Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/NTk6a-XyRFscXqpRWzTahs1Z05E.roa
File: NTk6a-XyRFscXqpRWzTahs1Z05E.roa (raw, json)
Hash identifier: quu5uJ7Es2AqjPv4Y+FxPabken2YCbNGjMF2JWnO9Vo=
Subject key identifier: 35:39:3A:6B:E5:F2:44:5B:1C:5E:AA:51:5B:34:DA:86:CD:59:D3:91
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 0192D6FC60BC1EF9DC922ED77AAB95A76107
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/NTk6a-XyRFscXqpRWzTahs1Z05E.roa
Signing time: Tue 29 Oct 2024 06:35:16 +0000
ROA not before: Tue 29 Oct 2024 06:35:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41881
IP address blocks: 95.38.0.0/21 maxlen: 21
95.38.8.0/24 maxlen: 24
95.38.9.0/24 maxlen: 24
95.38.10.0/24 maxlen: 24
95.38.11.0/24 maxlen: 24
95.38.12.0/24 maxlen: 24
95.38.13.0/24 maxlen: 24
95.38.14.0/24 maxlen: 24
95.38.15.0/24 maxlen: 24
95.38.16.0/20 maxlen: 20
95.38.16.0/24 maxlen: 24
95.38.17.0/24 maxlen: 24
95.38.18.0/24 maxlen: 24
95.38.19.0/24 maxlen: 24
95.38.20.0/24 maxlen: 24
95.38.21.0/24 maxlen: 24
95.38.22.0/24 maxlen: 24
95.38.23.0/24 maxlen: 24
95.38.24.0/24 maxlen: 24
95.38.25.0/24 maxlen: 24
95.38.26.0/24 maxlen: 24
95.38.27.0/24 maxlen: 24
95.38.28.0/24 maxlen: 24
95.38.29.0/24 maxlen: 24
95.38.30.0/24 maxlen: 24
95.38.31.0/24 maxlen: 24
95.38.32.0/24 maxlen: 24
95.38.33.0/24 maxlen: 24
95.38.34.0/24 maxlen: 24
95.38.35.0/24 maxlen: 24
95.38.36.0/23 maxlen: 23
95.38.39.0/24 maxlen: 24
95.38.40.0/24 maxlen: 24
95.38.41.0/24 maxlen: 24
95.38.42.0/24 maxlen: 24
95.38.43.0/24 maxlen: 24
95.38.44.0/22 maxlen: 22
95.38.44.0/24 maxlen: 24
95.38.46.0/24 maxlen: 24
95.38.47.0/24 maxlen: 24
95.38.48.0/24 maxlen: 24
95.38.49.0/24 maxlen: 24
95.38.50.0/24 maxlen: 24
95.38.51.0/24 maxlen: 24
95.38.52.0/24 maxlen: 24
95.38.53.0/24 maxlen: 24
95.38.54.0/23 maxlen: 23
95.38.56.0/23 maxlen: 23
95.38.58.0/24 maxlen: 24
95.38.59.0/24 maxlen: 24
95.38.60.0/24 maxlen: 24
95.38.61.0/24 maxlen: 24
95.38.62.0/23 maxlen: 23
95.38.63.0/24 maxlen: 24
95.38.64.0/24 maxlen: 24
95.38.65.0/24 maxlen: 24
95.38.66.0/23 maxlen: 23
95.38.68.0/24 maxlen: 24
95.38.69.0/24 maxlen: 24
95.38.70.0/24 maxlen: 24
95.38.71.0/24 maxlen: 24
95.38.73.0/24 maxlen: 24
95.38.74.0/23 maxlen: 23
95.38.74.0/24 maxlen: 24
95.38.75.0/24 maxlen: 24
95.38.76.0/24 maxlen: 24
95.38.77.0/24 maxlen: 24
95.38.78.0/23 maxlen: 23
95.38.78.0/24 maxlen: 24
95.38.79.0/24 maxlen: 24
95.38.80.0/24 maxlen: 24
95.38.81.0/24 maxlen: 24
95.38.82.0/23 maxlen: 23
95.38.84.0/23 maxlen: 23
95.38.84.0/24 maxlen: 24
95.38.85.0/24 maxlen: 24
95.38.86.0/24 maxlen: 24
95.38.87.0/24 maxlen: 24
95.38.88.0/22 maxlen: 22
95.38.88.0/24 maxlen: 24
95.38.89.0/24 maxlen: 24
95.38.90.0/24 maxlen: 24
95.38.91.0/24 maxlen: 24
95.38.92.0/24 maxlen: 24
95.38.93.0/24 maxlen: 24
95.38.94.0/23 maxlen: 23
95.38.96.0/21 maxlen: 21
95.38.96.0/23 maxlen: 23
95.38.98.0/23 maxlen: 23
95.38.98.0/24 maxlen: 24
95.38.99.0/24 maxlen: 24
95.38.100.0/23 maxlen: 23
95.38.102.0/23 maxlen: 23
95.38.104.0/22 maxlen: 22
95.38.108.0/24 maxlen: 24
95.38.109.0/24 maxlen: 24
95.38.110.0/23 maxlen: 23
95.38.112.0/21 maxlen: 21
95.38.116.0/23 maxlen: 23
95.38.116.0/24 maxlen: 24
95.38.117.0/24 maxlen: 24
95.38.118.0/24 maxlen: 24
95.38.119.0/24 maxlen: 24
95.38.120.0/24 maxlen: 24
95.38.121.0/24 maxlen: 24
95.38.122.0/23 maxlen: 23
95.38.122.0/24 maxlen: 24
95.38.123.0/24 maxlen: 24
95.38.124.0/24 maxlen: 24
95.38.125.0/24 maxlen: 24
95.38.126.0/23 maxlen: 23
95.38.128.0/20 maxlen: 20
95.38.128.0/22 maxlen: 22
95.38.128.0/23 maxlen: 23
95.38.128.0/24 maxlen: 24
95.38.129.0/24 maxlen: 24
95.38.130.0/23 maxlen: 23
95.38.160.0/21 maxlen: 21
95.38.168.0/22 maxlen: 22
95.38.168.0/23 maxlen: 23
95.38.169.0/24 maxlen: 24
95.38.170.0/24 maxlen: 24
95.38.172.0/23 maxlen: 23
95.38.174.0/24 maxlen: 24
95.38.175.0/24 maxlen: 24
95.38.176.0/20 maxlen: 20
95.38.192.0/21 maxlen: 21
95.38.192.0/24 maxlen: 24
95.38.193.0/24 maxlen: 24
95.38.194.0/24 maxlen: 24
95.38.195.0/24 maxlen: 24
95.38.196.0/24 maxlen: 24
95.38.199.0/24 maxlen: 24
95.38.200.0/22 maxlen: 22
95.38.200.0/24 maxlen: 24
95.38.201.0/24 maxlen: 24
95.38.202.0/24 maxlen: 24
95.38.203.0/24 maxlen: 24
95.38.204.0/23 maxlen: 23
95.38.206.0/24 maxlen: 24
95.38.208.0/21 maxlen: 21
95.38.208.0/22 maxlen: 22
95.38.210.0/24 maxlen: 24
95.38.211.0/24 maxlen: 24
95.38.212.0/23 maxlen: 23
95.38.215.0/24 maxlen: 24
95.38.216.0/23 maxlen: 23
95.38.218.0/24 maxlen: 24
95.38.220.0/22 maxlen: 22
95.38.224.0/24 maxlen: 24
95.38.225.0/24 maxlen: 24
95.38.226.0/23 maxlen: 23
95.38.228.0/22 maxlen: 22
95.38.232.0/21 maxlen: 21
95.38.240.0/21 maxlen: 21
95.38.252.0/24 maxlen: 24
95.38.253.0/24 maxlen: 24
95.38.254.0/24 maxlen: 24
95.38.255.0/24 maxlen: 24
185.20.160.0/24 maxlen: 24
185.20.161.0/24 maxlen: 24
185.20.162.0/24 maxlen: 24
185.20.163.0/24 maxlen: 24
2a00:52e0::/32 maxlen: 32
2a01:bd80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d6:fc:60:bc:1e:f9:dc:92:2e:d7:7a:ab:95:a7:61:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Oct 29 06:35:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35393a6be5f2445b1c5eaa515b34da86cd59d391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:d1:9a:76:5a:eb:ce:37:a4:c4:6b:5d:26:
6d:ec:b3:95:90:5f:4b:20:50:1b:4b:ea:1d:94:a9:
43:8f:69:f9:78:4c:d4:72:b4:12:ae:93:d8:b2:b3:
c1:9e:ef:39:81:d8:f1:e8:15:ba:12:b5:d3:88:db:
0e:5c:d2:b2:95:39:ce:9a:6d:2a:11:95:0b:f8:71:
02:24:b9:5c:09:ba:fd:28:5d:18:88:0e:ab:54:fe:
9c:e3:6a:b0:e0:26:d6:1c:a8:ca:ff:5b:53:c5:a1:
54:5d:69:7d:fb:c9:a0:93:ea:3d:66:39:d3:ee:1d:
28:f9:56:9a:c0:ed:62:7b:9e:91:a0:8f:e6:75:16:
16:14:c5:62:9f:0c:ea:92:ca:83:a9:74:35:19:60:
12:7d:17:78:e3:58:c1:b7:05:b1:6b:4b:80:d4:97:
41:f0:f6:87:a5:e7:10:70:10:6e:6b:e7:2f:bd:6c:
a0:52:81:82:04:26:3e:c9:28:d9:34:b0:1e:c1:d2:
45:fd:69:78:68:9a:58:dc:97:b2:ef:27:2a:38:b4:
f5:7c:cd:54:03:50:a1:6d:9e:1f:60:de:50:54:a0:
f2:05:25:37:7b:c1:31:2a:98:c1:d4:8e:7c:4f:31:
49:35:f1:4c:e0:8f:0d:6a:3b:d5:a7:08:1e:84:f5:
f8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:39:3A:6B:E5:F2:44:5B:1C:5E:AA:51:5B:34:DA:86:CD:59:D3:91
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/NTk6a-XyRFscXqpRWzTahs1Z05E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.0.0-95.38.37.255
95.38.39.0-95.38.71.255
95.38.73.0-95.38.143.255
95.38.160.0-95.38.206.255
95.38.208.0-95.38.218.255
95.38.220.0-95.38.247.255
95.38.252.0/22
185.20.160.0/22
IPv6:
2a00:52e0::/32
2a01:bd80::/29
Signature Algorithm: sha256WithRSAEncryption
21:23:f2:f4:91:3e:94:8c:7a:04:a4:a9:24:52:4d:4a:2e:37:
db:24:29:80:5c:b9:8c:ae:c3:78:95:83:5e:e2:a8:7e:e7:ec:
78:4b:30:b7:f6:3e:fd:4d:60:bc:51:73:85:a8:76:17:c9:33:
54:12:6d:47:52:2b:c2:79:f5:93:43:23:d3:b3:64:3f:6c:04:
c2:46:30:41:59:b4:c4:da:3f:ad:de:69:1e:eb:93:5d:18:4d:
99:64:22:da:99:ac:29:c8:6d:36:d6:3e:b2:00:46:d4:db:39:
a4:52:c5:c4:45:5a:cf:3e:31:7c:e6:0d:55:e8:c9:2a:ef:1a:
58:ba:fc:6d:b3:f1:d4:a9:48:62:5e:c9:ff:ae:7c:70:07:cf:
0b:01:d3:6c:f1:a6:78:34:17:a3:15:42:94:12:6c:05:49:ac:
1e:30:c8:12:49:ab:33:53:30:00:25:5d:35:cf:34:6f:bd:70:
a6:41:69:b8:65:ad:f4:13:c3:e9:ac:a1:6e:a9:54:1c:1e:b9:
21:30:e8:96:17:a2:f8:24:8f:fa:9b:ea:24:d6:d6:32:ac:c7:
d3:79:ef:41:15:f9:0c:15:55:44:65:b9:73:e4:f4:1b:8c:0f:
75:ce:fd:cf:6d:af:e6:c7:c0:9b:03:8d:31:56:8c:1b:6e:00:
ea:4c:f6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:54:41 2024 by rpki-client on console-ams.rpki-client.org