Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/N3FIvLoAi-SrbWKri-QxAJXERl0.roa
File: N3FIvLoAi-SrbWKri-QxAJXERl0.roa (raw, json)
Hash identifier: oePUnAR/4Fy7x02aEJQp05kRfdkIvxnqMAYzYP5D1B0=
Subject key identifier: 37:71:48:BC:BA:00:8B:E4:AB:6D:62:AB:8B:E4:31:00:95:C4:46:5D
Certificate issuer: /CN=28bbb54e37826c0390b04379279f8e06cff3a234
Certificate serial: 0194236A1C3904E3BC2D78DD1E4D4A04A75C
Authority key identifier: 28:BB:B5:4E:37:82:6C:03:90:B0:43:79:27:9F:8E:06:CF:F3:A2:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/N3FIvLoAi-SrbWKri-QxAJXERl0.roa
Signing time: Wed 01 Jan 2025 19:49:04 +0000
ROA not before: Wed 01 Jan 2025 19:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199536
IP address blocks: 95.131.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1c:39:04:e3:bc:2d:78:dd:1e:4d:4a:04:a7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bbb54e37826c0390b04379279f8e06cff3a234
Validity
Not Before: Jan 1 19:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=377148bcba008be4ab6d62ab8be4310095c4465d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7c:88:e5:f2:56:dd:30:b4:3b:36:12:f2:b5:
9e:6b:01:e1:4f:1c:67:0c:c0:81:9a:80:f2:a5:e9:
3b:07:d6:54:36:fa:df:a6:ad:66:5b:0e:ed:f6:b5:
94:c3:ad:bd:e1:33:c5:40:b7:94:d9:84:ba:39:f0:
d5:2e:c8:ba:3c:05:1d:48:b3:d0:5a:09:72:72:02:
ab:88:85:b0:76:02:09:c5:36:8c:1d:3d:37:b4:b2:
34:41:d8:d4:88:e4:2c:e5:06:2a:2d:39:a3:70:74:
66:20:70:3f:d7:50:89:86:71:05:ce:b5:76:18:7d:
1b:bd:96:b8:26:64:05:db:30:c3:db:0f:35:77:88:
0d:27:a4:63:4f:35:04:25:18:3b:e9:69:77:ba:c7:
ad:01:f1:7b:94:a9:17:30:45:53:61:ec:38:25:33:
d8:9c:d6:d3:fe:3c:76:16:33:d5:69:db:a3:99:b2:
88:c4:47:87:87:1e:60:ff:ef:5c:48:f1:e2:80:1f:
3f:45:46:c2:d6:8d:ec:6e:00:f8:bd:92:7d:ab:d0:
bb:50:7d:9c:0b:ca:29:74:65:a6:00:83:e8:73:64:
de:f3:a5:4c:8a:cf:b1:c2:f4:3e:fc:53:bf:2b:00:
85:c4:9f:04:62:c2:b4:55:17:be:81:20:9c:54:6c:
a1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:71:48:BC:BA:00:8B:E4:AB:6D:62:AB:8B:E4:31:00:95:C4:46:5D
X509v3 Authority Key Identifier:
keyid:28:BB:B5:4E:37:82:6C:03:90:B0:43:79:27:9F:8E:06:CF:F3:A2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/N3FIvLoAi-SrbWKri-QxAJXERl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.206.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:14:de:74:44:00:1d:7d:0d:50:da:e3:74:de:3d:2d:97:8f:
95:d1:d9:cd:6e:7a:0f:0e:eb:ae:f4:87:79:c2:0c:f6:35:d8:
c4:46:50:74:c1:88:ed:a1:d0:21:5d:4b:78:a8:56:ec:f0:53:
e1:6a:19:17:94:83:c0:aa:85:1f:39:c5:bb:a1:72:21:f2:77:
9a:41:4c:36:97:09:b3:b6:e4:2e:68:7a:2b:0f:17:26:28:90:
fb:bf:6d:9f:23:16:38:3b:85:3a:e0:34:3e:9a:fa:88:23:f4:
b2:10:1a:db:bc:10:b6:46:ac:11:20:b8:d6:94:2d:5e:a9:0c:
df:a8:60:e5:1b:08:10:f0:a9:17:c7:71:8d:60:aa:1f:5b:b4:
4d:81:ad:63:b2:fa:f9:9e:27:f2:cd:8f:c7:1c:06:16:45:31:
f4:fd:b1:2d:cc:f0:ab:3b:90:55:1d:73:90:a5:8e:03:04:dc:
af:56:58:de:4b:f8:2e:24:9f:25:0e:d5:43:d5:de:ee:92:93:
7d:7a:98:c8:20:0f:1f:ff:14:b6:75:be:df:f7:71:97:21:54:
b9:03:65:4a:6c:76:79:bd:29:18:8f:07:d1:10:8f:22:23:ec:
6d:93:8a:54:ed:7e:44:06:46:20:3d:73:ab:2e:20:c7:b8:88:
a0:53:cb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:26 2025 by rpki-client