Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/4vWmLFxelbtvAFMiwyj3fTtkmkA.roa
File: 4vWmLFxelbtvAFMiwyj3fTtkmkA.roa (raw, json)
Hash identifier: PTafMehejiXdWmP96IP8BDprwrzFDVg2/EqwbTKIgwM=
Subject key identifier: E2:F5:A6:2C:5C:5E:95:BB:6F:00:53:22:C3:28:F7:7D:3B:64:9A:40
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 018CC4924EE462E81996322E6E8ABF2E74D5
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/4vWmLFxelbtvAFMiwyj3fTtkmkA.roa
Signing time: Mon 01 Jan 2024 10:29:31 +0000
ROA not before: Mon 01 Jan 2024 10:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51614
IP address blocks: 95.158.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 07:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:4e:e4:62:e8:19:96:32:2e:6e:8a:bf:2e:74:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 1 10:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2f5a62c5c5e95bb6f005322c328f77d3b649a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:9d:0f:bc:eb:4e:5e:b6:e8:c2:49:fd:ad:
39:bf:4b:fc:99:53:e7:2e:19:87:9a:67:04:14:1f:
67:a6:e2:88:f4:35:0e:84:7f:6d:f9:b0:f9:8f:43:
bf:b6:38:58:83:11:fa:ec:6d:70:b5:bc:9c:1d:24:
fe:47:21:f6:b8:78:6a:b6:5e:77:4b:b0:39:97:5d:
f1:0d:48:8f:44:35:ec:19:ab:c2:b4:4d:c1:5d:b9:
a3:e9:3e:3e:2e:5a:e9:4b:fc:b6:df:56:55:d6:fd:
25:4a:ff:f2:02:1f:48:ea:61:27:9a:a3:17:d6:7c:
1d:72:b4:e9:01:7a:d4:22:fb:55:f9:de:93:52:92:
4c:87:9b:2a:91:e0:f0:3d:44:a6:5b:41:c7:86:eb:
a9:09:22:c4:e9:c7:81:98:40:72:06:69:da:c2:60:
0c:c5:a1:2a:40:a7:4d:f3:b0:15:d7:3a:db:8d:60:
e4:ec:6f:3f:43:92:13:fc:2f:36:fb:0d:07:15:62:
a9:e3:07:4a:9f:16:a5:59:1f:3b:a5:6d:e8:3b:c0:
e8:26:b9:b4:aa:7d:42:e4:59:ed:39:4c:7f:1c:f7:
f6:33:3e:74:d0:61:41:0c:18:e8:a3:57:8b:32:89:
3e:56:f8:b1:56:4f:6b:cd:e5:43:38:b0:a5:5e:d0:
68:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F5:A6:2C:5C:5E:95:BB:6F:00:53:22:C3:28:F7:7D:3B:64:9A:40
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/4vWmLFxelbtvAFMiwyj3fTtkmkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.158.147.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:da:01:0f:49:43:b7:ce:a2:bc:d3:5e:66:80:38:8f:26:a4:
5c:6e:14:12:1a:9c:40:8b:af:04:68:f3:e4:b0:76:22:9f:35:
d2:72:4e:0b:78:cb:3d:07:d3:23:25:bd:96:c6:38:21:56:dd:
76:56:05:d4:70:28:87:74:66:29:c6:c3:91:81:af:e4:2b:15:
55:0d:43:b9:73:69:45:bd:06:2e:98:28:95:b1:08:8f:6d:b7:
39:34:f1:ee:a3:73:df:e6:a7:64:55:dc:84:af:d6:76:01:b7:
e4:18:ee:1b:3e:e7:00:ca:74:6c:86:18:f2:3b:91:91:70:0c:
80:13:c3:42:76:95:dc:b9:85:2a:f3:5f:f4:68:88:74:e6:6f:
7a:cd:8f:c1:fa:82:29:45:1d:29:ea:1b:d2:4f:16:3f:6e:f2:
42:6e:66:df:65:96:90:e0:02:47:5e:90:e2:e2:bd:6f:8e:7d:
42:c5:ed:a6:28:6f:40:78:5a:bf:a2:a9:8e:c7:2b:59:1e:52:
9a:ff:70:c4:6f:55:28:ca:12:91:55:47:df:d6:8b:07:11:98:
62:29:aa:5b:9f:a1:2a:12:33:4d:39:01:79:77:40:43:cd:5a:
1f:41:8c:d8:f1:dd:1b:fb:8a:e8:68:a6:96:14:aa:75:3d:72:
6a:e1:2d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 12:48:23 2024 by rpki-client on console-ams.rpki-client.org