Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/1-F3pJmIrvXEbQVxnDGHfc87A9EQ.roa
File: 1-F3pJmIrvXEbQVxnDGHfc87A9EQ.roa (raw, json)
Hash identifier: +h04nr+2HKoVvqAnZnTh2OpoaihG0DPG6hhjFmAC88Y=
Subject key identifier: F8:5D:E9:26:62:2B:BD:71:1B:41:5C:67:0C:61:DF:73:CE:C0:F4:44
Certificate issuer: /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Certificate serial: 018CCA2A3CD8813F26E3B215F1245CCCC50D
Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/1-F3pJmIrvXEbQVxnDGHfc87A9EQ.roa
Signing time: Tue 02 Jan 2024 12:33:34 +0000
ROA not before: Tue 02 Jan 2024 12:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59441
IP address blocks: 95.215.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:3c:d8:81:3f:26:e3:b2:15:f1:24:5c:cc:c5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Validity
Not Before: Jan 2 12:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f85de926622bbd711b415c670c61df73cec0f444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:69:f1:c7:85:8a:66:75:12:e8:92:95:40:
60:89:28:f1:cc:39:78:ab:4b:17:55:86:47:d1:f5:
25:35:3d:bd:33:db:76:cc:ba:95:16:f7:6f:34:1b:
61:de:76:3d:61:9d:dc:44:39:7f:a8:3a:45:77:f2:
44:df:14:b3:7e:af:e4:33:87:a5:00:51:7c:06:42:
a9:88:93:e9:3e:de:03:77:9a:98:32:3c:bc:c7:dc:
35:91:4f:7b:ff:0b:97:5b:f9:d7:19:c0:ab:50:0b:
e6:9d:3b:5c:7e:8d:e6:ba:65:ba:d6:ad:33:30:5d:
18:e5:44:71:61:72:5e:f1:89:39:20:1c:30:bb:2e:
6f:75:96:4f:f2:b0:05:d7:65:23:1d:b0:16:fe:2e:
d6:8f:38:4c:be:0d:3c:d5:12:8f:87:f8:d5:d4:6e:
40:ca:fa:1a:26:4c:13:2b:20:1c:19:6b:87:f5:a1:
18:81:af:73:ca:f5:12:c4:a4:46:1c:2d:60:c1:b6:
5d:35:b4:8f:e7:c5:82:3b:ac:4d:d9:4e:10:f5:56:
7d:00:53:58:72:89:1a:c9:3c:44:d1:15:35:9b:88:
34:bf:76:09:66:7b:15:49:7f:a3:3e:7e:09:61:2a:
4e:28:8f:fc:73:38:5e:3c:2e:de:0d:4a:7f:ce:04:
fa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5D:E9:26:62:2B:BD:71:1B:41:5C:67:0C:61:DF:73:CE:C0:F4:44
X509v3 Authority Key Identifier:
keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/1-F3pJmIrvXEbQVxnDGHfc87A9EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.173.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:e5:74:30:d9:55:0d:2a:07:aa:ba:db:79:41:c8:02:d3:7d:
05:06:7f:85:cd:43:d4:e0:42:b4:74:92:d9:ac:39:63:c8:35:
28:d2:a9:d7:fc:d5:31:d4:d7:37:4d:a0:8d:1b:a8:50:9c:a2:
67:f3:cc:1a:53:e4:a3:30:c5:6c:5f:21:27:23:42:71:52:e5:
aa:dc:f1:ba:de:95:21:65:c9:23:ab:6a:b8:65:14:ba:4d:42:
6b:1f:0e:e6:60:16:2d:70:09:ae:6e:b5:30:6b:69:7f:a5:72:
3f:ca:42:78:9b:a5:75:6c:42:dc:3f:d0:6c:c5:7e:38:ce:b1:
28:0d:13:29:a4:73:4d:43:00:3b:61:ba:e9:93:47:23:0f:01:
c4:ea:a9:3a:24:9d:e7:04:5b:c1:b5:93:f5:ef:f3:d5:1f:18:
eb:b8:06:a2:3e:94:92:64:8b:47:8a:e0:a0:ed:30:d5:ef:68:
e8:80:06:35:62:8e:e9:d8:be:76:1d:17:5b:d8:a0:23:cd:99:
63:36:62:06:92:49:ee:b9:ac:eb:ee:23:f2:fe:c3:88:20:54:
95:ef:15:9a:9d:94:4f:ca:fb:84:4f:0c:7e:7c:7e:70:74:6f:
7e:8d:2b:5d:26:bd:ea:00:93:bb:39:70:76:9a:d0:eb:64:b0:
22:d3:af:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:47:03 2024 by rpki-client on console-ams.rpki-client.org