Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/XZlZ_8GBedUKnRXCB745V57iRrU.roa
File: XZlZ_8GBedUKnRXCB745V57iRrU.roa (raw, json)
Hash identifier: knTSN57tIEFuuC7/UZ1UfHk3hGF0A7sk13FH8GIHzV0=
Subject key identifier: 5D:99:59:FF:C1:81:79:D5:0A:9D:15:C2:07:BE:39:57:9E:E2:46:B5
Certificate issuer: /CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f
Certificate serial: 018D4AD17D5211DF36E1741AEEE4B6423D16
Authority key identifier: 44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/XZlZ_8GBedUKnRXCB745V57iRrU.roa
Signing time: Sat 27 Jan 2024 12:07:39 +0000
ROA not before: Sat 27 Jan 2024 12:07:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204105
IP address blocks: 95.215.59.0/24 maxlen: 24
2a13:c640::/30 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4a:d1:7d:52:11:df:36:e1:74:1a:ee:e4:b6:42:3d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f
Validity
Not Before: Jan 27 12:07:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d9959ffc18179d50a9d15c207be39579ee246b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d4:16:fe:9c:12:36:26:63:71:79:6e:93:64:
ca:01:5e:9a:54:98:7b:08:7a:3d:be:d4:d3:9e:41:
1c:04:f3:a8:ce:16:e2:cd:1e:a2:71:90:7b:b4:e2:
3f:d1:92:94:99:04:02:ef:d2:38:31:4d:a6:fd:9f:
27:d5:be:1f:db:b4:c8:5f:50:c1:eb:c5:42:42:48:
cb:7f:c3:88:03:5a:5b:27:da:0c:77:4a:86:37:5d:
93:55:13:db:c1:6f:84:ca:38:7e:d8:56:90:10:1e:
1e:12:66:32:3c:01:28:c6:88:e8:1a:2f:7f:80:3c:
74:b4:dc:10:00:a1:4e:2f:1d:49:13:9b:88:41:7e:
98:9e:e1:16:31:3d:48:8b:a6:da:50:9d:b8:1e:4e:
d9:0d:f7:6b:18:b7:e3:d3:8f:bd:f9:e1:fc:a8:f5:
9c:70:df:41:fd:eb:a8:b4:97:9e:d3:87:7e:cf:41:
48:69:dd:ad:db:9a:63:b5:5f:07:28:1e:28:31:76:
1f:95:2c:59:0d:c8:cc:da:48:40:dd:a4:50:21:e1:
3d:30:a2:0a:0d:0a:24:0c:8e:7d:03:66:84:f0:d8:
99:72:2e:7a:fb:60:43:49:2b:98:74:18:34:75:01:
c7:fb:de:46:b9:ce:e2:2e:14:e0:7b:d2:36:41:03:
70:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:99:59:FF:C1:81:79:D5:0A:9D:15:C2:07:BE:39:57:9E:E2:46:B5
X509v3 Authority Key Identifier:
keyid:44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/XZlZ_8GBedUKnRXCB745V57iRrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.59.0/24
IPv6:
2a13:c640::/30
Signature Algorithm: sha256WithRSAEncryption
6a:53:87:e3:9f:8d:04:13:10:87:c5:2f:a6:0a:53:ca:85:5b:
58:ec:29:e3:3b:29:28:ae:50:87:8d:a0:fc:e0:75:7b:ec:e9:
44:2d:93:54:ba:82:ec:b1:11:dd:c1:74:7c:8c:c9:8a:00:ee:
e2:b0:c0:be:be:2e:10:14:9d:30:ee:35:db:64:1b:3d:50:f3:
36:5c:78:4d:97:6e:24:c4:72:3f:1b:8d:1d:bf:a9:54:5f:10:
bd:ec:e5:5f:43:d7:bd:54:da:d4:6a:a3:6f:58:66:e5:b3:10:
08:fa:c3:89:bb:e2:54:09:6f:59:f5:6a:0d:1f:8d:f5:04:78:
68:c2:6d:51:f0:96:55:0f:0c:6d:6a:42:3f:5f:6f:a3:1c:45:
45:3c:75:b3:1a:4f:4e:b0:d8:0d:e3:16:cf:fe:e7:80:16:3f:
41:b3:1f:13:90:f0:d0:d9:e9:9d:f4:47:0c:2d:a8:d2:4c:9a:
8d:89:e1:d5:ad:2f:b5:fd:f3:a2:81:06:71:cf:56:be:77:da:
a9:8a:ea:ad:f6:e2:19:73:c8:1d:d9:7e:5b:bc:02:e1:21:02:
96:52:79:93:0e:25:63:e1:1b:8e:97:e4:63:3b:99:73:0d:d0:
16:36:3b:e9:62:91:8b:4a:c9:a3:37:6d:9b:0f:cd:5c:b5:8d:
0d:bb:ee:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:56:32 2024 by rpki-client on console-fra.rpki-client.org