Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mNYeH5R-v2wQ8LTX75aktl3Y3I4.roa
File: mNYeH5R-v2wQ8LTX75aktl3Y3I4.roa (raw, json)
Hash identifier: 2u2gdg/oWn0/qa7VdHC5tDAmi0vDctPTrDj7Mqz2lSs=
Subject key identifier: 98:D6:1E:1F:94:7E:BF:6C:10:F0:B4:D7:EF:96:A4:B6:5D:D8:DC:8E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A4186D6F0B31A42FB18182E7885AF
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mNYeH5R-v2wQ8LTX75aktl3Y3I4.roa
Signing time: Tue 02 Jan 2024 12:33:35 +0000
ROA not before: Tue 02 Jan 2024 12:33:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204671
IP address blocks: 95.47.236.0/24 maxlen: 24
95.47.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:41:86:d6:f0:b3:1a:42:fb:18:18:2e:78:85:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98d61e1f947ebf6c10f0b4d7ef96a4b65dd8dc8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f0:2b:87:f3:06:12:43:74:0a:0c:85:92:a6:
83:18:72:f5:f2:bd:cd:e8:09:dd:72:76:5b:4f:cf:
cc:3a:6c:90:46:82:c3:a9:ff:43:37:71:89:b5:f0:
98:a8:ab:81:f0:06:3a:f5:88:4c:51:bd:fe:58:41:
97:cd:d5:30:eb:71:eb:01:7a:5b:a2:a7:46:05:ba:
72:d0:5c:25:a3:70:f7:a4:85:94:35:99:76:63:53:
4e:ac:44:ef:b9:12:0d:b5:eb:f1:f9:a7:6e:c3:75:
1e:be:1d:5f:2b:3b:c9:0a:d5:17:59:d1:30:11:e7:
66:3c:63:7b:16:b8:4c:49:fd:00:ac:8f:e6:73:36:
2d:c3:ff:a5:e4:f4:70:6e:cb:2b:f1:f9:a2:7c:e9:
ae:a0:8d:16:32:68:a4:85:b1:f2:83:0c:a9:2c:20:
5e:ab:12:5d:57:96:51:1a:b5:10:dc:99:9a:fc:0c:
fe:0a:ea:f2:49:1a:b4:a9:e5:4a:fd:b4:3c:7b:a5:
50:bc:ee:56:d8:3e:c1:a5:34:32:c6:b0:78:cd:c6:
d3:04:43:7b:26:31:be:f8:b3:18:ce:2f:f6:54:c1:
f4:c3:ee:6d:09:78:0d:4b:55:9e:e3:e3:54:f5:be:
27:74:7f:27:33:66:c5:1f:29:82:e1:e1:35:4e:a1:
f6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D6:1E:1F:94:7E:BF:6C:10:F0:B4:D7:EF:96:A4:B6:5D:D8:DC:8E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mNYeH5R-v2wQ8LTX75aktl3Y3I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.173.0/24
95.47.236.0/24
Signature Algorithm: sha256WithRSAEncryption
21:9f:08:93:4d:55:1f:52:52:74:dc:b0:8f:d8:7c:24:0e:8e:
53:81:7e:79:e9:91:10:11:5e:06:61:f9:e9:c3:6d:51:58:1b:
7a:bc:d6:0e:18:32:60:bc:95:b3:0e:46:62:6a:46:8a:70:70:
70:dc:43:55:9c:ea:7a:2e:37:c1:58:11:5a:4e:12:02:91:cd:
6d:92:2d:6e:12:a0:29:63:9b:6e:4d:f4:ad:df:80:c5:82:2c:
aa:b8:96:2a:c7:96:26:eb:db:9a:f7:a2:d3:38:ac:21:a4:cc:
e3:9e:37:19:fb:14:f4:8b:ee:ca:c1:e5:b7:a6:7d:05:1b:07:
6e:38:74:e8:14:f3:2a:b1:59:5d:6b:4f:e2:e8:b9:47:6d:6a:
83:f6:da:0b:44:4f:df:b6:10:74:0d:90:53:ca:20:41:6e:2b:
69:36:32:d9:81:c2:35:c1:a3:1c:29:5b:b2:f2:df:66:ee:36:
2b:c6:c6:4b:85:63:06:a8:38:2d:f0:48:7e:a3:21:08:c8:c5:
dd:e6:16:7a:a0:97:02:a2:9b:13:13:c9:0b:74:37:2d:3c:f0:
1b:29:44:d9:1e:f4:5f:6d:c2:23:e7:c0:f4:2d:de:dd:d4:58:
22:fb:fc:2e:d4:89:bf:02:db:79:71:e0:d6:ba:7a:fb:23:73:
9b:56:c0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:46:12 2024 by rpki-client on console-fra.rpki-client.org