Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/IU3ONIKq8dHtDlpj6uoTX_6ko8I.roa
File: IU3ONIKq8dHtDlpj6uoTX_6ko8I.roa (raw, json)
Hash identifier: YI8ac30CiSpEwFF1PPlEN6AtTATulEKGanbDsFT5EqE=
Subject key identifier: 21:4D:CE:34:82:AA:F1:D1:ED:0E:5A:63:EA:EA:13:5F:FE:A4:A3:C2
Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Certificate serial: 0193BA565DAEB77D28F24281F4602D9AD0EC
Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/IU3ONIKq8dHtDlpj6uoTX_6ko8I.roa
Signing time: Thu 12 Dec 2024 10:07:22 +0000
ROA not before: Thu 12 Dec 2024 10:07:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 95.131.152.0/24 maxlen: 24
95.131.153.0/24 maxlen: 24
95.131.154.0/24 maxlen: 24
95.131.155.0/24 maxlen: 24
95.131.156.0/24 maxlen: 24
95.131.157.0/24 maxlen: 24
95.131.158.0/24 maxlen: 24
95.131.159.0/24 maxlen: 24
195.14.64.0/24 maxlen: 24
195.14.65.0/24 maxlen: 24
195.14.66.0/24 maxlen: 24
195.14.67.0/24 maxlen: 24
195.14.68.0/24 maxlen: 24
195.14.69.0/24 maxlen: 24
195.14.70.0/24 maxlen: 24
195.14.71.0/24 maxlen: 24
195.14.72.0/24 maxlen: 24
195.14.73.0/24 maxlen: 24
195.14.74.0/24 maxlen: 24
195.14.75.0/24 maxlen: 24
195.14.76.0/24 maxlen: 24
195.14.77.0/24 maxlen: 24
195.14.78.0/24 maxlen: 24
195.14.79.0/24 maxlen: 24
195.14.80.0/24 maxlen: 24
195.14.81.0/24 maxlen: 24
195.14.82.0/24 maxlen: 24
195.14.83.0/24 maxlen: 24
195.14.84.0/24 maxlen: 24
195.14.85.0/24 maxlen: 24
195.14.86.0/24 maxlen: 24
195.14.87.0/24 maxlen: 24
195.14.88.0/24 maxlen: 24
195.14.89.0/24 maxlen: 24
195.14.90.0/24 maxlen: 24
195.14.91.0/24 maxlen: 24
195.14.92.0/24 maxlen: 24
195.14.93.0/24 maxlen: 24
195.14.94.0/24 maxlen: 24
195.14.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 04:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:56:5d:ae:b7:7d:28:f2:42:81:f4:60:2d:9a:d0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Validity
Not Before: Dec 12 10:07:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=214dce3482aaf1d1ed0e5a63eaea135ffea4a3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:54:3e:ec:25:6f:84:e0:d4:1c:14:bf:24:
20:96:06:7e:e9:76:b5:1c:fe:ca:a4:6e:95:86:25:
bf:b0:40:f4:2e:77:38:39:1f:45:78:5e:39:3e:74:
36:f1:f7:ff:5a:3b:70:47:b5:4c:6d:57:10:ce:b4:
cc:89:65:8b:2a:29:3a:69:16:79:8f:18:8f:a3:05:
e2:74:c9:8a:07:b9:9c:93:f8:1d:f5:38:33:70:63:
a3:03:5d:91:be:e7:75:90:7c:09:45:cd:d3:46:9e:
ff:dd:77:10:85:29:09:e6:a3:4d:8e:1c:2b:63:09:
9a:71:3f:85:be:38:a3:46:85:cf:48:21:9e:85:64:
b3:c2:ce:a6:c8:c2:0f:61:c9:c0:c9:b9:96:1d:7d:
f7:c6:d3:c4:9b:d9:a6:a3:56:28:1c:ec:85:a7:55:
b1:24:df:4d:6b:38:78:02:8f:4e:ef:dd:3f:86:dd:
aa:0f:a9:06:69:c8:ae:02:73:88:79:65:cb:a4:c9:
66:2a:03:6e:64:9a:26:b1:35:e0:f3:2f:ca:7a:d7:
fe:c1:bb:ed:74:39:9a:d8:b6:2b:b3:1f:6c:30:75:
06:68:a5:71:81:7d:7a:90:dd:d1:19:52:3e:9d:ed:
da:cd:ae:e5:15:a7:ac:92:4e:b3:00:69:86:30:7a:
c6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4D:CE:34:82:AA:F1:D1:ED:0E:5A:63:EA:EA:13:5F:FE:A4:A3:C2
X509v3 Authority Key Identifier:
keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/IU3ONIKq8dHtDlpj6uoTX_6ko8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.152.0/21
195.14.64.0/19
Signature Algorithm: sha256WithRSAEncryption
b0:79:81:db:06:b5:56:2d:93:bd:68:62:95:59:c6:aa:8d:79:
31:7c:a0:1d:7e:82:63:3e:84:4b:f5:7d:d0:ef:8b:82:fc:c5:
38:07:b8:95:77:01:25:29:7f:60:a0:1a:d4:a7:62:aa:72:29:
59:99:33:d2:20:88:0c:a0:47:6d:46:01:37:01:d5:9b:eb:37:
1b:56:36:91:a6:d7:e3:28:5f:62:4e:f4:89:6d:c6:b4:8b:11:
d5:e4:ff:64:9e:65:1b:47:b2:c6:df:e1:ed:38:b4:8d:b3:7b:
0e:92:46:45:4c:cf:86:1e:2c:28:66:21:da:a6:ea:5e:78:e6:
92:92:ac:30:04:3c:e4:34:ba:7c:21:71:00:75:24:09:27:b2:
fc:40:6f:db:9f:e6:0e:43:73:95:97:57:3e:50:18:9d:65:95:
d6:c4:43:16:2b:15:a3:e3:df:53:a6:bb:15:60:b1:e1:75:bc:
70:e6:53:4b:3e:23:f8:d3:8f:ed:93:24:dd:13:ab:53:80:a5:
7f:5b:9a:d7:f2:61:60:d4:dd:b0:fb:61:95:ed:aa:da:00:00:
c9:3f:b2:f2:3c:39:f3:d3:26:ad:87:d6:23:7d:f9:b1:e3:74:
66:c9:93:14:c8:19:fc:d9:b5:ac:d6:42:54:fb:9a:f1:03:98:
61:ff:33:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 09:06:52 2024 by rpki-client on console-ams.rpki-client.org