Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/ASQCV7ISCNA9khNapLDcQfxE_RE.roa
File: ASQCV7ISCNA9khNapLDcQfxE_RE.roa (raw, json)
Hash identifier: RCz+qng+VMmmzK1urenXb/2pz+f0lhdBPpL4c93pWx8=
Subject key identifier: 01:24:02:57:B2:12:08:D0:3D:92:13:5A:A4:B0:DC:41:FC:44:FD:11
Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial: 01924D2B2F9E64D841159BAA336452F74815
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/ASQCV7ISCNA9khNapLDcQfxE_RE.roa
Signing time: Wed 02 Oct 2024 12:18:48 +0000
ROA not before: Wed 02 Oct 2024 12:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209788
IP address blocks: 95.183.44.0/23 maxlen: 24
95.183.46.0/24 maxlen: 24
188.68.80.0/24 maxlen: 24
188.68.90.0/24 maxlen: 24
188.68.91.0/24 maxlen: 24
188.68.92.0/24 maxlen: 24
188.68.93.0/24 maxlen: 24
192.54.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4d:2b:2f:9e:64:d8:41:15:9b:aa:33:64:52:f7:48:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Validity
Not Before: Oct 2 12:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01240257b21208d03d92135aa4b0dc41fc44fd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:15:85:ca:31:2c:8c:67:23:65:5f:d1:a7:15:
64:e6:83:84:44:a0:e9:73:95:73:f3:b6:74:05:da:
5b:6a:41:a1:a2:81:85:44:72:57:00:4e:81:cd:0f:
9b:b3:9a:02:e0:60:1e:cc:ee:23:2d:b2:4d:ab:89:
1b:17:12:e9:b4:18:4e:db:3d:3f:89:51:10:d8:a8:
d7:c1:28:c2:3d:0a:ed:39:2f:e0:2d:6e:b0:e9:86:
4d:cf:eb:44:63:4f:b6:2b:82:ad:0f:3d:6d:34:ec:
a9:90:24:e6:43:98:0a:a5:5b:b3:b7:43:06:d2:cf:
6b:81:0b:2b:80:20:e0:4f:10:af:dd:7b:44:3d:f8:
64:e0:f2:62:fb:70:04:14:86:56:aa:0b:7c:8c:f3:
ec:f8:71:00:6e:71:f8:d0:0a:47:ae:cc:1c:88:88:
1e:56:25:08:fa:2b:da:bf:65:2c:91:28:03:da:76:
c5:07:ad:6b:1d:d2:0b:19:01:0f:82:30:c9:79:53:
6f:ac:28:3b:7d:31:d4:91:1f:0a:b0:7c:1c:56:82:
57:64:2c:2b:dd:96:c8:17:83:73:d6:3c:37:3e:48:
a2:8d:7b:10:c9:d2:4f:49:e7:29:a2:20:d1:f6:ad:
d6:f2:83:a5:2f:f5:d6:b0:a0:35:a4:28:18:d2:77:
e4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:24:02:57:B2:12:08:D0:3D:92:13:5A:A4:B0:DC:41:FC:44:FD:11
X509v3 Authority Key Identifier:
keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/ASQCV7ISCNA9khNapLDcQfxE_RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.183.44.0-95.183.46.255
188.68.80.0/24
188.68.90.0-188.68.93.255
192.54.76.0/24
Signature Algorithm: sha256WithRSAEncryption
78:7e:2b:9b:48:c4:bc:7e:7b:38:96:a3:0a:6f:c7:45:9a:8f:
41:71:e4:2f:29:e4:a2:a0:30:d5:a4:dc:63:0c:b4:0f:9b:f9:
1e:78:d1:04:a8:30:93:ff:c8:14:03:22:9e:67:81:33:bc:e0:
6b:6f:26:f6:bd:b7:dd:79:4e:57:13:17:30:bd:97:ce:d5:63:
4e:ce:d8:f3:ad:0f:73:2c:57:24:bf:38:13:d9:3e:cc:6a:61:
51:f9:24:38:d4:61:ff:f3:02:e1:74:17:c5:32:b2:47:8f:9a:
fc:d6:df:3e:2a:06:34:2d:c3:c0:52:96:3e:40:03:a0:36:aa:
dc:34:02:07:6f:c4:ab:70:20:03:bc:9f:1d:bc:d3:82:12:9c:
ee:a0:c3:20:b1:60:9d:f5:dc:77:62:ac:ec:08:20:f2:da:87:
29:29:89:37:ae:f4:ca:08:fa:23:9a:d8:cb:54:aa:fc:52:04:
f5:7b:37:84:9a:00:cf:e8:27:13:e2:2a:f1:82:72:40:05:0f:
7b:d8:b1:1c:57:1f:62:f6:8d:39:7c:6e:79:15:ba:7e:ac:e4:
47:1e:3e:03:eb:37:68:f1:2b:e8:17:3f:05:42:da:57:81:9c:
5c:ba:29:56:0c:4d:10:f7:29:b8:f9:d2:e7:32:8b:c7:57:c3:
57:4d:50:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:38:53 2024 by rpki-client on console-ams.rpki-client.org