Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/RLpx3FHWLXisCZAGUpMP2j3qLCU.roa
File: RLpx3FHWLXisCZAGUpMP2j3qLCU.roa (raw, json)
Hash identifier: 9xwbYGnaWIVkYOWChsmn5gQqYI60B+iHcAobCOqyvIw=
Subject key identifier: 44:BA:71:DC:51:D6:2D:78:AC:09:90:06:52:93:0F:DA:3D:EA:2C:25
Certificate issuer: /CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Certificate serial: 018CC86F02360F2607312E28AD3C146753E5
Authority key identifier: F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/RLpx3FHWLXisCZAGUpMP2j3qLCU.roa
Signing time: Tue 02 Jan 2024 04:29:27 +0000
ROA not before: Tue 02 Jan 2024 04:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59480
IP address blocks: 95.215.220.0/23 maxlen: 24
2001:67c:1038::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:02:36:0f:26:07:31:2e:28:ad:3c:14:67:53:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Validity
Not Before: Jan 2 04:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44ba71dc51d62d78ac09900652930fda3dea2c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c6:bf:ca:75:37:25:23:b2:f1:2e:ac:54:4e:
d2:8d:24:1c:36:7a:62:bb:1c:08:f8:76:1c:99:a5:
c6:c2:81:2b:fd:2f:c1:f7:95:01:08:f0:9d:aa:1e:
f6:35:0e:a1:fb:a2:32:52:1b:9b:ab:c1:1c:1c:a1:
b7:db:b1:ed:d5:b5:53:ea:72:de:7c:cb:0e:f3:aa:
50:7e:df:9b:5a:30:ca:e0:46:22:e4:b9:a1:11:65:
c5:21:7d:7e:58:6a:45:6b:32:d2:8e:5b:83:0f:b8:
bb:19:36:1a:d6:0c:10:2f:d8:4c:2b:68:91:04:ac:
d8:d9:ce:3c:6f:93:2d:2e:72:f4:fd:5b:01:d6:da:
f9:d9:cf:d2:7a:14:2b:5c:21:df:ff:1c:d1:de:13:
65:ed:ce:a5:68:81:39:5a:a9:53:97:47:56:05:a9:
48:4d:e9:75:9e:2c:b5:95:1a:4b:bf:ab:b2:d4:b4:
7e:c9:41:42:c4:d5:ca:1a:05:aa:d6:7e:67:12:e6:
a6:fc:47:e2:7c:6e:f8:f0:28:eb:ee:de:13:1f:f9:
2d:d8:be:9d:5f:c0:a5:c9:0f:ec:e0:29:6f:e7:15:
f6:48:0f:98:9d:cc:ec:2f:8d:ac:9a:f6:15:33:a7:
03:8d:ca:2c:0e:f3:83:b2:ab:a1:21:bd:a9:77:a4:
87:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BA:71:DC:51:D6:2D:78:AC:09:90:06:52:93:0F:DA:3D:EA:2C:25
X509v3 Authority Key Identifier:
keyid:F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/RLpx3FHWLXisCZAGUpMP2j3qLCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.220.0/23
IPv6:
2001:67c:1038::/48
Signature Algorithm: sha256WithRSAEncryption
75:9d:4a:d2:94:e2:42:e2:ea:93:1d:99:40:2f:ff:65:5f:00:
05:01:bf:a5:b0:4c:af:82:af:27:25:b7:a2:44:f0:e3:7f:51:
74:25:d0:6a:93:57:a9:f2:ce:23:e0:09:75:c4:48:01:ac:0e:
86:03:a5:f4:13:4b:32:27:7f:20:34:e6:8e:20:e3:c9:48:c3:
7c:30:86:dc:0f:fa:d0:1c:4a:8e:4c:a8:cb:81:b5:d2:6d:06:
09:da:c9:ed:7d:75:7a:b0:39:52:f2:ae:51:1b:7c:31:e7:15:
ab:0a:8b:da:24:c1:67:8b:50:db:fc:a0:9c:73:8f:cc:fe:30:
da:51:76:ee:d8:d3:7c:ec:2f:6f:0b:df:cf:1d:16:a1:71:54:
9b:0d:2e:1a:fc:31:81:6e:93:0b:5b:37:ee:30:e4:78:76:f3:
26:6e:65:38:c2:c8:9c:27:34:2a:6d:3b:64:e1:a7:37:77:0a:
b4:42:ff:7a:44:fb:0c:df:1b:49:4e:cf:2f:11:29:71:f9:bc:
f3:0d:47:48:43:ce:80:31:8d:97:3e:fe:9c:f2:df:46:ce:66:
7e:1a:3b:63:a1:08:cf:e0:d5:6f:af:72:00:60:85:98:f5:a4:
78:b9:3d:9a:64:ca:16:7f:51:fc:e7:f0:17:57:41:34:06:ec:
42:cf:b4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:22:31 2024 by rpki-client on console-fra.rpki-client.org