Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/stuYj2M8oLtzmFna4q9D-bREMwQ.roa
File: stuYj2M8oLtzmFna4q9D-bREMwQ.roa (raw, json)
Hash identifier: MIIaVeQN8Lk9yObjiywMw/1fSjEi2lKwg18Ktt9nBYY=
Subject key identifier: B2:DB:98:8F:63:3C:A0:BB:73:98:59:DA:E2:AF:43:F9:B4:44:33:04
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01934AB053A192FCE71DC4292355470D6C91
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/stuYj2M8oLtzmFna4q9D-bREMwQ.roa
Signing time: Wed 20 Nov 2024 17:48:09 +0000
ROA not before: Wed 20 Nov 2024 17:48:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 95.214.176.0/24 maxlen: 24
212.115.126.0/24 maxlen: 24
212.115.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4a:b0:53:a1:92:fc:e7:1d:c4:29:23:55:47:0d:6c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Nov 20 17:48:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2db988f633ca0bb739859dae2af43f9b4443304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:94:e6:0d:16:01:d1:95:4d:f4:44:a2:b5:
52:21:e0:98:c6:3d:24:34:e8:c8:51:11:50:d1:f5:
e5:aa:57:ee:a0:87:42:f0:c0:46:e4:9e:5c:2c:98:
d2:0a:9d:22:21:38:0a:b7:c8:5f:87:b5:d2:86:da:
c0:0a:c6:9b:71:23:fe:47:3a:90:6c:af:26:b2:20:
70:6b:6c:0a:09:28:4d:e3:97:e0:a6:e9:26:c9:f5:
27:43:89:a1:02:92:67:86:1d:62:c4:6e:39:04:0f:
93:6f:df:3d:c9:24:5e:90:17:52:5b:c8:80:6f:0a:
aa:2d:eb:0d:9c:ab:c5:92:7c:c4:9d:a3:f4:0e:46:
7c:9a:dc:f7:53:cb:0b:b2:82:a8:01:37:4d:7e:c3:
c1:e5:0e:fe:fa:3a:89:44:04:da:51:40:ca:cd:a9:
5a:ed:0a:61:18:63:55:1f:0b:ce:1e:d0:75:91:0f:
a1:18:90:29:16:bc:e6:1f:72:2a:15:02:4a:5a:14:
a6:6e:d7:eb:32:9f:4f:35:43:0a:16:a5:07:64:4d:
aa:8f:b6:d5:cf:3c:85:59:c5:a3:56:64:74:b4:5b:
3d:63:c6:b4:8b:59:ca:27:aa:47:a3:71:d8:11:2b:
05:42:ce:0c:cc:ce:94:22:70:1d:4e:c4:bc:ce:d4:
30:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DB:98:8F:63:3C:A0:BB:73:98:59:DA:E2:AF:43:F9:B4:44:33:04
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/stuYj2M8oLtzmFna4q9D-bREMwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.176.0/24
212.115.126.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:0b:66:05:b1:e8:03:77:c6:fc:b3:9c:8d:89:43:27:d6:d9:
10:af:6a:d0:77:f6:66:0f:07:04:c3:ed:12:0f:24:3d:15:56:
ca:5c:92:68:59:f8:a6:86:5e:8c:4b:f5:6c:c5:9c:11:7a:c4:
3e:6c:65:07:06:78:98:da:a3:55:6d:e8:01:90:08:97:fe:ed:
f1:ce:da:f6:25:42:3e:22:54:eb:99:29:74:d5:fc:ba:f2:55:
8a:ea:76:08:c3:b0:86:27:a5:58:50:b8:02:f8:23:0d:8c:bd:
d9:cf:66:32:fa:3a:64:08:94:6b:04:ed:17:ae:b6:f0:13:7e:
d1:20:bb:08:c0:91:6e:52:db:7a:16:60:69:9d:69:b3:d4:e1:
be:00:33:4c:5d:63:67:77:89:a4:19:20:9c:f5:b5:32:db:75:
7c:5c:75:6d:ff:c3:75:8e:79:f9:34:12:c3:05:4c:ca:c9:3d:
a3:3a:62:49:47:95:2a:98:95:79:59:6b:67:46:f4:1f:e1:eb:
7c:0f:e2:bf:37:a7:4e:08:b0:8f:9e:d0:8f:48:28:b9:8b:26:
73:29:1e:eb:98:e6:a1:38:a1:9e:a6:db:89:a6:b2:42:f6:5a:
cd:30:cc:4f:9d:ba:b2:a7:61:e2:98:e0:7e:ac:7b:ed:b9:17:
f3:9f:89:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:47:26 2024 by rpki-client on console-fra.rpki-client.org