Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/N84np4dd6kBYgrkjn3CM-HcfgTQ.roa
File: N84np4dd6kBYgrkjn3CM-HcfgTQ.roa (raw, json)
Hash identifier: RhP5I1MnnfgZ79B3cOVzGwXnZUIBRur3CZvOkRSbs40=
Subject key identifier: 37:CE:27:A7:87:5D:EA:40:58:82:B9:23:9F:70:8C:F8:77:1F:81:34
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018CC26D6957B2C93FDEEAA47EEA91EF5283
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/N84np4dd6kBYgrkjn3CM-HcfgTQ.roa
Signing time: Mon 01 Jan 2024 00:29:59 +0000
ROA not before: Mon 01 Jan 2024 00:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206523
IP address blocks: 95.43.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Nov 2024 16:12:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:69:57:b2:c9:3f:de:ea:a4:7e:ea:91:ef:52:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 00:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37ce27a7875dea405882b9239f708cf8771f8134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:19:7c:3c:68:e7:23:53:30:ea:25:84:22:bd:
c8:d9:fe:0c:80:09:82:26:b2:29:12:63:5d:b3:d0:
c9:c1:1b:c0:0e:db:cf:fe:cb:0d:fa:58:db:e1:8f:
b8:fe:1a:3a:c0:d7:45:46:d6:54:88:5d:a0:81:82:
b2:ff:39:c5:5c:cb:f4:4c:9b:a6:45:dc:13:cf:fc:
d7:79:72:2d:a2:20:df:9f:2c:c6:96:ed:4e:45:b5:
a0:af:2f:7b:54:e4:3a:30:d2:b5:26:a8:35:49:9f:
93:52:b7:68:b0:56:81:41:8f:52:27:35:4e:8b:e7:
d8:cb:13:96:6a:cd:88:22:54:fc:8f:69:2a:11:f0:
a9:0c:18:5b:e8:56:32:45:20:81:2c:5e:d2:81:a2:
5d:8e:f0:82:71:5e:81:9f:71:53:d2:95:60:ee:b5:
49:10:70:c8:4c:c7:a0:50:f1:8c:41:76:ce:f8:12:
c2:a9:3e:cc:d2:bf:df:84:eb:f3:65:10:ef:b3:87:
a0:1d:e2:00:4d:22:2b:09:ab:d9:1d:2d:d2:78:16:
cf:0a:f9:57:ef:85:ad:61:36:bb:56:12:ea:b6:da:
fe:91:aa:88:1e:59:74:5e:af:3a:30:ab:1d:8d:bc:
b8:ad:a8:31:00:e2:27:17:05:ee:fc:93:25:80:69:
3e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CE:27:A7:87:5D:EA:40:58:82:B9:23:9F:70:8C:F8:77:1F:81:34
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/N84np4dd6kBYgrkjn3CM-HcfgTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.43.216.0/24
Signature Algorithm: sha256WithRSAEncryption
26:3c:7f:2b:bb:9e:c7:c2:a6:ed:a6:70:91:11:97:1e:41:92:
ef:dd:2f:a6:85:fc:d7:8e:c8:9b:8f:8a:8f:53:8d:33:cb:f2:
05:1f:f6:8e:32:e5:57:44:6d:58:c5:30:b4:92:48:7e:90:35:
e8:7b:88:8c:22:c5:dd:6b:a7:56:b3:0f:8d:a3:a9:87:b3:f9:
39:5c:8a:27:cd:eb:12:d2:69:4b:68:f4:7f:8c:e0:4c:de:26:
3f:4b:ed:87:d1:ff:72:bf:0b:19:b1:05:cb:fc:f6:2b:98:43:
95:b7:d7:d3:2c:2d:e3:ff:70:47:1f:04:e0:ad:8d:23:72:b4:
1f:72:63:38:e0:58:85:db:f3:17:19:b6:90:34:c1:ed:60:3e:
8e:75:55:25:11:f8:5c:43:d3:37:35:33:21:c2:fe:0f:95:e5:
86:ee:ef:5e:bc:ec:90:31:fb:18:24:31:69:7e:be:9d:68:55:
44:2e:e9:ff:99:67:84:96:3c:e4:3a:42:a8:36:20:59:10:8a:
d1:e5:43:8a:cc:55:34:76:50:c2:0a:a4:21:f8:1e:8c:11:0e:
4a:f0:27:08:e5:eb:05:a8:64:8d:e3:87:77:b0:26:50:af:25:
9d:56:ab:02:51:44:85:4c:a3:29:cc:fa:0e:18:10:a1:9f:33:
d6:80:30:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbWlXssk/3uqkfuqR71KDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjQwMTAxMDAyOTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2NlMjdhNzg3NWRlYTQwNTg4MmI5MjM5ZjcwOGNmODc3MWY4MTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxl8PGjnI1Mw6iWEIr3I2f4MgAmC
JrIpEmNds9DJwRvADtvP/ssN+ljb4Y+4/ho6wNdFRtZUiF2ggYKy/znFXMv0TJum
RdwTz/zXeXItoiDfnyzGlu1ORbWgry97VOQ6MNK1Jqg1SZ+TUrdosFaBQY9SJzVO
i+fYyxOWas2IIlT8j2kqEfCpDBhb6FYyRSCBLF7SgaJdjvCCcV6Bn3FT0pVg7rVJ
EHDITMegUPGMQXbO+BLCqT7M0r/fhOvzZRDvs4egHeIATSIrCavZHS3SeBbPCvlX
74WtYTa7VhLqttr+kaqIHll0Xq86MKsdjby4ragxAOInFwXu/JMlgGk+IQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDfOJ6eHXepAWIK5I59wjPh3H4E0MB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEvTjg0bnA0ZGQ2a0JZZ3Jram4zQ00tSGNmZ1RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXyvYMA0G
CSqGSIb3DQEBCwUAA4IBAQAmPH8ru57HwqbtpnCREZceQZLv3S+mhfzXjsibj4qP
U40zy/IFH/aOMuVXRG1YxTC0kkh+kDXoe4iMIsXda6dWsw+No6mHs/k5XIonzesS
0mlLaPR/jOBM3iY/S+2H0f9yvwsZsQXL/PYrmEOVt9fTLC3j/3BHHwTgrY0jcrQf
cmM44FiF2/MXGbaQNMHtYD6OdVUlEfhcQ9M3NTMhwv4PleWG7u9evOyQMfsYJDFp
fr6daFVELun/mWeEljzkOkKoNiBZEIrR5UOKzFU0dlDCCqQh+B6MEQ5K8CcI5esF
qGSN44d3sCZQryWdVqsCUUSFTKMpzPoOGBChnzPWgDBB
-----END CERTIFICATE-----
Generated at Thu Oct 31 22:56:58 2024 by rpki-client on console-fra.rpki-client.org