Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/85tR4jdkrZaJIexRAPdN96a-kDU.roa
File: 85tR4jdkrZaJIexRAPdN96a-kDU.roa (raw, json)
Hash identifier: mX516Up9az2ztePnHPWu6mTcGRaRMcIbhNaqba0aneA=
Subject key identifier: F3:9B:51:E2:37:64:AD:96:89:21:EC:51:00:F7:4D:F7:A6:BE:90:35
Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Certificate serial: 018CCA29CA502233B28151E4C77F7C5172BB
Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/85tR4jdkrZaJIexRAPdN96a-kDU.roa
Signing time: Tue 02 Jan 2024 12:33:05 +0000
ROA not before: Tue 02 Jan 2024 12:33:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6894
IP address blocks: 95.131.152.0/21 maxlen: 21
195.14.64.0/19 maxlen: 19
195.14.65.0/24 maxlen: 24
2a02:b78::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:ca:50:22:33:b2:81:51:e4:c7:7f:7c:51:72:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Validity
Not Before: Jan 2 12:33:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f39b51e23764ad968921ec5100f74df7a6be9035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:de:04:7c:84:df:16:ea:4d:c3:e7:92:9b:8e:
8d:d6:a4:be:62:aa:08:43:cb:54:80:36:4a:66:9b:
42:75:3a:7a:2c:f0:a2:54:ab:c5:43:c4:76:49:a4:
d0:cc:fc:26:be:e9:45:43:53:33:62:0f:b9:39:e3:
e2:53:93:45:f6:d3:ac:e9:ac:c2:d6:fc:da:63:b0:
04:6c:f7:82:2e:97:65:38:24:1e:94:a9:38:c4:f4:
a1:bb:98:f7:9c:f5:d6:e1:07:8e:b0:a4:89:60:54:
33:c5:c0:20:9e:a9:01:d8:5e:49:75:31:dd:f0:d9:
1c:c4:ef:c6:64:b9:67:a9:c8:8a:e1:ee:02:c3:46:
f3:3f:d5:78:9d:91:47:cf:9c:d5:56:d1:4e:2b:5a:
6b:05:52:78:c0:93:68:e7:2e:98:32:6f:7e:e4:82:
76:05:1a:33:fb:24:c3:59:5f:d8:23:d0:8d:72:d6:
51:f1:7f:52:83:10:ed:81:24:8c:33:be:03:07:33:
41:b2:7b:d7:43:d6:e8:f3:fe:08:c9:a3:be:43:e0:
cc:1a:8d:a7:b7:da:a5:b3:ea:70:32:9d:7b:54:4e:
9b:76:97:df:16:e1:96:d3:69:25:9c:bd:19:be:02:
ef:eb:9e:22:6b:8e:b2:85:b1:c3:93:c0:26:b3:ed:
5e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9B:51:E2:37:64:AD:96:89:21:EC:51:00:F7:4D:F7:A6:BE:90:35
X509v3 Authority Key Identifier:
keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/85tR4jdkrZaJIexRAPdN96a-kDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.152.0/21
195.14.64.0/19
IPv6:
2a02:b78::/32
Signature Algorithm: sha256WithRSAEncryption
9b:db:83:64:0b:8f:63:ba:a2:aa:0d:9e:53:6c:16:28:49:c3:
34:0d:b4:fd:e7:8c:ee:ca:76:b9:b6:9b:5a:90:45:8d:5b:83:
b8:d2:74:f6:50:63:21:97:a8:42:ac:9b:b7:19:97:b7:0d:c4:
cf:59:e2:1e:07:c9:a7:9d:1f:4e:4e:57:4b:ea:d1:be:7e:fb:
91:1d:5d:67:9a:95:7b:41:e0:15:b3:5b:46:ed:4a:32:a9:c0:
10:81:b5:65:28:a5:12:41:e3:d5:48:8a:68:17:3f:85:1d:4d:
ed:99:59:0a:a3:4f:9d:45:b6:56:11:d5:69:23:9c:61:a0:a6:
35:d3:fd:a6:01:4f:0e:c0:ea:bd:3f:37:70:6d:0c:9d:aa:35:
f8:f7:4d:71:77:5e:ff:3a:f8:d8:05:e7:fc:11:9b:e8:70:89:
d5:3f:a4:05:6d:51:4e:da:ba:04:aa:35:42:87:94:4a:cd:1a:
b0:d4:2a:e8:b4:16:c8:17:96:bd:c8:43:e8:44:19:82:aa:af:
0a:b1:72:c0:11:51:96:d1:5a:14:81:ab:d1:de:ba:55:3d:09:
aa:a0:8a:3f:cf:22:27:e0:28:84:ae:81:f5:23:b2:23:cd:0a:
43:7c:c5:85:57:b8:0b:bb:82:68:e4:1f:2b:6a:d1:ef:02:d1:
50:ac:b2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:41:35 2024 by rpki-client on console-ams.rpki-client.org