Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/8IuHfo6E4cUTGshNOClhHiJp1mc.roa
File: 8IuHfo6E4cUTGshNOClhHiJp1mc.roa (raw, json)
Hash identifier: 0QqNKDmAWWhyG+T2k2hVqnE/bjRv0Atu7GHaE14p2U0=
Subject key identifier: F0:8B:87:7E:8E:84:E1:C5:13:1A:C8:4D:38:29:61:1E:22:69:D6:67
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 018CC492C37E6FD79F37814EA8C4A6076D4D
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/8IuHfo6E4cUTGshNOClhHiJp1mc.roa
Signing time: Mon 01 Jan 2024 10:30:01 +0000
ROA not before: Mon 01 Jan 2024 10:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61996
IP address blocks: 95.169.217.0/24 maxlen: 24
95.169.215.0/24 maxlen: 24
95.169.216.0/24 maxlen: 24
95.169.214.0/24 maxlen: 24
95.169.220.0/24 maxlen: 24
95.169.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:c3:7e:6f:d7:9f:37:81:4e:a8:c4:a6:07:6d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 1 10:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f08b877e8e84e1c5131ac84d3829611e2269d667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:20:7c:47:67:99:d9:04:3e:9f:bd:ea:27:3d:
f8:c1:89:51:13:04:dd:21:3f:be:e4:f5:f9:a8:70:
04:ad:1a:f4:18:26:9f:b3:1d:d0:8e:df:44:6c:2d:
43:76:82:b1:69:2d:f0:aa:9b:de:cd:85:59:37:4c:
8c:1e:2d:37:55:8d:28:b9:cc:0d:61:0f:1f:04:87:
0c:b6:18:42:e2:6d:59:d2:fb:da:59:b6:aa:f6:db:
60:04:06:dc:8d:2c:67:a0:2b:9b:0a:5f:e3:73:62:
f4:e1:6f:b1:b6:7a:1f:cc:11:4c:c5:fd:82:8a:d3:
22:fe:4b:39:d5:3d:0e:91:69:84:9e:f5:7b:a6:30:
91:e1:0c:15:25:d4:3f:cc:0b:ae:37:b8:a8:71:30:
ab:1b:b9:8e:ad:84:32:98:67:44:dd:93:a4:98:a5:
c9:d3:56:3e:75:21:87:68:d5:cd:d2:38:ef:72:69:
a9:a1:35:fb:b9:01:6e:aa:a6:62:97:2d:5e:ad:d7:
f2:cf:6c:d9:0c:ee:88:89:eb:18:e2:4c:84:de:03:
33:47:89:9a:df:0a:91:1c:cc:ff:c7:74:3e:ae:1d:
64:de:ba:83:02:34:f0:25:b3:df:93:4d:6f:05:06:
ba:ed:5d:7a:21:27:16:57:25:40:b0:ca:80:01:a4:
87:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8B:87:7E:8E:84:E1:C5:13:1A:C8:4D:38:29:61:1E:22:69:D6:67
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/8IuHfo6E4cUTGshNOClhHiJp1mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.214.0-95.169.217.255
95.169.220.0/24
95.169.223.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d0:3f:12:8d:4c:ce:59:e2:3a:f5:98:72:da:7e:a3:ea:78:
b6:9e:22:38:3d:2a:db:36:5f:3d:03:33:d4:fe:1a:c0:e1:5c:
84:66:18:05:92:7b:47:f0:9b:70:02:1c:92:03:e6:d1:1f:4d:
23:23:4a:bb:ba:68:3c:dd:a5:28:49:54:4f:ef:0d:f0:37:8f:
71:68:92:f2:f4:46:13:0d:fc:c0:31:d6:a6:33:07:e3:b5:df:
c6:9c:9f:ba:9e:50:a7:7e:b0:43:bc:44:3c:62:0e:14:42:57:
67:00:81:d5:38:64:85:96:8a:2b:dc:6f:fd:b3:7d:46:41:ec:
f6:d4:cc:e7:b7:1a:1e:78:f4:2a:8a:78:09:b5:71:96:e2:29:
95:97:e6:4f:ae:86:58:f5:81:a7:29:63:f7:3b:5e:62:94:6e:
5e:01:16:ae:ac:f5:b3:e6:71:4d:9b:c1:cb:7e:13:4f:03:20:
af:95:db:a7:c1:45:7d:af:06:08:36:2f:ee:fb:4d:90:c2:47:
c2:e7:34:9a:98:e8:e0:41:48:ce:8d:a6:f0:41:f8:09:12:ae:
98:08:19:e1:e1:a1:9c:d9:f9:6c:d3:0f:31:c0:65:e8:63:35:
a0:98:cb:0f:dc:5d:87:2c:45:0b:59:28:a5:26:35:24:4d:98:
ef:69:a3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 11:46:39 2024 by rpki-client on console-fra.rpki-client.org