Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/XYmQkUIZmlIHFM7a7sfXMTVHPlo.roa
File: XYmQkUIZmlIHFM7a7sfXMTVHPlo.roa (raw, json)
Hash identifier: Vv6dDa0c9clcgan78eUup+CaL1iE1E1LYY/XaNNwH84=
Subject key identifier: 5D:89:90:91:42:19:9A:52:07:14:CE:DA:EE:C7:D7:31:35:47:3E:5A
Certificate issuer: /CN=1c5c72ee422c61667e3056de6b3ffce034305175
Certificate serial: 018CC3B67A254886D9B620951735EDCECC98
Authority key identifier: 1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/XYmQkUIZmlIHFM7a7sfXMTVHPlo.roa
Signing time: Mon 01 Jan 2024 06:29:24 +0000
ROA not before: Mon 01 Jan 2024 06:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35645
IP address blocks: 95.66.192.0/22 maxlen: 22
95.66.196.0/23 maxlen: 23
95.66.202.0/23 maxlen: 23
95.66.200.0/23 maxlen: 23
95.66.206.0/23 maxlen: 23
95.66.204.0/23 maxlen: 23
95.66.208.0/22 maxlen: 22
95.66.212.0/22 maxlen: 22
95.66.216.0/22 maxlen: 22
95.66.222.0/23 maxlen: 23
95.66.224.0/23 maxlen: 23
95.66.220.0/23 maxlen: 23
95.66.227.0/24 maxlen: 24
95.66.230.0/23 maxlen: 23
95.66.228.0/23 maxlen: 23
95.66.237.0/24 maxlen: 24
95.66.240.0/22 maxlen: 22
95.66.238.0/23 maxlen: 23
95.66.160.0/19 maxlen: 19
95.66.244.0/24 maxlen: 24
95.66.246.0/24 maxlen: 24
95.66.245.0/24 maxlen: 24
95.66.250.0/23 maxlen: 23
95.66.252.0/23 maxlen: 23
95.66.248.0/23 maxlen: 23
95.66.247.0/24 maxlen: 24
95.66.254.0/23 maxlen: 23
95.66.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:7a:25:48:86:d9:b6:20:95:17:35:ed:ce:cc:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5c72ee422c61667e3056de6b3ffce034305175
Validity
Not Before: Jan 1 06:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d89909142199a520714cedaeec7d73135473e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:34:f3:f5:c3:36:d2:e7:63:cb:01:9d:aa:
91:b0:32:94:2a:05:9e:e1:64:24:c4:bf:1e:bf:f4:
0d:d3:d0:13:05:d3:cd:f2:d1:2d:60:3b:21:d8:cb:
f7:27:f4:02:34:48:1a:04:4e:1d:78:d2:3a:61:ec:
f7:bc:d7:e8:95:c4:0e:7f:fe:a8:a7:af:2f:b1:a2:
d3:b4:be:b0:15:a8:3f:6d:6b:78:a0:18:7a:fc:83:
85:05:02:91:ba:6a:f5:76:3b:fe:4c:91:a9:6e:8b:
d6:19:31:92:ea:5b:47:1e:3f:85:67:f8:f7:03:a8:
4a:ba:cf:d0:99:f9:3e:f2:89:ee:8d:ad:d1:af:a0:
d6:57:e6:06:50:8b:9f:6d:01:f2:a9:fc:12:bc:6e:
4c:d0:a2:89:4e:30:53:7e:5c:f0:fa:1a:13:e8:22:
d3:77:52:bc:34:c5:89:97:1a:6d:cd:33:b3:2c:00:
9f:32:af:88:b9:2c:68:fb:f4:f2:c3:6f:f2:be:92:
ba:da:7c:61:7a:fd:e2:f2:1f:30:89:70:da:b6:b7:
53:78:65:9f:95:22:72:0a:c0:33:41:96:47:09:00:
17:b1:9f:1b:7e:2c:92:b0:d7:f7:ad:af:ca:8a:a5:
62:2a:4d:4c:ae:a7:4e:8a:8e:da:51:b4:00:19:38:
eb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:89:90:91:42:19:9A:52:07:14:CE:DA:EE:C7:D7:31:35:47:3E:5A
X509v3 Authority Key Identifier:
keyid:1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/XYmQkUIZmlIHFM7a7sfXMTVHPlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.66.128.0-95.66.197.255
95.66.200.0-95.66.225.255
95.66.227.0-95.66.231.255
95.66.237.0-95.66.255.255
Signature Algorithm: sha256WithRSAEncryption
51:2e:4f:15:9c:64:b6:4c:46:6b:72:87:8a:40:1c:7c:21:9e:
62:08:76:5d:b7:d2:be:29:c3:a2:c3:e6:e4:ff:08:d8:3c:1a:
ff:d1:22:9b:62:14:bc:ac:11:54:95:fb:38:44:f4:96:3f:8e:
3f:23:e8:e6:95:41:74:9a:90:c2:ef:74:76:92:69:ba:45:3c:
99:c6:5b:1a:92:ec:46:cc:1f:37:07:81:2c:f7:25:6e:9c:2c:
21:88:3f:7c:c3:7e:ef:e3:a2:fd:10:cc:fe:d8:e9:c3:01:0b:
33:9d:b2:dd:3a:05:18:6f:d2:0d:68:45:ee:41:99:19:a7:80:
87:d7:04:dc:42:c1:ed:e2:b2:54:69:e7:13:49:be:6f:99:ca:
bc:a4:58:08:e6:82:aa:7e:70:fc:5c:7d:6c:55:e2:f8:3c:4c:
65:d9:24:2c:df:a6:cb:03:3e:76:c6:bc:a1:9d:92:57:44:1e:
b4:2a:a5:46:53:4b:11:d9:65:06:64:b5:35:63:59:01:99:51:
b3:1f:52:88:8d:22:8a:15:1e:92:73:a0:89:87:a3:4c:61:5f:
33:0d:94:95:7b:d7:be:91:f6:c1:28:a4:4d:43:a7:31:28:fd:
25:f5:f7:b1:32:36:26:ce:f7:0f:e3:ed:a5:29:28:15:90:6b:
b8:a7:4f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 07:59:13 2024 by rpki-client on console-ams.rpki-client.org