Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/mIO_svSyQadhNStbS0iGLMsUXic.roa
File: mIO_svSyQadhNStbS0iGLMsUXic.roa (raw, json)
Hash identifier: DUKcGqbf9gPLgGDJQf2nrcg8cjvddRZWYb8hvErhcMk=
Subject key identifier: 98:83:BF:B2:F4:B2:41:A7:61:35:2B:5B:4B:48:86:2C:CB:14:5E:27
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018CC8DE1AF0FA004A115B455E1FD9FC3295
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/mIO_svSyQadhNStbS0iGLMsUXic.roa
Signing time: Tue 02 Jan 2024 06:30:48 +0000
ROA not before: Tue 02 Jan 2024 06:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211415
IP address blocks: 95.214.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:1a:f0:fa:00:4a:11:5b:45:5e:1f:d9:fc:32:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 2 06:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9883bfb2f4b241a761352b5b4b48862ccb145e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a9:7b:fe:27:b9:db:5a:a2:a2:e6:96:eb:5e:
b5:6b:a1:4d:6f:ee:d4:85:71:01:ea:96:63:90:0a:
c5:35:4a:35:37:57:cd:48:c9:90:d3:24:d9:9f:91:
2e:6f:30:86:5b:dc:3d:3c:5f:c6:82:5a:ad:37:85:
60:ee:07:69:bb:b3:78:4a:86:34:3b:fe:86:a8:37:
c0:eb:47:93:47:3a:08:bc:84:7f:82:f0:53:2d:1e:
90:fe:3f:15:5c:fb:ab:07:2e:2e:e8:25:39:da:77:
52:d9:b6:3b:36:20:83:6a:99:48:a0:3d:3e:d4:7b:
63:01:2b:57:cb:21:90:e5:30:ae:10:9d:17:df:a3:
7c:aa:20:4d:d4:d8:88:a1:10:0b:c9:26:17:fc:62:
da:29:e2:e9:a4:a9:ca:28:35:a4:a3:a1:4a:b8:94:
39:44:d4:af:ce:30:b4:5c:7d:4e:75:3c:3f:43:62:
a5:e6:97:7b:70:89:04:46:be:fb:f6:bc:23:b1:7d:
5f:3e:23:59:d7:8a:e8:c8:0b:27:8d:4c:ee:71:40:
4d:ae:8a:32:10:79:3a:99:16:80:a1:fa:2a:d8:fd:
be:30:08:4d:58:e5:4a:46:ea:18:e3:14:6a:55:ef:
a1:fa:34:10:e7:b9:37:bb:fd:34:47:30:69:ef:09:
6d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:83:BF:B2:F4:B2:41:A7:61:35:2B:5B:4B:48:86:2C:CB:14:5E:27
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/mIO_svSyQadhNStbS0iGLMsUXic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.182.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:ec:9e:7e:aa:89:24:55:11:2c:29:63:9f:ef:53:a2:90:86:
c3:f1:6e:bc:ff:a5:76:98:61:d2:15:e1:05:ec:a6:70:5c:3b:
2f:d0:86:cc:8f:08:1a:37:94:2a:d7:10:a5:21:ce:61:ca:34:
2c:c5:df:4d:40:c7:38:af:7a:48:2b:c7:85:d0:04:c4:74:60:
2c:30:7b:89:4f:cc:07:ec:1f:da:6b:0e:be:6a:fc:55:91:5b:
f7:a5:d8:8b:c2:54:34:74:ae:97:d2:54:af:18:58:e4:1d:bc:
a0:d7:23:52:19:a1:91:3a:45:26:03:c0:a7:7d:2c:d5:12:9e:
77:60:9f:48:fc:9b:e5:78:7c:16:58:d2:7f:bb:e2:10:b6:a4:
9e:15:52:07:bb:e0:4c:53:b5:1c:54:32:a7:5b:d4:75:7b:b7:
66:b7:32:c2:d6:c9:48:69:63:87:b6:8c:d1:b6:da:72:f3:9f:
2b:8d:73:41:0a:98:5d:4a:8c:79:37:26:1b:5a:e3:91:61:5b:
34:7f:46:6d:9d:fa:1e:f7:49:f0:c2:19:65:de:e9:54:f9:0b:
60:a8:2b:a4:2f:3a:ef:10:40:65:82:7a:ee:bf:06:70:c4:96:
7e:6e:b3:ea:08:55:b6:22:dc:78:d7:8a:6f:f1:a9:94:6c:6f:
8f:4c:9b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:16:31 2024 by rpki-client on console-ams.rpki-client.org