Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/mzBCEFUQOZqgMwJMRuK6JVWcM-0.roa
File: mzBCEFUQOZqgMwJMRuK6JVWcM-0.roa (raw, json)
Hash identifier: AVF7oohtla3GsvJFlga6VElVCM0hj56Ze9pOP9sxYZc=
Subject key identifier: 9B:30:42:10:55:10:39:9A:A0:33:02:4C:46:E2:BA:25:55:9C:33:ED
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 018D59C8F8A233EAC80C4721F5D5DB24E529
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/mzBCEFUQOZqgMwJMRuK6JVWcM-0.roa
Signing time: Tue 30 Jan 2024 09:52:39 +0000
ROA not before: Tue 30 Jan 2024 09:52:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42337
IP address blocks: 95.38.96.0/21 maxlen: 21
95.38.96.0/24 maxlen: 24
95.38.97.0/24 maxlen: 24
95.38.98.0/24 maxlen: 24
95.38.99.0/24 maxlen: 24
95.38.100.0/24 maxlen: 24
95.38.101.0/24 maxlen: 24
95.38.102.0/24 maxlen: 24
95.38.103.0/24 maxlen: 24
95.38.104.0/22 maxlen: 22
95.38.104.0/24 maxlen: 24
95.38.105.0/24 maxlen: 24
95.38.106.0/24 maxlen: 24
95.38.107.0/24 maxlen: 24
95.38.130.0/23 maxlen: 23
95.38.130.0/24 maxlen: 24
95.38.131.0/24 maxlen: 24
95.38.132.0/22 maxlen: 22
95.38.132.0/24 maxlen: 24
95.38.133.0/24 maxlen: 24
95.38.134.0/24 maxlen: 24
95.38.135.0/24 maxlen: 24
95.38.136.0/22 maxlen: 22
95.38.136.0/24 maxlen: 24
95.38.137.0/24 maxlen: 24
95.38.138.0/24 maxlen: 24
95.38.139.0/24 maxlen: 24
95.38.140.0/22 maxlen: 22
95.38.140.0/24 maxlen: 24
95.38.141.0/24 maxlen: 24
95.38.142.0/24 maxlen: 24
95.38.143.0/24 maxlen: 24
95.38.152.0/21 maxlen: 21
95.38.152.0/24 maxlen: 24
95.38.153.0/24 maxlen: 24
95.38.154.0/24 maxlen: 24
95.38.155.0/24 maxlen: 24
95.38.156.0/24 maxlen: 24
95.38.157.0/24 maxlen: 24
95.38.158.0/24 maxlen: 24
95.38.159.0/24 maxlen: 24
95.38.168.0/22 maxlen: 22
95.38.168.0/24 maxlen: 24
95.38.169.0/24 maxlen: 24
95.38.170.0/24 maxlen: 24
95.38.171.0/24 maxlen: 24
95.38.174.0/24 maxlen: 24
95.38.200.0/22 maxlen: 22
95.38.200.0/24 maxlen: 24
95.38.201.0/24 maxlen: 24
95.38.202.0/24 maxlen: 24
95.38.203.0/24 maxlen: 24
95.38.208.0/22 maxlen: 22
95.38.208.0/24 maxlen: 24
95.38.209.0/24 maxlen: 24
95.38.210.0/24 maxlen: 24
95.38.211.0/24 maxlen: 24
95.38.240.0/21 maxlen: 21
95.38.240.0/24 maxlen: 24
95.38.241.0/24 maxlen: 24
95.38.242.0/24 maxlen: 24
95.38.243.0/24 maxlen: 24
95.38.244.0/24 maxlen: 24
95.38.245.0/24 maxlen: 24
95.38.246.0/24 maxlen: 24
95.38.247.0/24 maxlen: 24
95.38.248.0/22 maxlen: 22
95.38.248.0/24 maxlen: 24
95.38.249.0/24 maxlen: 24
95.38.250.0/24 maxlen: 24
95.38.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:59:c8:f8:a2:33:ea:c8:0c:47:21:f5:d5:db:24:e5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Jan 30 09:52:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b3042105510399aa033024c46e2ba25559c33ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:01:9c:81:f5:98:dd:45:49:b2:ad:e4:3d:22:
e9:40:46:c0:1f:38:fc:3b:0d:6a:bd:d9:f1:b6:fb:
17:7d:7d:0f:b0:67:1f:16:c4:31:43:b9:67:e8:ef:
19:82:cd:c3:6d:9f:a0:7c:40:68:64:3b:be:dd:f8:
cb:5f:97:84:d3:2b:d7:99:62:b2:df:bc:f4:40:52:
5d:ec:ac:1b:e6:1c:5c:52:5d:ef:a0:87:62:6b:ee:
f3:67:5a:d0:18:e9:60:09:09:d6:cd:c3:44:ac:0f:
d3:af:db:73:13:62:62:b4:ee:05:f2:4f:18:72:6b:
84:2c:8e:07:d0:e1:fd:29:8b:90:93:a5:78:bc:5e:
57:11:65:11:3e:99:09:7d:db:25:e6:31:8f:f1:55:
d5:4d:ca:44:c5:0e:4b:1f:f5:66:fc:0e:ee:40:3f:
30:63:56:48:c4:9e:75:c5:c7:1c:18:86:81:bf:21:
11:1e:78:61:aa:34:fb:e3:37:b6:3f:a2:39:27:ee:
d2:fc:fa:a1:37:10:1f:44:94:f5:dc:79:4d:c1:dc:
c7:00:40:a0:d5:be:a1:54:43:fa:d3:45:1e:cc:70:
55:79:fc:82:d4:b4:55:32:93:fe:7a:3f:bd:3f:1a:
19:f1:14:cc:07:8a:ec:83:fe:dd:ab:6b:02:bc:a0:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:30:42:10:55:10:39:9A:A0:33:02:4C:46:E2:BA:25:55:9C:33:ED
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/mzBCEFUQOZqgMwJMRuK6JVWcM-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.96.0-95.38.107.255
95.38.130.0-95.38.143.255
95.38.152.0/21
95.38.168.0/22
95.38.174.0/24
95.38.200.0/22
95.38.208.0/22
95.38.240.0-95.38.251.255
Signature Algorithm: sha256WithRSAEncryption
0b:ac:d3:06:45:6b:39:d1:ee:0d:50:fa:c8:56:c1:3b:83:d2:
73:7c:b8:40:a1:70:0e:31:84:9b:b8:2d:9d:17:54:b8:54:a6:
7a:b5:1d:55:08:ba:0a:16:f5:82:6d:3a:0f:97:3b:73:ff:25:
b8:bf:69:e7:b4:7a:09:6e:e6:49:4b:a5:ca:7c:fd:bb:47:97:
58:23:79:82:b2:63:ae:9e:8f:ec:a0:a3:a3:93:c1:4f:07:ed:
ee:73:ac:58:3d:9a:40:f9:19:94:5b:29:3d:88:1d:c7:ad:90:
fa:e4:95:70:05:46:a4:2f:4e:1f:d9:54:9e:99:4d:10:e0:2e:
32:07:8b:b6:38:03:22:58:4e:55:84:de:59:31:be:99:65:61:
5b:fd:ac:e3:b0:79:ae:60:ea:9c:fb:16:07:59:54:3b:95:a3:
c1:49:5b:ef:8a:1f:ec:63:15:12:5f:40:ca:23:95:6c:a6:47:
2e:f7:31:b6:ef:42:8c:80:1d:15:48:16:14:ac:f4:8a:29:4d:
9d:b5:a7:83:b5:18:e0:63:50:d1:8a:b0:b6:e9:84:aa:8a:20:
03:bf:b4:04:6d:4c:43:0f:9f:77:6e:62:c0:57:36:10:fe:2b:
bd:8d:bd:8f:16:46:ce:81:7b:52:0a:de:3a:2d:4a:4d:3f:3e:
23:5a:ce:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:04:01 2024 by rpki-client on console-fra.rpki-client.org