Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Y8kqMxI_845F85LtcCBTI0WWIFk.roa
File: Y8kqMxI_845F85LtcCBTI0WWIFk.roa (raw, json)
Hash identifier: cLX21b50BbztEbbMFtxDihlDOrg59lveMCbwbof277Q=
Subject key identifier: 63:C9:2A:33:12:3F:F3:8E:45:F3:92:ED:70:20:53:23:45:96:20:59
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 018CC87153B614208CBA10639F5F4FD54256
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Y8kqMxI_845F85LtcCBTI0WWIFk.roa
Signing time: Tue 02 Jan 2024 04:31:59 +0000
ROA not before: Tue 02 Jan 2024 04:31:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210993
IP address blocks: 95.181.153.0/24 maxlen: 24
95.181.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:53:b6:14:20:8c:ba:10:63:9f:5f:4f:d5:42:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Jan 2 04:31:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63c92a33123ff38e45f392ed7020532345962059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:eb:ff:ce:4d:4e:2b:a5:c8:e1:11:f5:95:8a:
83:a2:5d:c1:8f:a8:44:cd:c1:0e:d0:90:e8:20:29:
c6:17:ca:13:57:50:38:d8:a2:8f:7b:53:fd:2f:b8:
7d:28:62:80:73:1d:99:6e:b6:e9:be:9c:f8:60:2d:
5d:cd:af:20:01:62:32:53:ce:78:b6:01:82:cb:51:
19:10:5f:1b:45:81:85:da:10:17:9d:b7:fb:78:f4:
bd:18:e2:0b:4e:9c:d2:31:e8:04:fc:9f:86:21:6d:
fe:ac:6b:96:2b:eb:39:c9:b2:78:0b:74:4b:3e:a4:
5e:2b:14:bb:a9:10:58:73:51:d6:42:59:ec:cc:d9:
ee:57:4e:4b:86:3e:7d:65:40:cf:ca:ee:76:51:a9:
46:bb:6e:e9:9a:6f:96:c6:10:0e:5d:c5:e3:03:62:
8e:85:43:0c:5a:92:4c:34:87:7e:a6:de:19:86:08:
68:cb:67:65:0d:4b:54:e6:6a:d9:62:d6:f4:7c:29:
f9:06:e0:d1:ba:41:73:37:9a:d8:04:8d:20:e8:c4:
7d:27:f3:d5:f9:50:e7:e5:ed:af:22:76:c0:5b:d2:
89:64:5e:da:c2:a1:ee:38:92:e4:4c:21:88:f9:51:
ea:31:fc:e3:04:92:fb:76:64:ea:3c:40:bf:25:16:
13:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C9:2A:33:12:3F:F3:8E:45:F3:92:ED:70:20:53:23:45:96:20:59
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Y8kqMxI_845F85LtcCBTI0WWIFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.153.0/24
95.181.158.0/24
Signature Algorithm: sha256WithRSAEncryption
13:46:79:df:df:a7:dc:20:59:50:1a:a5:d8:2f:b8:92:af:c6:
8c:2d:0e:e5:c7:79:d2:b3:f1:15:87:52:64:b8:04:e7:51:3f:
92:d5:46:3d:d3:82:c4:be:42:50:2f:7e:11:4b:da:65:61:6c:
56:38:6b:02:72:e3:cf:44:c6:47:77:8b:8a:d4:3c:f8:68:92:
d8:0e:fe:02:39:7f:3d:1d:d1:c8:e5:0a:fd:d2:26:0f:24:6c:
96:fe:43:db:59:0f:58:ae:8e:85:d3:55:6f:ce:f6:6c:64:66:
96:44:8b:76:25:08:29:04:f8:58:1d:84:21:9d:55:d3:f4:46:
66:54:78:ae:91:4b:ce:f0:47:4a:c8:f0:0e:fe:11:38:ed:23:
ed:d7:a4:1c:89:c1:63:ad:dc:38:16:ec:70:65:c3:0f:a7:5e:
7a:b3:ef:6d:a8:e4:e3:83:d3:a4:a4:c4:00:9e:cd:cd:62:cf:
d8:0e:d5:ce:4e:77:f8:36:8f:7e:ba:95:da:ef:8a:fe:81:3b:
b8:dd:9f:9b:3a:a2:a4:a2:eb:cc:b7:e5:3f:44:e3:8b:a6:d3:
9e:d5:12:50:4f:42:e1:ed:ea:5e:f8:a3:c3:cd:4d:21:f3:67:
3f:a5:4f:96:d9:46:e1:6e:f2:7d:61:f1:8f:ea:bc:f0:f2:e3:
70:75:ad:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 23:21:29 2024 by rpki-client on console-ams.rpki-client.org