Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/kFTZv_eOFUbagwl_t-qfaqrMfSI.roa
File: kFTZv_eOFUbagwl_t-qfaqrMfSI.roa (raw, json)
Hash identifier: 586X/ZdGuoD5kPBvh9uqPdtbyBlsyFNjcqzlcMkgcA4=
Subject key identifier: 90:54:D9:BF:F7:8E:15:46:DA:83:09:7F:B7:EA:9F:6A:AA:CC:7D:22
Certificate issuer: /CN=c77fe005d7e58ec033ca9aba87e0606021533617
Certificate serial: 018CC493268086E858374305E21D5D9DD68C
Authority key identifier: C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/kFTZv_eOFUbagwl_t-qfaqrMfSI.roa
Signing time: Mon 01 Jan 2024 10:30:27 +0000
ROA not before: Mon 01 Jan 2024 10:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49840
IP address blocks: 95.142.135.0/24 maxlen: 24
95.142.134.0/24 maxlen: 24
95.142.133.0/24 maxlen: 24
95.142.136.0/24 maxlen: 24
95.142.128.0/24 maxlen: 24
95.142.131.0/24 maxlen: 24
95.142.130.0/24 maxlen: 24
95.142.129.0/24 maxlen: 24
95.142.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:26:80:86:e8:58:37:43:05:e2:1d:5d:9d:d6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77fe005d7e58ec033ca9aba87e0606021533617
Validity
Not Before: Jan 1 10:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9054d9bff78e1546da83097fb7ea9f6aaacc7d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:00:5b:d7:3d:30:7f:9a:8c:a4:ec:8c:2d:c5:
91:db:1c:2d:29:04:1b:8c:4a:05:8e:a3:d7:79:a2:
9b:86:7b:c1:93:5e:5f:69:e4:f8:01:25:3f:7e:28:
0a:bb:bc:5f:75:9c:06:8e:96:9c:e0:b8:3e:3d:86:
b9:aa:92:b2:48:72:c9:ae:0f:1a:49:db:8c:c2:4e:
4e:e6:3f:91:75:12:17:99:41:f6:00:8e:7c:36:b6:
96:d8:4a:d1:b3:37:57:3f:73:e6:a3:a9:98:b9:b5:
8a:a1:1b:56:95:6d:a9:9b:b5:8d:8e:0e:93:b6:f7:
d3:36:28:a5:a6:48:9a:c4:7a:f1:60:70:b9:e3:f1:
d6:f7:ef:79:2c:0b:9d:2b:b4:7a:39:00:fd:aa:af:
65:dc:25:7f:a0:b0:71:29:f2:48:c6:b9:f5:26:f4:
e1:7c:e0:e5:6b:c6:58:fe:44:1b:6b:03:8e:1a:27:
54:f7:4c:52:7f:83:cc:08:73:25:61:db:fe:45:bc:
22:a0:42:15:67:78:0f:c7:da:1e:8c:62:88:f4:e9:
8b:96:e7:94:48:9b:65:b0:06:51:cd:ac:d8:e7:ba:
ee:15:ab:f8:ca:f5:39:6e:b5:74:14:35:97:15:d5:
ae:fd:e3:2b:96:ba:17:7f:28:d7:83:9b:40:b7:54:
55:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:54:D9:BF:F7:8E:15:46:DA:83:09:7F:B7:EA:9F:6A:AA:CC:7D:22
X509v3 Authority Key Identifier:
keyid:C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/kFTZv_eOFUbagwl_t-qfaqrMfSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.128.0-95.142.136.255
Signature Algorithm: sha256WithRSAEncryption
a1:8e:2e:f6:77:ac:90:44:71:97:8c:a3:a4:d9:a0:9e:71:4d:
2c:1c:0d:f8:00:14:98:66:f1:38:0f:4e:cd:31:54:b0:8b:8b:
ff:29:c6:6e:11:31:95:a3:9a:21:c5:39:70:c4:94:f6:48:ba:
3d:54:80:7f:7c:14:ad:a8:f0:8b:17:8b:b8:b0:db:e2:54:be:
84:23:e4:ef:0b:fa:70:5b:0b:23:ea:eb:c1:6b:e3:7d:bf:7e:
ab:8b:0f:5c:dc:e9:95:ae:60:18:b2:4c:f4:8d:4f:29:c4:1e:
d6:4e:23:24:ca:f5:ec:04:b7:d6:9c:3c:9e:df:b9:c2:66:09:
7e:9f:cd:a4:33:e9:14:1f:15:fa:17:c6:91:59:8b:e6:75:06:
50:1d:29:82:cb:4b:cd:34:a5:4f:a6:c0:bd:fa:f0:3e:f1:c2:
c1:f7:c6:41:b9:fc:75:11:18:8c:54:67:5c:80:c6:97:25:f0:
57:59:8f:00:a8:a9:4e:c2:45:b4:73:af:b5:ea:ed:ee:11:51:
2a:d3:ae:43:97:f1:19:84:30:7b:99:41:95:c6:d6:38:e0:2c:
79:a7:26:4f:b1:c6:2a:da:5d:a1:51:b2:e6:59:4e:2b:78:97:
63:95:db:31:4d:a1:98:59:e7:b6:3b:4b:52:e6:ad:5e:01:e6:
d3:38:5f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:06:06 2024 by rpki-client on console-fra.rpki-client.org