Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/9THhhxKvvTdrMzan5X-UIlNkR1A.roa
File: 9THhhxKvvTdrMzan5X-UIlNkR1A.roa (raw, json)
Hash identifier: ujU7fkC6MYYSOVM7dPhC5vkRb/f+OaLqplaT+JdhaxM=
Subject key identifier: F5:31:E1:87:12:AF:BD:37:6B:33:36:A7:E5:7F:94:22:53:64:47:50
Certificate issuer: /CN=eebe79d147882422ec275417dfd2affa93a02757
Certificate serial: 018CD56AB04C52F1C1B2FDBFC9665E4BC8D2
Authority key identifier: EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/9THhhxKvvTdrMzan5X-UIlNkR1A.roa
Signing time: Thu 04 Jan 2024 16:59:48 +0000
ROA not before: Thu 04 Jan 2024 16:59:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200154
IP address blocks: 95.86.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d5:6a:b0:4c:52:f1:c1:b2:fd:bf:c9:66:5e:4b:c8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebe79d147882422ec275417dfd2affa93a02757
Validity
Not Before: Jan 4 16:59:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f531e18712afbd376b3336a7e57f942253644750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:00:6c:65:2f:9f:f3:84:af:15:1f:94:f5:
7d:e7:4c:f3:5f:af:9d:81:c6:8c:13:41:95:bf:89:
da:de:dc:2e:7c:bb:70:86:ee:de:a9:ae:7f:3c:44:
95:17:41:10:b7:c0:73:f6:48:ee:3e:dc:a6:85:e4:
86:d2:1f:65:4e:ef:23:64:40:12:43:5c:58:a2:5c:
8f:88:50:2e:01:ef:8f:f2:ab:47:d4:e8:dc:ae:4b:
60:a4:51:02:3b:cc:28:59:7a:df:9c:33:93:37:8e:
b4:6b:5e:fc:e8:b9:ce:0f:40:56:f7:64:59:00:06:
82:06:e1:de:2d:4a:0a:fd:95:da:9a:3a:44:97:0a:
7b:9b:34:bb:ae:f3:45:af:79:54:3c:ce:22:7c:37:
ca:33:af:36:b3:c5:3d:a7:96:e2:1a:92:b8:8f:76:
ae:56:77:57:62:e8:ba:51:84:f0:ab:50:10:9d:fc:
94:50:56:9c:f7:bc:1b:6f:dd:fb:3b:cc:58:fa:1e:
24:97:97:38:43:8c:f3:c6:37:d6:14:1f:ce:04:f0:
d7:fb:76:55:ed:94:e5:5b:84:d1:bc:c6:89:d2:50:
28:08:07:d2:b0:d6:02:2e:e5:51:01:21:6a:dd:cf:
2f:5b:89:53:c0:5f:2d:fb:45:21:a4:15:03:18:cd:
20:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:31:E1:87:12:AF:BD:37:6B:33:36:A7:E5:7F:94:22:53:64:47:50
X509v3 Authority Key Identifier:
keyid:EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/9THhhxKvvTdrMzan5X-UIlNkR1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.86.136.0/24
Signature Algorithm: sha256WithRSAEncryption
60:40:d6:e0:64:33:63:c2:8f:18:33:13:fa:f9:96:7e:05:f3:
81:e3:e1:03:4e:10:db:8a:5f:1f:f5:66:e3:b6:4a:a3:7d:23:
8d:4c:e7:af:d6:28:80:8f:47:bf:2b:aa:05:6c:bf:99:ca:d4:
52:2e:73:22:fa:57:10:66:78:9c:55:fc:68:3d:90:8b:4a:e9:
47:48:cf:f9:04:21:73:f9:a1:31:16:01:79:3c:73:9d:b3:82:
3f:c6:fd:62:44:a6:d1:e2:10:d4:c1:85:de:fd:89:2f:39:5e:
9a:1b:17:b3:4d:ae:d2:1e:52:5d:17:86:4c:be:82:7d:64:dd:
16:36:c1:6d:0f:73:d1:4d:ea:7e:88:f4:06:5a:31:54:e0:9b:
50:4f:1c:7b:80:d4:3c:e0:cc:ff:61:14:a9:3f:61:fe:fb:c2:
f4:a8:0e:6a:42:fa:cc:d2:97:f6:e6:37:e6:fb:70:b7:aa:f3:
9a:68:02:24:58:e4:cf:23:29:ca:f5:c5:63:b3:53:5e:86:13:
ff:85:a7:de:b8:95:83:ce:50:6e:4a:1e:37:2a:92:34:66:bc:
82:58:c7:c7:6e:d7:38:c9:73:26:72:2c:5f:26:66:66:58:91:
29:99:d8:69:83:5a:bf:10:b1:20:c6:df:36:41:46:b5:97:16:
1f:3c:2d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:00:46 2024 by rpki-client on console-ams.rpki-client.org