:f7:
54:b9:11:fa:ad:53:05:e7:7e:87:2f:61:9d:74:3d:
ed:8c:eb:7d:ef:42:34:87:35:f0:cf:ee:15:f7:3a:
23:07:a7:aa:a0:a5:df:18:c5:2c:29:ed:d4:9f:dd:
92:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CF:3D:DF:AE:CA:E4:9F:15:A7:38:18:14:0D:26:4C:3F:45:02:1D
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ks89367K5J8VpzgYFA0mTD9FAh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.207.0.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:eb:7c:7d:9f:52:25:1c:3f:de:7d:a6:df:f0:51:a1:91:e0:
26:32:3b:f5:f6:07:85:44:78:3c:d8:2a:f7:96:46:b5:5b:63:
f9:1d:31:0d:a3:b3:91:57:9e:cb:e7:b4:9c:ce:ef:04:29:75:
f1:b0:7c:f4:96:5c:6f:23:e6:08:aa:8c:1d:2a:e7:09:53:7b:
cc:ce:16:62:0d:f4:93:8b:56:9c:bf:58:e6:58:cd:04:92:8c:
c1:85:11:39:4a:fa:e7:01:48:43:38:dc:bd:87:aa:22:2e:d5:
75:83:17:da:f7:55:e1:3f:88:dd:fe:5d:a0:18:60:09:c7:63:
98:7b:ac:dd:ff:bf:1a:0a:20:ee:59:1a:dc:b5:47:c4:5e:82:
92:79:db:f0:97:9b:c8:b2:70:3a:7c:f6:5f:2b:82:92:27:91:
35:73:b2:b4:c6:6a:a4:45:e4:cb:cc:21:9f:62:45:8b:ee:7b:
fe:de:c6:82:3d:fa:f6:0f:89:61:c6:d5:44:7d:bb:ed:fb:c0:
b6:2c:81:c4:0f:a5:2c:47:00:dc:ba:5a:e0:88:fd:98:3b:95:
66:12:7f:d9:66:6a:e3:14:42:d4:37:ba:8a:5e:69:56:2a:4c:
4d:e7:c8:b5:88:be:c3:6e:a1:c8:7c:71:62:a1:53:a9:2c:3e:
14:12:cc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:08:53 2024 by rpki-client on console-ams.rpki-client.org