Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/EoGw0VmmY21djDFWiZSjE-iO_Vs.roa
File: EoGw0VmmY21djDFWiZSjE-iO_Vs.roa (raw, json)
Hash identifier: SP014itUNohb4don7K/4cAdJKC6Lg4nNXP2nFLYeoQ8=
Subject key identifier: 12:81:B0:D1:59:A6:63:6D:5D:8C:31:56:89:94:A3:13:E8:8E:FD:5B
Certificate issuer: /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial: 018E0039BF6CAF5FA8274D78611919FE465C
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/EoGw0VmmY21djDFWiZSjE-iO_Vs.roa
Signing time: Sat 02 Mar 2024 17:32:48 +0000
ROA not before: Sat 02 Mar 2024 17:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42675
IP address blocks: 95.141.241.0/24 maxlen: 24
2a13:7c80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:00:39:bf:6c:af:5f:a8:27:4d:78:61:19:19:fe:46:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
Validity
Not Before: Mar 2 17:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1281b0d159a6636d5d8c31568994a313e88efd5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:39:ff:0c:41:9a:b8:64:53:4e:66:4b:50:a1:
0b:82:d2:93:0c:f0:b0:9f:e9:59:dd:60:86:dc:7a:
dd:a3:51:e6:f1:45:21:a1:26:fb:4f:be:37:ee:6e:
a3:79:49:e3:35:7c:72:96:73:8d:bb:8b:2d:76:e2:
60:43:9a:ce:af:ef:d7:77:65:2c:85:44:14:7f:36:
34:0f:bd:b5:7f:94:8e:fc:31:5d:fd:5f:3a:0a:8d:
20:e0:dd:26:9b:e2:b8:5d:f3:f3:bb:b1:2c:61:15:
c5:bc:77:fa:95:14:d9:3a:fa:8c:7d:1b:a9:f2:54:
79:05:cd:65:a0:09:5d:15:36:43:38:15:1e:db:59:
12:5f:69:e0:2a:5c:e8:24:ca:82:87:72:ad:26:09:
e0:41:ad:d3:92:b7:c7:60:52:c2:58:df:78:cc:2a:
85:ed:48:03:ab:8a:c1:e0:70:3d:80:29:6b:b1:81:
15:46:ec:3e:27:2e:38:1a:46:fa:dd:51:95:5b:8c:
e0:1f:b7:c6:97:1e:c2:5b:3b:1e:3c:cb:10:d2:53:
76:b5:de:7d:dc:53:98:e9:f0:1e:95:f1:31:ab:cd:
e6:91:4e:04:12:3f:cb:3a:c2:7f:c7:9d:4b:a4:7f:
d1:b8:9e:68:4f:ec:5d:b0:6b:7d:1e:4d:c7:ca:37:
20:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:81:B0:D1:59:A6:63:6D:5D:8C:31:56:89:94:A3:13:E8:8E:FD:5B
X509v3 Authority Key Identifier:
keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/EoGw0VmmY21djDFWiZSjE-iO_Vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.141.241.0/24
IPv6:
2a13:7c80::/32
Signature Algorithm: sha256WithRSAEncryption
21:dc:08:84:4b:c1:f0:f5:3a:ce:b8:0a:5c:8a:3a:f7:d0:2e:
65:4b:92:ee:30:db:6e:59:d3:f9:29:46:3a:46:17:28:f0:be:
6b:15:66:68:6d:7a:92:8a:e0:fb:24:89:de:f5:b9:d3:bd:18:
1f:59:33:62:3b:08:5e:22:d5:58:6e:1d:8f:7e:a2:8f:c9:c2:
71:83:9d:05:e7:b0:a3:7e:34:be:81:7b:12:29:13:be:d7:26:
38:01:35:f7:54:0b:d5:7e:1e:be:10:8e:94:7c:e0:f7:a2:b2:
28:86:c9:d2:57:41:c4:af:82:1a:bc:b4:3a:68:3d:3b:f2:c0:
ec:db:66:6b:4c:a5:3e:3b:08:d0:04:69:e4:fa:ea:c9:d4:fe:
41:71:13:0c:33:19:aa:28:71:47:7d:a5:14:57:be:5f:4e:5b:
b3:1f:21:8c:b1:93:a3:81:0b:c0:27:05:b8:9b:1b:25:b8:df:
68:a2:d6:f1:c5:8e:53:09:13:e8:0c:20:94:aa:74:85:14:48:
19:5e:90:63:f4:98:89:39:ac:68:8c:85:55:0d:52:ba:ef:cc:
fb:b3:a5:7c:74:af:fe:a2:68:f9:2e:67:7b:4e:50:92:af:e3:
e7:28:ee:cd:b8:ba:b2:86:42:08:9b:7b:33:e1:91:f1:99:0b:
ec:98:91:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:58:13 2024 by rpki-client on console-ams.rpki-client.org