Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/fD8gr1Ue9NyWseXpL826cmznNx4.roa
File: fD8gr1Ue9NyWseXpL826cmznNx4.roa (raw, json)
Hash identifier: nXLLN2qP405v0C0Srd0ROV7c8enVSwnL/7VPMERcMFA=
Subject key identifier: 7C:3F:20:AF:55:1E:F4:DC:96:B1:E5:E9:2F:CD:BA:72:6C:E7:37:1E
Certificate issuer: /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Certificate serial: 01933A5A325C063B99444D9CE3BC415B4477
Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/fD8gr1Ue9NyWseXpL826cmznNx4.roa
Signing time: Sun 17 Nov 2024 13:40:09 +0000
ROA not before: Sun 17 Nov 2024 13:40:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49025
IP address blocks: 95.173.200.0/22 maxlen: 24
95.173.201.0/24 maxlen: 24
95.173.202.0/23 maxlen: 23
95.173.208.0/21 maxlen: 22
185.2.40.0/22 maxlen: 22
2a02:a48:f000::/36 maxlen: 36
2a06:5d80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 19:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3a:5a:32:5c:06:3b:99:44:4d:9c:e3:bc:41:5b:44:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Validity
Not Before: Nov 17 13:40:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c3f20af551ef4dc96b1e5e92fcdba726ce7371e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:b7:84:07:5a:6f:71:e1:e2:f5:74:73:fc:
5b:db:da:a0:b2:70:1d:10:77:b7:c9:ec:26:8c:43:
6b:86:59:63:b9:ca:56:f3:cb:45:90:db:91:69:52:
4d:bc:03:a9:df:99:8b:93:45:2d:df:86:7a:04:e6:
31:6a:e1:6c:7a:c0:d9:a4:fe:a2:5d:9c:bb:f5:f0:
40:c5:25:a3:67:cb:ba:8b:4d:4d:d0:9b:85:97:72:
9e:f5:22:ce:a0:0a:73:53:ad:46:9b:79:03:50:ab:
73:ff:c8:03:ee:95:2e:1e:f4:9f:4c:c3:8e:c1:6e:
b0:9d:5a:9c:54:5d:58:05:c5:dd:3a:2d:e6:dd:c2:
e7:cc:b0:52:9b:23:d4:3d:64:34:8f:70:be:17:fc:
ab:11:53:48:a5:fb:03:21:4e:78:07:0f:71:88:53:
74:3a:91:a1:87:e4:5d:8f:e8:12:7b:41:8c:75:ad:
68:a1:8c:a3:9f:11:41:35:ee:91:7a:3d:8a:e8:7b:
7c:49:eb:8f:56:78:aa:50:5e:10:3e:4c:af:b1:cd:
4e:f8:66:f6:49:ef:5c:a2:9f:42:f8:33:a6:c2:f2:
ea:82:a1:dc:8e:81:d3:ec:57:50:d6:44:b0:6a:c1:
eb:8c:aa:1c:ff:d7:34:e1:2d:7d:61:98:63:4b:ae:
3f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3F:20:AF:55:1E:F4:DC:96:B1:E5:E9:2F:CD:BA:72:6C:E7:37:1E
X509v3 Authority Key Identifier:
keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/fD8gr1Ue9NyWseXpL826cmznNx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.173.200.0/22
95.173.208.0/21
185.2.40.0/22
IPv6:
2a02:a48:f000::/36
2a06:5d80::/32
Signature Algorithm: sha256WithRSAEncryption
a3:1a:f5:18:20:ca:c0:5b:45:13:fa:d6:78:e7:2d:c3:59:7b:
95:72:49:45:6f:25:4e:c0:10:8b:b5:79:b0:d1:c5:17:60:a1:
0c:e7:50:8d:43:b4:ce:41:e2:9c:c0:1b:2d:6e:d6:da:8a:a0:
ae:13:89:af:2a:cf:ec:47:1a:86:23:0b:4e:1f:bc:d6:90:74:
d8:d8:7d:2f:ef:5b:ca:5b:f6:3d:68:dc:b0:64:83:8a:64:fc:
5b:57:9b:ec:27:39:58:b9:95:95:3d:28:f5:c6:da:ab:66:6a:
6a:23:ae:2c:0c:c7:f1:a0:20:cf:39:4a:2f:52:9a:d5:98:73:
35:f5:d6:0a:02:31:dd:66:2d:5e:7c:11:94:14:c6:f8:29:d9:
39:ef:90:b1:3a:1b:c3:5b:ee:95:b0:38:6d:8a:13:db:cf:b0:
9c:37:52:af:2f:72:e3:c7:b1:37:46:af:3c:7f:89:b1:3d:79:
29:15:66:30:55:a7:46:c6:57:b0:cd:c0:75:94:e9:97:b3:76:
be:40:90:d5:e8:ec:b9:b1:12:44:e6:0d:76:80:0e:f9:60:7f:
99:ae:31:6b:ba:5e:97:9e:12:59:a9:c9:08:ff:46:86:9c:20:
24:ed:97:d2:0e:39:75:f9:82:92:1e:ea:38:7a:03:ff:4b:9e:
06:fe:5e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:59:34 2024 by rpki-client on console-ams.rpki-client.org