Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/iiIkNIjU4qEAPELIlnWuy8Deuho.roa
File: iiIkNIjU4qEAPELIlnWuy8Deuho.roa (raw, json)
Hash identifier: ai3VDK4npOcRyVXWPJCkImr7733pUNdC3Ukucz6Rsp8=
Subject key identifier: 8A:22:24:34:88:D4:E2:A1:00:3C:42:C8:96:75:AE:CB:C0:DE:BA:1A
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018CC8DE18BBA56421A8078F11F878F4B878
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/iiIkNIjU4qEAPELIlnWuy8Deuho.roa
Signing time: Tue 02 Jan 2024 06:30:47 +0000
ROA not before: Tue 02 Jan 2024 06:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203758
IP address blocks: 95.214.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:18:bb:a5:64:21:a8:07:8f:11:f8:78:f4:b8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 2 06:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a22243488d4e2a1003c42c89675aecbc0deba1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:2d:c1:a5:69:b0:49:ba:dd:d1:57:59:62:
54:9c:b2:54:d5:f0:cc:46:0d:69:01:ea:64:9d:8a:
1f:bd:3e:0e:24:86:d4:31:df:18:54:b3:d9:25:89:
21:ec:f6:26:fd:e6:a0:a7:90:2e:1e:d3:06:de:ae:
0a:2e:e1:d3:f4:4f:ec:ae:35:6b:4c:8b:c6:89:fe:
93:73:34:c4:98:ea:dd:c0:56:6b:61:0a:44:94:54:
2b:ea:59:bc:75:41:c4:04:15:c2:63:f3:38:ca:18:
1d:81:13:dc:ee:32:7a:b6:1a:80:a4:c2:68:77:52:
de:59:be:cc:61:b8:ec:d2:23:31:fa:d0:e6:52:c5:
b7:a9:c9:b2:23:0b:ee:d9:b4:2d:9b:b1:5c:48:d6:
b2:60:bc:2e:cf:01:9a:eb:a6:6b:31:db:74:52:5b:
7e:1e:96:50:f9:ae:42:3b:a4:45:57:e8:fc:c3:9a:
c3:7d:92:04:ca:3a:cf:60:bb:e3:06:24:85:e3:21:
e1:dd:66:7e:8f:3f:8a:05:f3:e3:1c:71:e6:f6:63:
3d:fa:8f:28:12:39:8d:61:fb:5b:a1:e6:14:83:62:
0f:07:bb:c8:4a:4e:20:08:78:60:ef:63:3d:b4:94:
08:9d:2e:df:92:f2:cc:2f:de:8b:21:a0:8d:b7:20:
55:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:22:24:34:88:D4:E2:A1:00:3C:42:C8:96:75:AE:CB:C0:DE:BA:1A
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/iiIkNIjU4qEAPELIlnWuy8Deuho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.180.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:83:36:fc:9c:40:dd:fe:ae:7e:2b:23:a4:8a:fa:87:d5:f3:
92:91:ea:1c:57:26:a0:1d:5d:0f:a6:c2:db:f9:5d:f6:a5:e3:
ed:0f:26:56:38:31:e8:9f:7e:0f:4e:23:de:bc:5b:61:99:eb:
29:b1:23:20:7c:70:c5:c7:ab:89:0d:b6:14:7a:c4:da:bd:5c:
86:b6:6b:95:ed:d4:0c:f6:3a:db:e0:bd:25:29:76:89:63:9a:
88:0d:cb:6f:11:72:df:f0:85:5d:00:3f:87:09:78:ba:ec:9b:
34:8b:af:b9:d0:4b:18:19:e8:50:ce:3c:5c:93:76:70:85:71:
04:d7:f8:d9:67:08:b2:80:3c:30:51:b1:bd:44:9a:3f:0b:2d:
2b:14:37:36:77:49:9d:f1:55:c2:cb:3b:34:69:eb:99:42:55:
a2:4c:6d:8e:b2:a0:8e:90:2d:f4:f1:ec:2c:0e:da:0b:8e:c7:
52:e2:1d:94:55:4e:14:59:fe:96:0d:dd:b5:73:c1:b4:78:ee:
cd:f7:94:a6:09:6a:18:c2:7c:5f:5b:39:65:98:48:44:c2:85:
17:45:e7:e0:29:0b:a4:47:65:31:72:5a:57:fd:c7:ac:71:14:
76:8f:5c:32:ce:29:4a:13:a7:cc:f4:37:6f:a8:ca:57:d0:46:
fa:2c:ff:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3hi7pWQhqAePEfh49Lh4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTA3YWI2OTIxZWY4Y2IyZGVjYTNlYjc2NjQ3OGNmZjNl
NWZjNmQwHhcNMjQwMTAyMDYzMDQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTIyMjQzNDg4ZDRlMmExMDAzYzQyYzg5Njc1YWVjYmMwZGViYTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8YtwaVpsEm63dFXWWJUnLJU1fDM
Rg1pAepknYofvT4OJIbUMd8YVLPZJYkh7PYm/eagp5AuHtMG3q4KLuHT9E/srjVr
TIvGif6TczTEmOrdwFZrYQpElFQr6lm8dUHEBBXCY/M4yhgdgRPc7jJ6thqApMJo
d1LeWb7MYbjs0iMx+tDmUsW3qcmyIwvu2bQtm7FcSNayYLwuzwGa66ZrMdt0Ult+
HpZQ+a5CO6RFV+j8w5rDfZIEyjrPYLvjBiSF4yHh3WZ+jz+KBfPjHHHm9mM9+o8o
EjmNYftboeYUg2IPB7vISk4gCHhg72M9tJQInS7fkvLML96LIaCNtyBVmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIoiJDSI1OKhADxCyJZ1rsvA3roaMB8GA1UdIwQY
MBaAFCgQeraSHvjLLeyj63ZkeM/z5fxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzIt
YzBmYjNlZjc2NDBlLzEvaWlJa05JalU0cUVBUEVMSWxuV3V5OERldWhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzItYzBmYjNlZjc2NDBl
LzEvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX9a0MA0G
CSqGSIb3DQEBCwUAA4IBAQAMgzb8nEDd/q5+KyOkivqH1fOSkeocVyagHV0PpsLb
+V32pePtDyZWODHon34PTiPevFthmespsSMgfHDFx6uJDbYUesTavVyGtmuV7dQM
9jrb4L0lKXaJY5qIDctvEXLf8IVdAD+HCXi67Js0i6+50EsYGehQzjxck3ZwhXEE
1/jZZwiygDwwUbG9RJo/Cy0rFDc2d0md8VXCyzs0aeuZQlWiTG2OsqCOkC308ews
DtoLjsdS4h2UVU4UWf6WDd21c8G0eO7N95SmCWoYwnxfWzllmEhEwoUXRefgKQuk
R2UxclpX/cescRR2j1wyzilKE6fM9DdvqMpX0Eb6LP9x
-----END CERTIFICATE-----
Generated at Thu May 23 03:06:02 2024 by rpki-client on console-ams.rpki-client.org