Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/AS0AruYq4lE_v2ZJ-Rha3kHiBMM.roa
File: AS0AruYq4lE_v2ZJ-Rha3kHiBMM.roa (raw, json)
Hash identifier: N5H9wIRmR9546eXLVFoEQn78mwRlsSCIKvuP26s0c0A=
Subject key identifier: 01:2D:00:AE:E6:2A:E2:51:3F:BF:66:49:F9:18:5A:DE:41:E2:04:C3
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 0192D716EDFFDDA8033C309528D30B494EF7
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/AS0AruYq4lE_v2ZJ-Rha3kHiBMM.roa
Signing time: Tue 29 Oct 2024 07:04:16 +0000
ROA not before: Tue 29 Oct 2024 07:04:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214048
IP address blocks: 95.181.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d7:16:ed:ff:dd:a8:03:3c:30:95:28:d3:0b:49:4e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Oct 29 07:04:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=012d00aee62ae2513fbf6649f9185ade41e204c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:22:14:0f:db:63:41:24:2f:e0:dd:73:ce:e2:
74:8d:bf:c6:5a:2c:1e:35:b9:a8:d4:97:97:b3:ef:
9e:a0:8f:15:47:34:26:98:ef:1a:ad:03:3c:37:f4:
6a:89:50:fa:f5:35:43:cf:aa:34:a5:28:17:4f:da:
d3:8c:17:fc:34:8d:c9:3c:f1:ee:e1:72:8d:5a:8e:
7a:f2:07:62:59:53:52:b1:45:30:a7:69:71:9e:db:
c0:16:31:d9:2d:8e:9c:ce:27:44:46:b4:33:f9:6c:
39:3b:ce:02:69:00:9e:d8:ed:cf:8c:6f:2b:70:ca:
cc:70:cd:d6:e7:7f:d1:ec:32:2d:d4:ab:0c:10:32:
5b:73:db:35:64:f7:a2:c3:a7:8f:7d:29:68:4a:07:
9a:52:30:9c:22:36:ce:60:dc:20:cf:26:59:c7:65:
b8:69:14:f1:c9:1e:27:f6:bf:cc:c2:fa:8d:82:68:
fe:10:4c:58:cc:9e:46:c9:57:b6:6c:a5:e4:78:30:
c0:26:8b:4d:a3:92:27:da:80:3c:91:f7:c5:08:f4:
bc:b9:af:37:da:35:3e:44:27:58:40:5b:37:42:d1:
8a:0b:d0:ee:16:f8:60:ef:70:ff:12:d6:53:ab:ca:
a3:3e:86:f9:4a:22:cd:96:35:46:7f:47:7a:fc:47:
db:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2D:00:AE:E6:2A:E2:51:3F:BF:66:49:F9:18:5A:DE:41:E2:04:C3
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/AS0AruYq4lE_v2ZJ-Rha3kHiBMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.153.0/24
Signature Algorithm: sha256WithRSAEncryption
83:42:4c:e7:a8:e9:34:00:13:24:91:5d:1b:84:ef:01:ca:4e:
4d:c3:56:2e:b5:0e:76:46:e1:c4:7c:64:f8:b4:f6:97:34:8c:
0e:61:f2:bf:4a:0c:b6:1d:50:e0:87:b1:41:34:97:2e:c2:d3:
73:cf:e7:97:b7:00:5c:d3:8c:28:27:51:82:33:56:f9:81:8e:
34:2c:28:37:fb:fb:82:3a:c0:24:9f:6f:fc:86:4f:28:7a:d4:
40:9d:9e:d0:53:b6:db:9c:5e:60:f3:e7:99:04:7a:68:fc:e4:
ce:d8:48:da:c0:57:ad:fb:7a:37:13:cb:d7:46:bf:d2:72:9b:
ee:5e:08:df:c2:c0:da:78:f7:24:3f:f7:d6:30:4b:16:52:b2:
bd:81:03:e5:9d:9d:40:ee:18:d1:68:c7:f3:54:73:eb:06:e4:
0c:61:1c:f6:6a:62:5f:bd:57:13:28:27:ed:7a:72:14:0e:fb:
46:14:5e:76:93:3b:31:49:8d:72:8a:45:84:ff:6a:f7:64:ee:
be:64:b5:dc:b3:7e:f9:70:3a:5f:a8:1b:34:92:7e:43:c2:2e:
25:66:92:59:84:9d:44:ec:d0:24:dc:d5:c0:5a:d3:fb:c6:41:
b8:e2:16:17:dd:d0:cf:b3:59:a1:37:88:16:b7:59:4e:2b:16:
0e:df:2d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:07:33 2024 by rpki-client on console-fra.rpki-client.org