Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lPH_kgKdQZTsPtQfUDIvY7MCt8o.roa
File: lPH_kgKdQZTsPtQfUDIvY7MCt8o.roa (raw, json)
Hash identifier: izkJrp5BLKXKLvSIjLBop68jGNQ1JSHXRnapE2FwDao=
Subject key identifier: 94:F1:FF:92:02:9D:41:94:EC:3E:D4:1F:50:32:2F:63:B3:02:B7:CA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018EFAAA9DFA5C801E6D49E38C2108AED806
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lPH_kgKdQZTsPtQfUDIvY7MCt8o.roa
Signing time: Sat 20 Apr 2024 08:41:09 +0000
ROA not before: Sat 20 Apr 2024 08:41:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215479
IP address blocks: 95.214.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 19:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fa:aa:9d:fa:5c:80:1e:6d:49:e3:8c:21:08:ae:d8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 20 08:41:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94f1ff92029d4194ec3ed41f50322f63b302b7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b9:65:40:02:5f:33:d1:58:7a:b6:1e:d2:83:
5b:cd:2a:8a:18:22:11:a5:d2:09:60:d9:3e:61:4c:
85:65:e5:ca:20:8e:7c:ce:c0:7a:0a:a5:7c:0d:ef:
62:93:ba:50:c0:56:af:e0:57:77:ef:c9:07:4c:f8:
c9:58:b6:12:81:c2:71:59:2d:9a:e7:ba:1e:a0:22:
77:54:fc:06:08:95:18:43:4a:13:b3:22:b3:f0:65:
ff:2f:70:04:73:41:b0:cb:c6:bf:68:cc:ae:ba:db:
04:64:e4:37:be:20:25:3f:b5:b9:39:f1:6f:d1:c8:
26:6a:6b:fe:1d:1f:08:c6:b5:49:fa:6e:dc:34:61:
7d:21:3f:97:b1:10:67:37:66:57:84:8c:f2:eb:c1:
fb:8b:4c:e5:0f:76:13:5b:ae:1f:ef:94:ab:f9:31:
2a:2a:1c:d4:08:c4:68:d5:ec:c1:a8:06:db:37:5e:
06:25:c8:e6:98:19:a3:7b:21:1b:72:03:38:9f:09:
65:60:37:a2:6b:bc:28:b0:68:67:e0:63:72:7e:96:
f0:70:33:1c:90:41:36:ce:e5:81:61:1f:9e:ce:10:
02:47:f8:e0:4d:48:94:7e:a9:b6:a5:ec:1b:8d:e9:
d2:6b:17:7e:0c:f6:25:2d:cd:a4:f0:1e:33:c1:31:
43:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F1:FF:92:02:9D:41:94:EC:3E:D4:1F:50:32:2F:63:B3:02:B7:CA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lPH_kgKdQZTsPtQfUDIvY7MCt8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.27.0/24
Signature Algorithm: sha256WithRSAEncryption
89:ca:82:ac:42:d3:2e:89:56:3c:58:24:1b:16:b4:f0:73:99:
8b:2b:7f:e8:d7:3c:fe:ee:56:e6:f7:1d:ca:99:47:6b:da:2f:
a8:bf:01:a2:47:a8:44:90:aa:87:41:2e:5e:80:1f:80:dc:87:
e4:ea:04:8a:bb:84:cc:18:09:07:9c:28:6b:0b:c8:ad:a0:96:
b6:af:bc:7e:65:40:a1:87:48:f8:c5:70:a7:ba:88:b0:1f:06:
e2:8c:a7:13:d6:80:24:5c:b5:cd:57:7f:f9:68:d8:28:59:64:
1b:5a:ba:8a:71:66:c7:c6:00:61:86:8f:54:92:57:4f:2c:35:
3a:99:e8:15:be:86:7d:dd:0b:35:d7:6b:3f:5f:fe:af:1f:43:
99:fb:94:24:e3:3e:88:a0:d8:11:da:59:29:73:fa:46:92:db:
72:b9:27:70:b8:87:01:3d:61:15:c7:5f:83:cb:8a:53:77:b3:
5d:1e:31:67:d6:b0:59:45:bb:48:e0:88:78:a5:46:13:ef:ab:
48:47:c0:0a:79:b5:c0:e4:f0:71:fd:e4:6f:cb:20:05:ff:53:
86:10:14:e2:a2:8b:91:f2:90:aa:8f:82:6b:82:59:15:4e:16:
53:d9:0e:c4:49:89:75:bd:f6:8a:2a:61:96:02:72:3a:4f:c0:
91:99:53:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:53:00 2024 by rpki-client on console-fra.rpki-client.org