Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/_jwHJHvkqKKz3s_m9q7g_0ycTYg.roa
File: _jwHJHvkqKKz3s_m9q7g_0ycTYg.roa (raw, json)
Hash identifier: HlNdG8Eu530zZGXzYnvX7gCwd+hcFk+ZNzA1uJ0JV60=
Subject key identifier: FE:3C:07:24:7B:E4:A8:A2:B3:DE:CF:E6:F6:AE:E0:FF:4C:9C:4D:88
Certificate issuer: /CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac
Certificate serial: 018CC4246831E02A7BDE5D3F54171B0500FB
Authority key identifier: 15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/_jwHJHvkqKKz3s_m9q7g_0ycTYg.roa
Signing time: Mon 01 Jan 2024 08:29:29 +0000
ROA not before: Mon 01 Jan 2024 08:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34975
IP address blocks: 95.129.57.0/24 maxlen: 24
95.129.56.0/21 maxlen: 21
95.129.56.0/24 maxlen: 24
95.129.58.0/24 maxlen: 24
185.18.20.0/22 maxlen: 22
95.129.60.0/22 maxlen: 22
95.129.59.0/24 maxlen: 24
95.143.17.0/24 maxlen: 24
95.143.16.0/24 maxlen: 24
95.143.16.0/20 maxlen: 20
95.143.20.0/24 maxlen: 24
95.143.19.0/24 maxlen: 24
95.143.24.0/21 maxlen: 21
95.143.18.0/24 maxlen: 24
95.143.23.0/24 maxlen: 24
95.143.22.0/24 maxlen: 24
95.143.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:68:31:e0:2a:7b:de:5d:3f:54:17:1b:05:00:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac
Validity
Not Before: Jan 1 08:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe3c07247be4a8a2b3decfe6f6aee0ff4c9c4d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:c6:05:75:1f:27:bb:ae:e2:0d:2e:42:71:
2f:eb:0a:b1:8d:15:f8:e3:98:84:27:7e:0a:d5:39:
94:f1:e3:f3:2f:bb:d5:c5:ed:1e:b2:6b:91:5e:9b:
77:23:77:e9:de:f7:a5:e0:38:b9:d0:3d:0f:2b:42:
39:7e:e0:0a:4f:75:b9:cd:c9:a0:b4:de:5d:2c:ea:
37:16:2a:3e:ce:18:d4:c0:10:e0:1c:66:04:19:bc:
dc:08:63:09:64:39:7b:20:9d:99:1e:1c:1e:26:e7:
6d:63:da:4a:ab:37:57:74:f2:32:4b:ca:d1:47:2c:
e3:30:e4:39:8a:03:21:df:86:7b:44:da:dc:59:71:
75:fb:94:3b:ab:3a:22:68:9a:2f:e3:33:9c:07:41:
8e:fd:76:70:90:9c:52:36:12:57:b1:f6:b5:5e:ae:
46:26:5d:1d:4b:71:dc:58:3d:de:e2:44:5a:bb:6e:
cc:e6:74:d0:80:1d:7e:27:43:ce:6e:63:e6:a0:9a:
10:96:e8:2c:1c:1a:56:86:9e:27:5a:bc:15:94:5d:
88:64:bd:41:3c:91:d6:51:60:f7:dd:9f:56:ea:ad:
6a:21:4d:a4:a3:09:70:b2:ec:0a:f0:e0:08:9e:2b:
e4:6d:d6:d1:af:27:30:ad:60:f1:03:14:5b:a3:44:
04:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3C:07:24:7B:E4:A8:A2:B3:DE:CF:E6:F6:AE:E0:FF:4C:9C:4D:88
X509v3 Authority Key Identifier:
keyid:15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/_jwHJHvkqKKz3s_m9q7g_0ycTYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.129.56.0/21
95.143.16.0/20
185.18.20.0/22
Signature Algorithm: sha256WithRSAEncryption
73:74:e6:2c:7c:11:bd:36:2e:74:fe:4d:b8:fa:f9:02:6c:a9:
27:bb:d3:27:a3:93:6e:8a:af:14:51:6d:da:7d:e5:ee:33:8a:
f3:b7:d0:60:26:b4:29:9d:b3:14:dc:40:2e:67:be:36:25:60:
cc:5b:19:de:6e:26:25:5d:d6:b1:31:f4:de:07:0b:ac:c6:03:
65:f9:55:09:85:63:37:24:95:f3:79:57:46:0f:90:af:2c:2b:
60:d0:98:30:14:49:33:ff:eb:1e:54:3c:73:2d:81:82:fd:90:
cb:5b:54:b8:20:91:7f:7e:76:e7:e9:fb:a6:b0:58:b1:a5:14:
fe:98:9f:13:42:33:09:49:97:bf:38:71:77:b0:14:86:a8:94:
a9:c1:d4:ad:6c:bb:cc:7d:16:94:b5:b4:f4:69:09:f4:e1:22:
52:25:b6:ee:1a:38:e2:19:5d:6a:88:b0:43:a7:10:84:51:69:
10:82:48:e6:3f:d4:98:cf:f4:28:48:bb:24:ec:76:6c:a5:87:
44:03:09:b6:48:39:da:ef:37:bd:03:e5:90:df:48:14:91:dc:
57:bc:43:4b:13:5d:96:1f:36:52:04:ce:0e:3b:a7:9d:0d:a2:
05:ea:e2:69:db:e0:3c:39:92:1d:af:c1:5c:8c:b6:20:52:e4:
e1:45:5e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:02:34 2024 by rpki-client on console-fra.rpki-client.org