Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/_WDZ5Y0ialc-WG-7LUM4xmwScMU.roa
File: _WDZ5Y0ialc-WG-7LUM4xmwScMU.roa (raw, json)
Hash identifier: c90O3XcX9SDa4i8PaggOvrl5hZMS3/rpByWQHdyayQ8=
Subject key identifier: FD:60:D9:E5:8D:22:6A:57:3E:58:6F:BB:2D:43:38:C6:6C:12:70:C5
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 018CC8DE68EB05A5F8F5E4781AB499D7301E
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/_WDZ5Y0ialc-WG-7LUM4xmwScMU.roa
Signing time: Tue 02 Jan 2024 06:31:08 +0000
ROA not before: Tue 02 Jan 2024 06:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48391
IP address blocks: 95.81.84.0/23 maxlen: 24
95.81.86.0/24 maxlen: 24
95.81.93.0/24 maxlen: 24
95.81.92.0/24 maxlen: 24
95.81.92.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:68:eb:05:a5:f8:f5:e4:78:1a:b4:99:d7:30:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: Jan 2 06:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd60d9e58d226a573e586fbb2d4338c66c1270c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:11:ed:1a:00:30:77:f5:ba:17:4c:2e:26:a2:
34:54:e4:ef:d9:64:fb:42:ce:c4:a6:1a:06:e7:6c:
ea:3a:0b:3a:a1:07:f3:3c:63:aa:7e:82:ae:0b:8a:
df:8c:a9:51:a0:a0:e9:0e:9a:fa:72:76:b0:1f:a3:
f7:e3:b5:a4:06:7b:1f:e5:61:22:2d:5a:79:9e:31:
b8:df:69:94:81:a0:6d:5a:75:6b:27:fc:dc:66:57:
5d:1b:84:8a:58:fc:2a:8b:c0:b1:d9:53:2c:ec:76:
36:16:dc:38:b4:8c:8b:2d:bf:ef:6d:1a:1f:2e:18:
34:b5:dc:34:eb:91:d8:00:82:c6:37:0c:dc:2e:12:
32:df:bb:79:e9:df:d3:fb:94:42:48:c2:2b:30:ac:
29:fe:60:89:80:76:08:44:ce:07:5b:5c:c2:47:10:
c9:74:07:ad:3e:e0:77:ef:a0:45:9f:58:e6:64:2a:
88:e7:42:cb:4e:15:5d:99:aa:87:6e:01:e1:80:ca:
41:2b:01:b3:bf:1f:de:42:53:e3:7a:3f:1f:e7:08:
88:08:cf:d6:5a:96:90:76:65:80:9e:fc:15:34:3c:
f5:52:86:7e:af:aa:23:56:5e:78:ea:67:49:ef:8b:
a0:c8:41:8e:ac:74:6b:a9:ea:b1:3e:02:22:7a:5c:
40:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:60:D9:E5:8D:22:6A:57:3E:58:6F:BB:2D:43:38:C6:6C:12:70:C5
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/_WDZ5Y0ialc-WG-7LUM4xmwScMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.84.0-95.81.86.255
95.81.92.0/23
Signature Algorithm: sha256WithRSAEncryption
26:ca:19:73:9a:f3:4f:8a:7b:da:37:bb:5d:02:a5:e5:93:2c:
b3:e9:d3:1d:78:be:04:2f:3f:55:9a:08:cb:ba:4b:79:4e:ba:
c8:ab:e2:3d:62:73:57:1e:40:1f:7f:e5:d9:7d:69:91:1b:00:
4a:d1:d8:48:29:42:97:6c:71:77:01:4d:52:4c:a7:5f:76:4e:
90:70:ce:81:70:60:2d:52:80:1d:bd:ab:56:64:1a:f1:bb:0b:
5e:fa:a5:c7:36:b5:55:3b:22:3d:13:20:22:4f:06:3d:42:c1:
ae:6e:ee:01:67:78:dc:c0:11:e3:4d:bb:fb:c7:f3:9f:2a:ff:
be:e0:52:69:f6:1c:83:89:32:34:a4:cf:be:a9:00:65:2b:eb:
28:00:a0:48:d6:22:bf:f0:1b:a5:8d:08:33:21:6c:6c:d5:3b:
f7:bc:24:c8:dc:b2:2e:dc:91:fc:ff:c2:0a:77:eb:12:51:33:
7a:e8:aa:6d:f8:0b:e4:1d:67:85:ff:9a:5b:a7:80:e9:79:a9:
cc:22:41:2c:05:db:59:cc:68:51:27:b2:a3:14:ae:cc:e0:7c:
91:c0:00:8e:8e:55:e2:9c:5a:1c:dc:5e:93:40:8c:ca:56:98:
24:c9:65:8c:f8:9a:74:4c:50:ce:75:8e:b5:cd:6c:28:29:c6:
2f:be:fa:08
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYzI3mjrBaX49eR4GrSZ1zAeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MmVkMDkwYWNmN2M4MjlhMjJiYmZiZTJiMGU5OThjZDIw
YWQ4MjYwHhcNMjQwMTAyMDYzMTA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDYwZDllNThkMjI2YTU3M2U1ODZmYmIyZDQzMzhjNjZjMTI3MGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxHtGgAwd/W6F0wuJqI0VOTv2WT7
Qs7EphoG52zqOgs6oQfzPGOqfoKuC4rfjKlRoKDpDpr6cnawH6P347WkBnsf5WEi
LVp5njG432mUgaBtWnVrJ/zcZlddG4SKWPwqi8Cx2VMs7HY2Ftw4tIyLLb/vbRof
Lhg0tdw065HYAILGNwzcLhIy37t56d/T+5RCSMIrMKwp/mCJgHYIRM4HW1zCRxDJ
dAetPuB376BFn1jmZCqI50LLThVdmaqHbgHhgMpBKwGzvx/eQlPjej8f5wiICM/W
WpaQdmWAnvwVNDz1UoZ+r6ojVl546mdJ74ugyEGOrHRrqeqxPgIielxAbwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFP1g2eWNImpXPlhvuy1DOMZsEnDFMB8GA1UdIwQY
MBaAFCcu0JCs98gpoiu/visOmYzSCtgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9hMTVmOTYtZWMxOC00NjQ0LTg5YjMt
YWNjMjJiYjRkY2VkLzEvX1dEWjVZMGlhbGMtV0ctN0xVTTR4bXdTY01VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9hMTVmOTYtZWMxOC00NjQ0LTg5YjMtYWNjMjJiYjRkY2Vk
LzEvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAJfUVQD
BABfUVYDBAFfUVwwDQYJKoZIhvcNAQELBQADggEBACbKGXOa80+Ke9o3u10CpeWT
LLPp0x14vgQvP1WaCMu6S3lOusir4j1ic1ceQB9/5dl9aZEbAErR2EgpQpdscXcB
TVJMp192TpBwzoFwYC1SgB29q1ZkGvG7C176pcc2tVU7Ij0TICJPBj1Cwa5u7gFn
eNzAEeNNu/vH858q/77gUmn2HIOJMjSkz76pAGUr6ygAoEjWIr/wG6WNCDMhbGzV
O/e8JMjcsi7ckfz/wgp36xJRM3roqm34C+QdZ4X/mlungOl5qcwiQSwF21nMaFEn
sqMUrszgfJHAAI6OVeKcWhzcXpNAjMpWmCTJZYz4mnRMUM51jrXNbCgpxi+++gg=
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:21:47 2024 by rpki-client on console-fra.rpki-client.org