Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/IPL3I5MGadf7dTcPFSaLIUXsOgc.roa
File: IPL3I5MGadf7dTcPFSaLIUXsOgc.roa (raw, json)
Hash identifier: NwZy+HMHSoTELm/YFqD8xVf4wEjaETRp08Q3q95qa8c=
Subject key identifier: 20:F2:F7:23:93:06:69:D7:FB:75:37:0F:15:26:8B:21:45:EC:3A:07
Certificate issuer: /CN=d897faea94815e0520b46f185c3ebec29b376ef0
Certificate serial: 018CC6B8BDBD0978C050D4444B00E218DF23
Authority key identifier: D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/IPL3I5MGadf7dTcPFSaLIUXsOgc.roa
Signing time: Mon 01 Jan 2024 20:30:45 +0000
ROA not before: Mon 01 Jan 2024 20:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 95.130.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:bd:bd:09:78:c0:50:d4:44:4b:00:e2:18:df:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d897faea94815e0520b46f185c3ebec29b376ef0
Validity
Not Before: Jan 1 20:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20f2f723930669d7fb75370f15268b2145ec3a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:e7:74:c5:8d:27:53:9e:be:7c:a5:a8:67:
fc:0d:85:2e:82:68:8a:09:79:b7:42:92:cd:a9:79:
85:74:0b:a9:44:03:d4:e2:fe:5b:c5:8b:2c:02:0d:
59:4d:81:49:4e:3e:9e:1d:d2:70:29:ef:9f:7e:76:
c5:bc:b9:00:14:88:19:99:6d:58:95:ee:e9:b2:62:
5a:78:bc:99:57:9a:20:5c:d5:ef:7c:56:71:52:59:
a7:f7:ab:d5:89:3d:ba:b5:79:4f:2a:f6:a6:3b:cc:
49:dc:09:c2:40:d0:43:6b:aa:2f:a2:ee:c2:a6:40:
a9:72:6d:88:7b:d9:f2:7b:13:be:c7:53:67:19:0c:
20:16:57:28:72:2f:cb:41:c9:50:9d:0e:c3:8c:d9:
f3:44:f1:07:ac:a9:47:7b:b1:a1:27:66:e5:4f:1b:
2a:3c:0d:6d:5e:ea:20:cc:26:b5:f7:fa:2c:e1:ab:
7b:4c:f7:96:20:ab:fd:6b:65:46:9f:cf:95:15:c5:
8b:72:cd:d1:6c:ef:fe:b2:90:44:08:d7:a9:d3:56:
44:16:65:af:a4:33:75:db:fe:3d:9c:1e:e6:01:9e:
00:66:3d:85:7d:bc:6d:30:98:13:54:4d:0c:55:40:
31:94:f5:f4:3a:8a:25:18:12:72:7f:2a:2f:da:26:
9c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F2:F7:23:93:06:69:D7:FB:75:37:0F:15:26:8B:21:45:EC:3A:07
X509v3 Authority Key Identifier:
keyid:D8:97:FA:EA:94:81:5E:05:20:B4:6F:18:5C:3E:BE:C2:9B:37:6E:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Jf66pSBXgUgtG8YXD6-wps3bvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/IPL3I5MGadf7dTcPFSaLIUXsOgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/76a216-cae7-4886-8e77-c813ce0f5e47/1/2Jf66pSBXgUgtG8YXD6-wps3bvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.184.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:e4:0f:64:95:21:fb:e8:3d:62:8f:8d:14:70:6a:7c:59:34:
81:c2:60:a4:7c:2f:8d:dc:49:09:fe:c7:b6:8a:a8:d7:82:5c:
b9:2c:5f:9f:a2:be:88:fc:47:e7:ab:14:a4:c1:da:21:74:59:
51:e9:e9:e6:92:de:62:78:7c:35:91:21:65:91:12:2a:62:c6:
6d:11:9b:42:ae:ac:72:93:c5:fd:19:f4:c4:4d:bf:4f:1f:59:
a3:d5:fe:87:c3:fc:c4:6c:40:58:ee:67:9c:7e:39:6a:5a:88:
be:13:0c:14:a1:92:98:f8:ef:0c:e5:b8:dd:f7:b3:df:18:51:
81:b4:3c:50:50:b2:0c:f4:8d:c7:d2:d0:8a:f4:3f:2e:4c:85:
ac:1b:ff:cf:27:ab:ed:6b:eb:26:05:0e:5f:f6:96:d9:0d:48:
b1:3a:0c:81:3a:d7:19:4d:fe:b0:4a:83:ed:c8:bb:cd:c8:82:
4e:b9:74:6c:1c:9a:6b:9f:d0:4d:61:c3:b9:e3:72:4d:9a:91:
ad:3b:5e:84:9f:11:fd:6e:eb:f6:9b:46:dc:49:8d:b5:17:31:
af:ca:3f:f3:dd:43:d6:fc:af:a1:7b:a6:7f:0f:cf:8b:22:0c:
72:d5:fa:bc:f7:26:72:69:e6:84:47:3e:86:df:36:ce:8b:13:
77:59:f2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:50:17 2024 by rpki-client on console-fra.rpki-client.org