Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/3LJI2FDmVfdwGoDGBwKrTAsp7Pc.roa
File: 3LJI2FDmVfdwGoDGBwKrTAsp7Pc.roa (raw, json)
Hash identifier: LeqT1fF7zMBCRHVESMRL8Gon1R2oOgyVQR2oI+kqH0Q=
Subject key identifier: DC:B2:48:D8:50:E6:55:F7:70:1A:80:C6:07:02:AB:4C:0B:29:EC:F7
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018CC8DE1BC900392388CF3611F71A9FC7BF
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/3LJI2FDmVfdwGoDGBwKrTAsp7Pc.roa
Signing time: Tue 02 Jan 2024 06:30:48 +0000
ROA not before: Tue 02 Jan 2024 06:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216414
IP address blocks: 95.214.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:1b:c9:00:39:23:88:cf:36:11:f7:1a:9f:c7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 2 06:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcb248d850e655f7701a80c60702ab4c0b29ecf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2b:4c:ba:21:3f:0c:fe:7b:de:d0:69:29:2b:
9b:d8:12:55:85:a7:d7:b4:81:54:8f:f9:22:fb:a6:
fb:31:0c:91:c8:25:30:af:d7:c0:8f:6d:91:77:2f:
5d:8c:69:dc:94:87:4d:70:f0:6f:8f:55:64:aa:9a:
00:2c:b6:49:11:25:72:38:3d:3a:f2:99:32:61:82:
77:52:bf:14:e0:d2:bf:bd:a7:98:86:b1:45:6c:ac:
c7:d2:5b:7c:a3:92:a7:23:38:93:33:28:ff:26:64:
e2:07:0d:ff:c6:d7:d6:77:a8:fb:fe:ab:d3:e0:9b:
30:e8:5c:1d:23:71:76:9e:ad:23:56:4d:6e:a2:d4:
ed:00:51:f1:51:1f:f4:89:5c:35:75:99:53:08:43:
c0:d6:46:d1:06:15:15:70:de:e5:a9:a0:dd:7f:e0:
2d:16:9f:69:0a:f5:84:a5:48:84:f9:e4:1c:90:4b:
48:fc:bf:fe:de:90:bc:33:2a:b2:b5:09:ce:4e:f2:
bf:68:52:be:de:70:46:80:5e:27:fd:15:db:d0:c2:
4f:d0:c6:46:b5:3c:e6:a8:25:c8:8c:d3:e8:6f:76:
b5:17:c8:c2:3e:5a:92:b6:8e:87:c7:f2:e4:93:4d:
4c:48:53:2b:31:a4:dc:b2:f9:8c:39:0b:6f:46:2d:
25:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B2:48:D8:50:E6:55:F7:70:1A:80:C6:07:02:AB:4C:0B:29:EC:F7
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/3LJI2FDmVfdwGoDGBwKrTAsp7Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.181.0/24
Signature Algorithm: sha256WithRSAEncryption
82:ff:60:26:9f:87:c7:76:93:21:9a:d8:13:6f:9a:a9:25:53:
dd:bd:09:eb:65:50:f5:a9:9b:bf:be:60:94:8a:19:b6:6b:5c:
01:ca:52:48:f5:f2:17:45:71:37:9e:61:ad:a9:6c:3d:5e:83:
8d:06:44:50:d0:52:27:7e:2a:aa:2c:1b:c2:db:24:f7:f0:f6:
8c:71:90:20:df:4f:1d:41:40:a4:54:7c:ea:4f:72:82:a9:03:
32:52:35:3b:5a:89:d3:fb:7f:20:61:48:04:a9:4c:86:ec:9c:
21:e8:ad:37:81:21:7b:0c:fe:47:0e:02:20:6c:2d:25:6f:0e:
80:25:21:5b:bc:21:b1:f1:b8:63:64:ba:a6:00:44:e7:9f:6d:
8e:51:67:59:aa:3d:12:1f:d9:5e:9c:50:cf:a1:f4:3d:9f:99:
91:11:18:71:63:5f:ec:05:35:ac:37:a5:0b:80:04:57:e1:d2:
96:11:13:1c:ef:79:36:4e:d6:4a:f5:22:4e:9d:16:49:11:6c:
6a:ff:ed:fd:ab:5d:b4:57:1c:f6:fb:2a:b3:8d:7a:18:66:4d:
53:21:df:80:b9:34:f7:13:a4:fe:a0:b7:61:80:3c:19:33:ac:
da:2d:05:a3:85:a8:39:13:b7:d6:3d:e4:d3:4f:c6:0e:4d:15:
91:7c:7c:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3hvJADkjiM82Efcan8e/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTA3YWI2OTIxZWY4Y2IyZGVjYTNlYjc2NjQ3OGNmZjNl
NWZjNmQwHhcNMjQwMTAyMDYzMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2IyNDhkODUwZTY1NWY3NzAxYTgwYzYwNzAyYWI0YzBiMjllY2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhStMuiE/DP573tBpKSub2BJVhafX
tIFUj/ki+6b7MQyRyCUwr9fAj22Rdy9djGnclIdNcPBvj1VkqpoALLZJESVyOD06
8pkyYYJ3Ur8U4NK/vaeYhrFFbKzH0lt8o5KnIziTMyj/JmTiBw3/xtfWd6j7/qvT
4Jsw6FwdI3F2nq0jVk1uotTtAFHxUR/0iVw1dZlTCEPA1kbRBhUVcN7lqaDdf+At
Fp9pCvWEpUiE+eQckEtI/L/+3pC8MyqytQnOTvK/aFK+3nBGgF4n/RXb0MJP0MZG
tTzmqCXIjNPob3a1F8jCPlqSto6Hx/Lkk01MSFMrMaTcsvmMOQtvRi0lLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNyySNhQ5lX3cBqAxgcCq0wLKez3MB8GA1UdIwQY
MBaAFCgQeraSHvjLLeyj63ZkeM/z5fxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzIt
YzBmYjNlZjc2NDBlLzEvM0xKSTJGRG1WZmR3R29ER0J3S3JUQXNwN1BjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzItYzBmYjNlZjc2NDBl
LzEvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX9a1MA0G
CSqGSIb3DQEBCwUAA4IBAQCC/2Amn4fHdpMhmtgTb5qpJVPdvQnrZVD1qZu/vmCU
ihm2a1wBylJI9fIXRXE3nmGtqWw9XoONBkRQ0FInfiqqLBvC2yT38PaMcZAg308d
QUCkVHzqT3KCqQMyUjU7WonT+38gYUgEqUyG7Jwh6K03gSF7DP5HDgIgbC0lbw6A
JSFbvCGx8bhjZLqmAETnn22OUWdZqj0SH9lenFDPofQ9n5mRERhxY1/sBTWsN6UL
gARX4dKWERMc73k2TtZK9SJOnRZJEWxq/+39q120Vxz2+yqzjXoYZk1TId+AuTT3
E6T+oLdhgDwZM6zaLQWjhag5E7fWPeTTT8YOTRWRfHyJ
-----END CERTIFICATE-----
Generated at Thu May 23 01:50:08 2024 by rpki-client on console-fra.rpki-client.org