Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/Ionh0DTWiZST1FtQc7ZGyQjv7xI.roa
File: Ionh0DTWiZST1FtQc7ZGyQjv7xI.roa (raw, json)
Hash identifier: TXophHWIFw024dqMcLQhIyFDalBhFMyL3C/vX1U+Y1k=
Subject key identifier: 22:89:E1:D0:34:D6:89:94:93:D4:5B:50:73:B6:46:C9:08:EF:EF:12
Certificate issuer: /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Certificate serial: 018CC2DAB92BBB8113D0A679FF7BA46E62B0
Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/Ionh0DTWiZST1FtQc7ZGyQjv7xI.roa
Signing time: Mon 01 Jan 2024 02:29:23 +0000
ROA not before: Mon 01 Jan 2024 02:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56958
IP address blocks: 93.95.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b9:2b:bb:81:13:d0:a6:79:ff:7b:a4:6e:62:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Validity
Not Before: Jan 1 02:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2289e1d034d6899493d45b5073b646c908efef12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:dd:77:b3:ac:d8:0e:26:80:83:97:03:ec:fd:
11:4a:51:b7:2b:d7:68:6d:b8:dd:bb:29:0e:54:97:
5e:7c:79:75:29:e7:b7:a6:b2:f1:92:e9:ed:8f:27:
3e:13:1d:4a:9c:3c:c4:cc:78:9e:42:08:62:e0:68:
da:a2:e6:34:61:64:24:c0:58:27:bb:a3:82:e4:33:
9f:2c:77:78:d4:b0:9b:37:32:6d:48:0c:b3:e9:2c:
26:06:88:55:e0:5b:d8:7c:35:36:33:43:a9:10:14:
5b:59:ea:84:aa:21:ec:7d:f0:e3:83:45:40:e2:e5:
33:ba:71:6a:77:ee:88:4e:29:77:d9:ea:f5:f2:59:
10:22:ea:d0:8b:22:c8:71:bd:6c:a1:8e:c0:49:19:
c2:39:68:37:aa:e1:1c:4f:de:b7:21:f1:5f:07:20:
88:19:43:38:d1:a5:18:95:c6:ad:9f:f5:7b:d4:95:
3e:eb:f0:ed:d0:29:7a:cc:4f:75:d3:fb:f7:b1:85:
cb:48:aa:2b:0b:1d:1f:1c:a2:e4:7e:1d:07:98:a5:
a5:62:f8:9e:a6:bd:9f:47:de:8f:03:84:ff:fb:c3:
0e:49:99:a6:ea:2c:b8:f2:fd:2a:b3:0b:a6:85:fd:
32:58:7a:a4:e5:ef:6b:1e:24:23:2f:cc:fe:e8:b2:
67:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:89:E1:D0:34:D6:89:94:93:D4:5B:50:73:B6:46:C9:08:EF:EF:12
X509v3 Authority Key Identifier:
keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/Ionh0DTWiZST1FtQc7ZGyQjv7xI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.208.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:34:f6:fb:27:db:5b:3c:c5:ed:e4:ca:c4:4a:34:38:e7:18:
57:d3:88:ab:a2:5c:85:b4:dd:6e:fd:23:82:33:43:59:49:2c:
3b:e1:fe:07:24:6b:31:5d:30:2a:e8:0d:b3:ce:b8:9c:62:6e:
d2:13:0c:5d:9f:9c:0d:4e:44:a0:14:cb:8d:f5:93:75:7d:d9:
44:d4:68:72:72:ac:71:5f:ea:6f:e9:1f:0a:a7:6c:99:18:18:
79:86:c9:aa:fd:9b:e6:fd:72:b7:0c:2e:7b:76:43:4f:01:83:
51:ed:51:2d:9a:4c:35:7d:1a:d0:28:bb:ca:f2:77:c9:9c:36:
bd:b9:91:32:10:51:7e:10:2e:14:e4:3f:91:47:8d:0f:55:26:
59:98:17:00:b4:a4:37:cc:90:a9:f9:b0:35:2b:41:c2:91:27:
2e:39:98:36:d7:0f:e5:3e:1d:aa:52:e8:70:ed:45:e4:f1:21:
70:07:a4:f9:09:91:1d:f0:0f:fa:03:69:7a:79:0d:2e:b3:30:
bd:25:51:54:ff:1b:5d:f9:8d:cc:cf:8a:2c:64:2c:f4:51:20:
7f:87:2c:6d:dc:ff:b6:77:92:d0:d0:51:c8:91:12:d3:93:00:
6a:77:01:3e:2c:e7:4a:51:78:6d:37:c5:d1:32:cd:6e:32:a0:
cb:76:5e:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2rkru4ET0KZ5/3ukbmKwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMTQ0Y2U4ZThlNDQxNWU1Yzg2YTBiMjgwNDk5YTM4NWMx
NGVmZjIwHhcNMjQwMTAxMDIyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjg5ZTFkMDM0ZDY4OTk0OTNkNDViNTA3M2I2NDZjOTA4ZWZlZjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/N13s6zYDiaAg5cD7P0RSlG3K9do
bbjduykOVJdefHl1Kee3prLxkuntjyc+Ex1KnDzEzHieQghi4GjaouY0YWQkwFgn
u6OC5DOfLHd41LCbNzJtSAyz6SwmBohV4FvYfDU2M0OpEBRbWeqEqiHsffDjg0VA
4uUzunFqd+6ITil32er18lkQIurQiyLIcb1soY7ASRnCOWg3quEcT963IfFfByCI
GUM40aUYlcatn/V71JU+6/Dt0Cl6zE910/v3sYXLSKorCx0fHKLkfh0HmKWlYvie
pr2fR96PA4T/+8MOSZmm6iy48v0qswumhf0yWHqk5e9rHiQjL8z+6LJnowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCKJ4dA01omUk9RbUHO2RskI7+8SMB8GA1UdIwQY
MBaAFN8UTOjo5EFeXIagsoBJmjhcFO/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3hSTTZPamtRVjVjaHFDeWdFbWFPRndVN19JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wZjQzMDItNDFhMi00ZGE0LTg3OGUt
NTg2N2JlNzAzNmIzLzEvSW9uaDBEVFdpWlNUMUZ0UWM3Wkd5UWp2N3hJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wZjQzMDItNDFhMi00ZGE0LTg3OGUtNTg2N2JlNzAzNmIz
LzEvM3hSTTZPamtRVjVjaHFDeWdFbWFPRndVN19JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXV/QMA0G
CSqGSIb3DQEBCwUAA4IBAQA/NPb7J9tbPMXt5MrESjQ45xhX04irolyFtN1u/SOC
M0NZSSw74f4HJGsxXTAq6A2zzricYm7SEwxdn5wNTkSgFMuN9ZN1fdlE1Ghycqxx
X+pv6R8Kp2yZGBh5hsmq/Zvm/XK3DC57dkNPAYNR7VEtmkw1fRrQKLvK8nfJnDa9
uZEyEFF+EC4U5D+RR40PVSZZmBcAtKQ3zJCp+bA1K0HCkScuOZg21w/lPh2qUuhw
7UXk8SFwB6T5CZEd8A/6A2l6eQ0uszC9JVFU/xtd+Y3Mz4osZCz0USB/hyxt3P+2
d5LQ0FHIkRLTkwBqdwE+LOdKUXhtN8XRMs1uMqDLdl79
-----END CERTIFICATE-----
Generated at Sun May 19 05:53:01 2024 by rpki-client on console-fra.rpki-client.org