Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/3CK8R5d7t2Xwz5j3f2UZ2JVqgMY.roa
File: 3CK8R5d7t2Xwz5j3f2UZ2JVqgMY.roa (raw, json)
Hash identifier: eZLyg8C6Jj6PXZSKfSOpZJRtapT1qH/uD+OHoYN4GLY=
Subject key identifier: DC:22:BC:47:97:7B:B7:65:F0:CF:98:F7:7F:65:19:D8:95:6A:80:C6
Certificate issuer: /CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Certificate serial: 018CC6B93886F9C9185AD078CC90A447CCF9
Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/3CK8R5d7t2Xwz5j3f2UZ2JVqgMY.roa
Signing time: Mon 01 Jan 2024 20:31:16 +0000
ROA not before: Mon 01 Jan 2024 20:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209654
IP address blocks: 95.214.213.0/24 maxlen: 24
95.214.212.0/24 maxlen: 24
95.214.215.0/24 maxlen: 24
95.214.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:38:86:f9:c9:18:5a:d0:78:cc:90:a4:47:cc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Validity
Not Before: Jan 1 20:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc22bc47977bb765f0cf98f77f6519d8956a80c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:73:49:0b:0f:b5:98:e4:c0:e1:c5:7e:69:
2c:75:4e:b6:f6:44:27:a7:df:44:f8:21:58:3a:4f:
71:06:7b:78:10:7a:56:e3:34:85:64:e2:28:67:c6:
4e:2d:c7:94:9d:59:7c:ec:e8:1b:63:ae:9c:90:10:
08:98:b4:9c:7e:a4:13:30:bd:12:39:fb:5d:c0:e2:
9c:1a:97:43:37:0d:a1:c2:bd:5d:18:74:96:83:d3:
62:1c:a0:6d:8a:3e:bd:4f:5b:c2:f8:a3:24:1c:91:
3c:51:e1:73:e0:8c:30:d4:d7:48:33:25:f9:35:a6:
3e:58:b4:6a:11:a2:06:90:46:ef:22:3d:ea:82:5a:
c3:dc:40:78:3e:bc:39:55:d8:4c:22:70:fe:c3:bb:
cb:ab:07:16:77:b5:a0:b9:53:86:5f:b8:24:9b:47:
be:78:bc:dd:6e:ff:ca:de:b2:5a:ed:8e:f7:57:bf:
01:62:6b:15:eb:22:76:79:b4:c8:0a:d7:be:62:39:
85:0c:13:82:58:38:89:72:f5:7f:31:f5:93:c8:06:
8d:84:95:31:35:bd:e4:61:2a:36:3b:f4:52:61:ad:
08:18:65:12:39:72:fa:ff:a5:c7:15:8c:b3:fb:a6:
79:87:ec:00:71:71:42:32:d1:27:20:de:31:74:02:
e9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:22:BC:47:97:7B:B7:65:F0:CF:98:F7:7F:65:19:D8:95:6A:80:C6
X509v3 Authority Key Identifier:
keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/3CK8R5d7t2Xwz5j3f2UZ2JVqgMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.212.0/22
Signature Algorithm: sha256WithRSAEncryption
44:41:d6:df:3a:6b:b3:59:37:2d:0c:69:6e:6b:da:3f:76:16:
0b:18:06:3a:f3:4b:34:fb:7b:2a:22:b9:7f:aa:29:0a:cf:8c:
54:87:bd:d5:81:bb:de:4c:7a:a0:f9:1c:ab:97:76:f6:48:2e:
53:61:a3:5f:b8:c4:5e:96:76:bb:5a:1c:a6:e8:5f:93:44:4e:
de:59:f9:e4:cc:98:24:42:c3:47:87:90:33:9e:3e:2f:d8:db:
a7:6a:59:ce:b4:b2:2b:49:be:27:71:69:4c:c2:a5:6b:49:4d:
d2:22:bd:84:48:67:c0:1d:06:46:f9:d0:da:84:18:c1:1f:f5:
a2:3d:51:fe:2c:92:83:71:29:65:7a:de:a6:21:d1:e7:70:d3:
02:12:69:bf:69:b0:7f:50:04:87:5f:1a:b8:d1:93:42:b0:97:
41:9f:93:f8:9e:ba:d8:d6:55:3a:1f:36:ac:0a:88:c4:b7:fd:
67:77:a0:a0:3c:88:25:a3:3a:99:76:c8:d0:4e:d9:41:7f:c2:
b5:01:2f:1e:4f:af:21:03:c1:df:d2:fa:3a:f4:37:e9:6e:48:
1d:75:a5:ce:6d:ae:25:ac:21:88:7d:d9:99:37:ff:34:0d:7e:
a8:0c:05:44:65:92:23:c5:07:b8:29:33:e3:ce:6c:63:db:ec:
05:e0:d1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:11:13 2024 by rpki-client on console-ams.rpki-client.org