Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/P9kA77lwNlnAjoP3RPLQ3vGz8gM.roa
File: P9kA77lwNlnAjoP3RPLQ3vGz8gM.roa (raw, json)
Hash identifier: uGUZL6F9ZqmhNnqoptB1O3UNNKibyxZ99aP3ldN4wbw=
Subject key identifier: 3F:D9:00:EF:B9:70:36:59:C0:8E:83:F7:44:F2:D0:DE:F1:B3:F2:03
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 018CC8DF21B04363FBC10B5C572B93FA3182
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/P9kA77lwNlnAjoP3RPLQ3vGz8gM.roa
Signing time: Tue 02 Jan 2024 06:31:55 +0000
ROA not before: Tue 02 Jan 2024 06:31:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 265515
IP address blocks: 95.210.95.0/24 maxlen: 24
176.227.129.0/24 maxlen: 24
176.227.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:21:b0:43:63:fb:c1:0b:5c:57:2b:93:fa:31:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Jan 2 06:31:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fd900efb9703659c08e83f744f2d0def1b3f203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:dd:eb:fc:ed:de:ec:87:6a:79:f9:b5:28:79:
b5:68:f8:ac:80:c1:64:78:a8:f0:8b:41:16:ce:59:
36:7c:43:b1:d8:13:15:e8:37:49:09:c6:c0:f7:63:
9b:ab:7f:6b:7f:c6:55:85:43:cc:a6:8e:30:9a:58:
33:d0:56:1e:0c:32:4f:a0:ae:05:c9:d6:b0:9c:4a:
53:61:1d:8c:cb:9b:4f:e0:a9:19:ba:f1:19:17:de:
2d:4e:fa:42:9c:bd:6f:e1:8b:ff:66:49:fc:02:ba:
54:fd:15:41:af:93:90:e2:33:3b:11:53:67:50:e8:
e9:b0:9c:93:a8:59:8a:4b:19:75:e5:f2:c7:00:1a:
4a:3e:24:9c:93:47:ef:2a:29:5b:28:df:e3:88:27:
c9:54:24:7b:53:e8:6f:f6:f4:b7:49:fd:c4:9c:f0:
20:62:7f:e8:89:fc:31:54:ef:63:8f:62:02:fa:39:
b7:9f:e7:5b:e5:a4:67:71:82:11:e8:2d:4c:7a:12:
e7:e6:4a:5a:5c:4c:36:57:01:3c:92:3d:01:64:c4:
d4:c7:51:20:39:f5:ee:87:01:93:04:5d:f9:ae:c0:
2b:3a:f3:1b:a7:a5:cd:2a:d0:60:3c:42:a3:33:30:
10:8f:1c:5b:00:b3:d8:7c:ce:89:9b:e0:b7:95:6e:
b1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D9:00:EF:B9:70:36:59:C0:8E:83:F7:44:F2:D0:DE:F1:B3:F2:03
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/P9kA77lwNlnAjoP3RPLQ3vGz8gM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.210.95.0/24
176.227.129.0/24
176.227.133.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:34:d4:ef:bf:58:68:08:e7:19:17:f3:1f:de:4c:f1:44:2e:
c3:04:d7:ea:d5:e1:7d:7c:30:d0:ff:fb:45:c2:dd:8f:a1:2c:
f1:21:29:43:cf:68:f9:a0:92:01:ba:d3:90:f6:96:f8:a7:e4:
cc:06:3e:cc:7e:c7:1b:fc:1c:47:d9:17:f5:c7:41:7b:98:46:
f4:f7:b5:88:35:d1:2a:ba:3d:23:e8:fb:df:05:0d:be:bf:22:
5d:b8:54:33:23:4b:b5:f3:32:b7:c6:09:d2:39:ac:79:d8:b7:
7e:61:6b:29:20:a9:7c:1d:c6:7b:88:97:73:5d:84:61:17:bf:
a6:61:63:f6:a3:6f:2b:8f:ef:5f:fc:e0:53:19:d4:9d:fe:6c:
95:f8:5a:f1:80:5c:03:33:6b:6d:ea:f6:d1:2b:dc:b8:e9:9f:
1e:fa:b3:ad:d1:29:a2:bd:0b:fe:04:5e:3a:07:f1:2b:fe:53:
19:68:26:18:53:61:e4:73:99:3d:1d:d9:bf:39:65:a1:f4:ba:
b1:4f:17:87:63:97:2b:f9:6d:73:cb:94:2e:e7:85:ed:b0:96:
70:e8:46:24:ca:30:1b:02:20:3e:ea:13:2d:0a:25:b6:e3:b8:
fd:e6:50:36:24:eb:43:72:f8:14:f5:b6:b7:35:76:9d:9e:80:
81:12:7f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:49:21 2024 by rpki-client on console-ams.rpki-client.org