Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/MtOebLSNSemLqQH1Qdt6lKbCdQU.roa
File: MtOebLSNSemLqQH1Qdt6lKbCdQU.roa (raw, json)
Hash identifier: p2mZ95DJo3RCkhalV7XQwJkDag3/z20BD18MDcr1SRU=
Subject key identifier: 32:D3:9E:6C:B4:8D:49:E9:8B:A9:01:F5:41:DB:7A:94:A6:C2:75:05
Certificate issuer: /CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Certificate serial: 01942068318A056CB239F16684566C40481D
Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/MtOebLSNSemLqQH1Qdt6lKbCdQU.roa
Signing time: Wed 01 Jan 2025 05:48:06 +0000
ROA not before: Wed 01 Jan 2025 05:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209654
IP address blocks: 95.214.212.0/24 maxlen: 24
95.214.213.0/24 maxlen: 24
95.214.214.0/24 maxlen: 24
95.214.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:31:8a:05:6c:b2:39:f1:66:84:56:6c:40:48:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Validity
Not Before: Jan 1 05:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32d39e6cb48d49e98ba901f541db7a94a6c27505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:af:70:21:8a:49:5b:8a:7c:bd:9e:99:c3:96:
a4:4d:15:45:6a:2f:2e:2a:96:aa:8a:6b:67:1e:54:
7b:35:38:d3:16:97:fe:3b:b0:60:7a:a8:8d:ed:0e:
06:89:53:a1:5a:66:6f:86:9a:01:b3:00:01:1f:4a:
c3:17:aa:96:a2:ea:89:ff:88:7c:8b:69:92:a9:f7:
8a:71:df:fd:42:17:69:5b:c2:71:01:42:98:a9:96:
28:c2:f5:00:23:3b:42:7b:1a:70:12:38:0f:14:c8:
fa:b6:35:d5:db:da:27:57:01:04:f9:2d:f8:e5:7f:
cc:7f:00:b6:fd:0c:62:c3:8a:0f:06:ac:21:e2:64:
c2:38:38:6b:20:6b:67:63:61:7d:d5:e9:e5:f1:03:
4a:d3:53:bd:c6:32:fb:0d:7c:6c:6d:86:fa:b5:4b:
33:b6:0e:4f:1b:f1:d0:35:d0:3c:67:e0:a2:c4:a2:
fe:8f:c1:49:77:a9:cd:cd:18:f0:cd:7b:45:62:a3:
3e:a4:e6:91:0f:d5:4b:8f:b2:66:ef:02:28:86:2e:
b8:7f:6d:d7:83:03:e8:f4:da:f3:b4:89:e5:90:ae:
b6:cf:62:d5:88:3d:19:df:b7:35:b3:34:d9:39:7d:
88:0e:90:24:e6:cf:46:0f:7a:63:c2:68:98:47:0c:
a4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D3:9E:6C:B4:8D:49:E9:8B:A9:01:F5:41:DB:7A:94:A6:C2:75:05
X509v3 Authority Key Identifier:
keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/MtOebLSNSemLqQH1Qdt6lKbCdQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.212.0/22
Signature Algorithm: sha256WithRSAEncryption
14:1a:ea:cc:15:90:a7:ec:ff:98:e3:32:17:47:e9:70:16:e6:
fd:f4:0c:10:15:53:88:d8:54:2e:70:57:1a:98:78:0c:32:6a:
42:cf:98:93:57:08:8a:1b:0e:a2:fe:0b:94:c2:64:df:ed:6e:
2c:22:6f:d7:52:b6:e2:8f:b6:6b:58:a8:5b:94:c2:90:71:5b:
a7:74:12:5c:8b:97:da:d4:3b:9b:12:61:15:2b:9b:9c:04:60:
b3:e2:84:4b:9f:ec:15:a6:d6:c0:d9:c7:e9:42:90:aa:f8:07:
cd:50:ea:6e:12:13:d5:0f:63:24:34:11:39:19:e1:b5:3f:25:
ed:3c:af:79:b7:68:1a:30:3f:63:6e:9d:03:f3:b5:22:24:0c:
0d:3c:cf:33:f5:4b:92:75:f4:12:f2:40:f2:23:d4:aa:f3:4a:
b4:cb:69:fd:3a:2a:d3:50:ce:45:63:5f:3c:a3:22:ef:31:f5:
a3:5c:65:6f:52:91:22:ee:be:b4:d2:82:6f:99:bf:cc:2c:b2:
00:bb:3e:4d:5d:b5:e8:2e:9d:ff:19:b9:71:17:b2:71:37:1e:
08:ca:11:e4:19:51:38:fe:f4:d0:e8:92:c8:ed:0c:8d:28:33:
2e:c3:84:0a:c7:37:98:ce:0b:67:cb:1a:d2:f8:f8:5f:b5:67:
8a:4d:8f:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaDGKBWyyOfFmhFZsQEgdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZTc1NjZiYjViMTllNzAwZjQ4ZTI1ZTA3NTA2YzJmMjIy
ZGYzODQwHhcNMjUwMTAxMDU0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmQzOWU2Y2I0OGQ0OWU5OGJhOTAxZjU0MWRiN2E5NGE2YzI3NTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq9wIYpJW4p8vZ6Zw5akTRVFai8u
KpaqimtnHlR7NTjTFpf+O7BgeqiN7Q4GiVOhWmZvhpoBswABH0rDF6qWouqJ/4h8
i2mSqfeKcd/9QhdpW8JxAUKYqZYowvUAIztCexpwEjgPFMj6tjXV29onVwEE+S34
5X/MfwC2/Qxiw4oPBqwh4mTCODhrIGtnY2F91enl8QNK01O9xjL7DXxsbYb6tUsz
tg5PG/HQNdA8Z+CixKL+j8FJd6nNzRjwzXtFYqM+pOaRD9VLj7Jm7wIohi64f23X
gwPo9NrztInlkK62z2LViD0Z37c1szTZOX2IDpAk5s9GD3pjwmiYRwykeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDLTnmy0jUnpi6kB9UHbepSmwnUFMB8GA1UdIwQY
MBaAFDznVmu1sZ5wD0jiXgdQbC8iLfOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84NmZmNzctOTc3Mi00YjI4LWFhMTIt
ODlmZjA2Zjc5NjM1LzEvTXRPZWJMU05TZW1McVFIMVFkdDZsS2JDZFFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84NmZmNzctOTc3Mi00YjI4LWFhMTItODlmZjA2Zjc5NjM1
LzEvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCX9bUMA0G
CSqGSIb3DQEBCwUAA4IBAQAUGurMFZCn7P+Y4zIXR+lwFub99AwQFVOI2FQucFca
mHgMMmpCz5iTVwiKGw6i/guUwmTf7W4sIm/XUrbij7ZrWKhblMKQcVundBJci5fa
1DubEmEVK5ucBGCz4oRLn+wVptbA2cfpQpCq+AfNUOpuEhPVD2MkNBE5GeG1PyXt
PK95t2gaMD9jbp0D87UiJAwNPM8z9UuSdfQS8kDyI9Sq80q0y2n9OirTUM5FY188
oyLvMfWjXGVvUpEi7r600oJvmb/MLLIAuz5NXbXoLp3/GblxF7JxNx4IyhHkGVE4
/vTQ6JLI7QyNKDMuw4QKxzeYzgtnyxrS+PhftWeKTY87
-----END CERTIFICATE-----
Generated at Fri Apr 11 16:36:27 2025 by rpki-client