Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/1-KZFvutnbzjx8rBN7ofFM15a-M.roa
File: 1-KZFvutnbzjx8rBN7ofFM15a-M.roa (raw, json)
Hash identifier: n4XuT+bij3B830rKeyUYfw9G33AouYEH8/cA1VGNYV4=
Subject key identifier: D7:E2:99:16:FB:AD:9D:BC:E3:C7:CA:C1:37:BA:1F:14:CD:79:6B:E3
Certificate issuer: /CN=7b48945b9d716cd47fbde2860d8100fcda987496
Certificate serial: 018CF7BEB8EFC798A7A6FE1BBFDFFD1A1CFD
Authority key identifier: 7B:48:94:5B:9D:71:6C:D4:7F:BD:E2:86:0D:81:00:FC:DA:98:74:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/1-KZFvutnbzjx8rBN7ofFM15a-M.roa
Signing time: Thu 11 Jan 2024 08:58:40 +0000
ROA not before: Thu 11 Jan 2024 08:58:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13246
IP address blocks: 185.181.192.0/22 maxlen: 22
185.181.195.0/24 maxlen: 24
95.130.16.0/21 maxlen: 24
95.130.16.0/24 maxlen: 24
95.130.17.0/24 maxlen: 24
95.130.22.0/24 maxlen: 24
95.130.20.0/24 maxlen: 24
2a02:2940::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f7:be:b8:ef:c7:98:a7:a6:fe:1b:bf:df:fd:1a:1c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b48945b9d716cd47fbde2860d8100fcda987496
Validity
Not Before: Jan 11 08:58:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7e29916fbad9dbce3c7cac137ba1f14cd796be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:97:16:78:ba:37:e4:90:7b:0c:53:53:85:4e:
c6:73:16:96:ea:db:9a:77:2e:3f:3f:ee:e0:3d:3d:
50:6f:65:62:67:83:a4:bf:34:0e:5f:06:60:42:e8:
43:5b:43:63:a5:cf:5f:c2:84:0f:5c:f7:76:a4:22:
6f:85:80:b6:e9:ef:06:0e:27:ec:15:4d:2b:31:ea:
b1:66:eb:14:c9:91:75:49:0d:07:be:1c:36:2d:41:
ba:a1:6c:a6:39:43:71:8a:c2:4b:31:aa:0a:39:37:
3e:11:0d:81:6e:e9:eb:f4:38:8a:ab:f8:fd:15:50:
fe:1c:be:66:6e:d9:d8:be:62:5e:ab:1a:40:d3:58:
e6:28:39:9f:6d:db:4f:0f:86:ad:65:7b:87:95:33:
7e:19:0e:72:a3:c6:bf:e0:30:89:ee:ab:ea:13:08:
3e:00:7d:d8:b9:8d:54:a1:5a:e2:5d:5b:59:3e:7f:
18:f2:c0:15:52:0e:46:e7:b2:dc:35:d9:0f:22:49:
4e:c6:bb:44:86:45:8a:9e:a4:c6:72:da:40:6e:1d:
20:64:6b:51:9c:1b:7f:ed:9f:44:57:1b:49:1f:ef:
b0:a4:51:36:7d:1b:9d:84:84:2e:83:f3:f2:61:4d:
59:a3:c6:90:f1:66:df:1b:76:18:52:d0:65:9c:4a:
1e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E2:99:16:FB:AD:9D:BC:E3:C7:CA:C1:37:BA:1F:14:CD:79:6B:E3
X509v3 Authority Key Identifier:
keyid:7B:48:94:5B:9D:71:6C:D4:7F:BD:E2:86:0D:81:00:FC:DA:98:74:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/1-KZFvutnbzjx8rBN7ofFM15a-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.16.0/21
185.181.192.0/22
IPv6:
2a02:2940::/32
Signature Algorithm: sha256WithRSAEncryption
15:63:d7:3e:38:1a:31:36:5d:e5:2a:8f:b2:ce:73:00:9c:74:
ff:1a:a3:7f:9f:be:4c:c2:25:91:14:e1:2b:f1:a8:e3:27:44:
7a:64:7c:d4:ef:87:46:9c:15:bf:56:15:62:2c:3b:c1:a6:f2:
76:cf:fd:34:29:eb:63:34:49:66:2f:ef:78:fb:7e:b9:79:8c:
a6:4f:28:17:af:23:95:e8:74:36:0b:74:b1:57:77:a8:a4:03:
c7:ab:1b:97:4a:f1:ed:99:e8:30:1a:37:ad:f2:aa:91:16:27:
c7:ad:0f:24:8b:51:42:53:aa:6b:dc:32:3e:9b:cc:1d:6a:bb:
ba:63:2f:c3:6d:c6:29:f4:b0:3c:6d:66:b9:ea:fa:74:2c:98:
d6:61:eb:4b:bb:a3:76:17:f0:af:ff:1f:dc:ea:0f:64:15:82:
19:aa:f7:91:e3:b9:29:86:e8:1f:f5:fd:12:9b:2b:97:89:14:
04:ed:f7:64:c4:6e:98:9d:9d:2b:be:c5:cb:48:8e:2b:a8:1b:
cc:3e:d6:f9:89:1b:e0:70:ce:5e:4a:05:47:cd:5b:b1:23:50:
9c:55:1c:33:44:41:04:f5:4a:a2:5d:8d:50:c6:a1:d0:28:61:
0f:f0:55:cc:55:0a:29:04:65:f3:c1:59:e6:41:f9:00:6e:3a:
25:f6:2e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 22:17:32 2024 by rpki-client on console-fra.rpki-client.org