Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/i6CWENtAdnXqPwuX227uTDykXkg.roa
File: i6CWENtAdnXqPwuX227uTDykXkg.roa (raw, json)
Hash identifier: nuLqIrBizKW+oU2TGkl7L2LqgilWGWZ/QKZgoAyDfPY=
Subject key identifier: 8B:A0:96:10:DB:40:76:75:EA:3F:0B:97:DB:6E:EE:4C:3C:A4:5E:48
Certificate issuer: /CN=332293d0399160788b31e438760dc3bd1ed882eb
Certificate serial: 019421446F83322C6696E349C5E64E80DA0B
Authority key identifier: 33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/i6CWENtAdnXqPwuX227uTDykXkg.roa
Signing time: Wed 01 Jan 2025 09:48:40 +0000
ROA not before: Wed 01 Jan 2025 09:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50188
IP address blocks: 95.215.192.0/21 maxlen: 21
95.215.192.0/24 maxlen: 24
95.215.193.0/24 maxlen: 24
95.215.194.0/24 maxlen: 24
95.215.195.0/24 maxlen: 24
95.215.196.0/24 maxlen: 24
95.215.197.0/24 maxlen: 24
95.215.198.0/24 maxlen: 24
95.215.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6f:83:32:2c:66:96:e3:49:c5:e6:4e:80:da:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=332293d0399160788b31e438760dc3bd1ed882eb
Validity
Not Before: Jan 1 09:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ba09610db407675ea3f0b97db6eee4c3ca45e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:29:11:dd:1a:31:81:c1:0b:57:9f:b8:37:bb:
42:1b:64:20:ee:21:f4:51:fa:a1:f7:64:f0:ea:01:
53:32:30:7b:4c:49:5b:c4:b5:b5:60:35:2a:41:43:
aa:8c:c8:93:12:e8:9d:0e:d6:d8:cd:7d:0e:97:e2:
bd:3d:df:c7:72:9a:4d:d0:54:57:bc:74:ff:28:ba:
e9:c2:f8:8e:b6:c3:47:fb:a0:50:a0:71:b1:c1:df:
f0:a2:03:fd:78:27:b3:e1:55:92:12:10:04:5f:82:
10:9b:7e:da:f5:42:7e:69:1d:78:29:23:f1:bf:3f:
2a:b7:cc:cd:f6:ef:e6:41:6d:7d:83:6b:b5:a4:7f:
94:01:02:14:b9:ba:b5:5f:80:3b:a5:6e:8e:fb:d7:
7b:d9:30:68:1f:64:bd:0f:a5:b7:06:42:1a:1b:e0:
bc:6c:ab:2c:da:73:49:84:37:73:e1:ee:19:2c:80:
de:75:37:63:c8:35:57:83:8e:de:4e:22:0c:b8:84:
9b:4b:63:6b:23:32:6a:44:88:53:f6:95:61:b5:a0:
50:c2:68:8f:69:7a:54:4a:84:fc:86:cd:4a:a7:24:
d9:1a:91:de:58:85:df:b6:89:90:88:4d:68:0d:84:
82:d6:ba:b5:3c:51:f0:ad:bb:b9:35:31:2d:73:54:
f6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A0:96:10:DB:40:76:75:EA:3F:0B:97:DB:6E:EE:4C:3C:A4:5E:48
X509v3 Authority Key Identifier:
keyid:33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/i6CWENtAdnXqPwuX227uTDykXkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.192.0/21
Signature Algorithm: sha256WithRSAEncryption
14:c2:27:4b:ed:a0:09:77:b1:d2:5b:69:2e:41:df:a5:1d:97:
ab:16:cb:3a:e1:19:27:35:c0:8f:71:3f:2d:f1:c8:50:fe:26:
52:07:8d:25:e4:2e:e4:68:6e:b4:dd:c8:eb:60:89:45:7a:09:
be:07:22:c3:0a:9e:ea:4e:fb:d2:2a:63:34:5e:df:f7:b8:0f:
3d:5c:44:44:c0:c8:76:11:aa:dd:64:ab:bc:da:8d:f1:86:d6:
69:fd:08:b0:62:83:ab:14:58:89:b6:a2:f9:ae:7e:28:e9:69:
32:56:e1:39:79:b0:73:4a:d7:e8:b1:1d:a8:e4:1b:0f:66:68:
2e:82:ee:ae:15:8b:bb:b9:99:52:c1:ff:6e:26:0a:93:b1:a0:
de:c1:c9:37:2f:19:fd:b9:a9:5d:49:35:d8:da:34:fd:0a:65:
ac:94:be:83:b2:51:58:e2:da:6a:47:b4:01:79:4c:99:e5:5a:
7f:ce:c4:0d:a3:05:a7:15:3d:5b:27:fb:cf:45:58:a1:4d:24:
1a:82:7e:3e:55:4d:3a:27:5e:83:a1:0d:2d:07:d3:11:31:43:
cb:76:9e:2f:4d:c5:15:17:ea:5c:cd:94:3d:dd:df:3c:07:f4:
09:e7:1a:ca:ee:04:e8:7e:78:a6:e2:c6:1d:92:9c:07:7c:65:
1c:79:e1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:23 2025 by rpki-client