Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/bC34NCYlyC-CgAyx7v2zqSwFQi0.roa
File: bC34NCYlyC-CgAyx7v2zqSwFQi0.roa (raw, json)
Hash identifier: MMEen5GIeLhwKFBEmHGiAmNDtY13yGr5YBkTlnerdQA=
Subject key identifier: 6C:2D:F8:34:26:25:C8:2F:82:80:0C:B1:EE:FD:B3:A9:2C:05:42:2D
Certificate issuer: /CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Certificate serial: 018CC64A90EA6A06F78EBEE8EFAE4FCF1A64
Authority key identifier: 97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/bC34NCYlyC-CgAyx7v2zqSwFQi0.roa
Signing time: Mon 01 Jan 2024 18:30:24 +0000
ROA not before: Mon 01 Jan 2024 18:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209684
IP address blocks: 95.214.56.5/32 maxlen: 32
95.214.58.0/24 maxlen: 24
95.214.56.0/24 maxlen: 24
95.214.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:90:ea:6a:06:f7:8e:be:e8:ef:ae:4f:cf:1a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Validity
Not Before: Jan 1 18:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c2df8342625c82f82800cb1eefdb3a92c05422d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:8c:29:47:04:b6:8a:c2:3d:b2:22:27:5b:
d4:40:58:c6:61:07:24:cd:c0:3a:b8:08:f2:d2:d6:
33:de:cd:e8:60:50:58:e1:da:dd:bd:a8:c8:76:d5:
b4:a6:39:1a:ef:c8:0d:39:b8:45:23:89:37:de:bf:
eb:c7:4c:12:f6:af:76:4f:e1:9b:00:e7:58:1f:f0:
17:5e:a6:85:ae:c5:70:30:f1:83:d8:d8:bd:54:77:
f2:44:fb:f9:af:75:5c:99:80:b8:11:e7:21:eb:f0:
a9:ce:78:d0:1b:e1:3a:8d:d3:e7:29:e6:62:a9:c1:
db:c0:2f:85:e9:a5:50:27:f7:9c:e9:1f:c4:42:1b:
e2:05:98:3f:7f:2e:10:17:6c:b8:ea:bb:75:49:f0:
0d:46:99:44:33:20:30:fc:22:89:5f:52:60:9a:1e:
15:4d:d9:6e:64:0e:e5:0d:84:67:55:e8:c5:17:11:
aa:24:c2:aa:02:82:21:20:2a:22:56:c3:ed:1c:61:
cf:03:d8:8b:a8:26:72:b8:6f:06:5e:e4:20:9e:96:
1e:1b:3e:45:ab:f5:e5:c3:84:a8:36:b9:31:32:57:
20:04:10:3b:68:70:12:1d:a0:8e:f0:03:3d:a5:01:
1f:29:ff:7d:7c:ef:9f:c1:8d:3b:e7:6a:80:50:02:
f2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2D:F8:34:26:25:C8:2F:82:80:0C:B1:EE:FD:B3:A9:2C:05:42:2D
X509v3 Authority Key Identifier:
keyid:97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/bC34NCYlyC-CgAyx7v2zqSwFQi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.56.0/24
95.214.58.0/23
Signature Algorithm: sha256WithRSAEncryption
68:02:7e:07:40:ef:47:62:09:fa:df:67:48:5c:3d:fd:ea:24:
b2:0b:dd:8d:a0:36:f7:c4:04:55:0a:01:46:de:9c:b4:eb:e6:
aa:1b:c0:ec:3e:40:49:b6:aa:0a:cc:6e:ba:be:2e:91:7c:3a:
66:18:0f:9d:8f:33:3a:1a:88:5f:61:21:d5:26:bd:b4:89:ed:
74:64:c4:58:b2:5e:91:a3:ea:10:e2:58:8e:6e:d5:9a:b3:36:
e2:00:d6:81:d5:8b:d2:7c:91:63:1b:b0:40:f3:07:fb:ff:e1:
4a:be:61:ff:0b:d8:52:b9:8c:4a:61:ea:81:03:3d:93:e7:06:
3f:79:d5:37:94:f7:a3:8f:b8:b0:6e:38:97:17:65:e9:6b:28:
92:24:2c:7c:08:1b:00:42:eb:5e:45:2b:1a:95:63:b7:51:62:
8b:8b:10:7b:e2:30:71:47:31:e4:03:7d:e4:79:f7:be:9e:93:
79:0b:f7:de:d7:7b:f2:99:be:0a:55:07:c3:ba:79:4d:33:e2:
88:72:e7:ae:de:c7:89:54:ce:41:0a:e5:2b:81:9d:72:8c:99:
d1:b8:6d:bc:db:23:ed:99:8e:5e:89:3d:48:ee:d1:49:a8:c0:
ff:cb:df:e4:a6:a1:a4:bc:16:fe:0c:ad:af:ad:de:ad:da:30:
d9:6f:e4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:13:10 2024 by rpki-client on console-fra.rpki-client.org