Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/4dueZjTQU4KssNdWr7GeVnq1Wp4.roa
File: 4dueZjTQU4KssNdWr7GeVnq1Wp4.roa (raw, json)
Hash identifier: YAJpBFnMPnsJC434M7SvWcfVTw+23UVmq5xEPZAj95E=
Subject key identifier: E1:DB:9E:66:34:D0:53:82:AC:B0:D7:56:AF:B1:9E:56:7A:B5:5A:9E
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 018CC3B684BD8D81DA16929C0E1E2874BA48
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/4dueZjTQU4KssNdWr7GeVnq1Wp4.roa
Signing time: Mon 01 Jan 2024 06:29:27 +0000
ROA not before: Mon 01 Jan 2024 06:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25436
IP address blocks: 188.68.7.0/24 maxlen: 24
95.85.82.0/24 maxlen: 24
95.181.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:84:bd:8d:81:da:16:92:9c:0e:1e:28:74:ba:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 06:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1db9e6634d05382acb0d756afb19e567ab55a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d2:e7:2f:73:d7:ca:5f:75:70:d5:30:37:ad:
8b:b2:ba:9c:16:b0:56:28:8e:4f:3e:90:6e:8a:9c:
85:7e:99:4f:58:af:12:6d:b3:4d:22:d6:47:c8:f5:
09:85:a9:44:d7:4d:ce:ae:eb:27:97:94:ec:d1:7e:
1a:c8:73:23:10:ab:83:d1:82:6a:0b:3f:72:b4:00:
69:c3:db:2c:71:fb:27:a1:f1:b5:26:f7:df:31:24:
ba:7d:7f:81:76:2f:f6:4c:2f:4a:4d:5a:86:fd:eb:
4d:36:17:9e:4b:cf:e9:61:c3:fd:6b:9e:10:b2:5d:
b4:c2:ed:7a:2f:83:b2:d3:fa:a1:90:cb:e0:cb:b8:
e9:04:33:d2:01:eb:8d:15:a5:a1:19:1f:6c:c1:4b:
ac:57:39:3b:41:89:58:29:4d:fd:d3:66:50:1e:ef:
44:87:db:f1:79:c1:58:63:31:20:c4:ac:89:e7:97:
35:8a:fb:ce:a5:a1:f7:8d:29:99:22:f6:36:b7:2b:
fe:b9:cf:41:09:b6:f7:4b:12:07:b7:4f:55:37:7f:
e6:11:8f:9c:58:20:0f:32:17:6c:ac:47:2f:c9:b5:
79:5c:8a:12:17:1a:2f:66:61:23:8f:2f:91:c6:59:
1e:b2:ac:66:c5:96:85:f7:59:0b:59:6e:a9:54:c9:
88:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DB:9E:66:34:D0:53:82:AC:B0:D7:56:AF:B1:9E:56:7A:B5:5A:9E
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/4dueZjTQU4KssNdWr7GeVnq1Wp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.82.0/24
95.181.145.0/24
188.68.7.0/24
Signature Algorithm: sha256WithRSAEncryption
02:45:a1:a8:0c:5c:dd:8b:26:fd:9f:61:1f:9c:89:e2:6c:e5:
70:8b:83:78:34:26:d4:3c:21:f3:bf:56:a2:94:17:a4:c9:1f:
53:e8:5e:83:96:a0:9d:4b:53:9f:a9:7e:e7:e1:49:e2:c7:8c:
97:2b:22:41:f5:81:a1:c0:f4:8b:6d:5a:60:a2:a8:b8:1c:81:
69:99:fe:9d:7a:a6:ed:0c:0f:32:0b:b5:95:87:63:98:8c:fd:
dc:67:ed:71:78:e6:49:4c:01:27:dd:9b:a9:f5:54:95:7f:f9:
29:7a:f6:ba:14:06:0f:74:51:e9:1a:c9:ec:02:3e:80:86:18:
2c:15:c3:b0:73:8d:c3:bb:4f:2a:92:44:24:55:d2:d0:ec:c0:
f4:47:ac:f7:e2:e2:1b:99:f7:95:3c:64:41:bd:d1:03:63:28:
90:dc:7c:f6:e5:e9:9f:cd:8f:87:3d:23:61:84:27:d8:61:b9:
31:44:f1:e8:d2:9f:28:fd:d0:6c:67:87:3d:96:fd:5a:af:3d:
ab:c5:dd:7c:5d:b7:7c:3e:c2:36:cc:79:0d:b5:d1:b8:51:98:
15:56:e9:5c:2a:f7:87:02:de:f0:09:aa:7f:58:47:d1:cf:86:
64:55:41:14:c7:7b:a4:1c:2d:e9:e9:a1:a2:11:5e:4a:d9:f6:
eb:af:f5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:04:58 2024 by rpki-client on console-fra.rpki-client.org