Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/A32ayZlUg7YMY2Pgin6Z7eVAW8c.roa
File: A32ayZlUg7YMY2Pgin6Z7eVAW8c.roa (raw, json)
Hash identifier: Wr4aE/wlJ9vi0deOtw/WSqokxejTnQCXw5CG5zTGyEc=
Subject key identifier: 03:7D:9A:C9:99:54:83:B6:0C:63:63:E0:8A:7E:99:ED:E5:40:5B:C7
Certificate issuer: /CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Certificate serial: 018CC5DBF232CDC1088DA579B8C5B27AE2FC
Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/A32ayZlUg7YMY2Pgin6Z7eVAW8c.roa
Signing time: Mon 01 Jan 2024 16:29:34 +0000
ROA not before: Mon 01 Jan 2024 16:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3356
IP address blocks: 195.93.197.0/24 maxlen: 24
195.93.196.0/24 maxlen: 24
95.130.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:f2:32:cd:c1:08:8d:a5:79:b8:c5:b2:7a:e2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Validity
Not Before: Jan 1 16:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=037d9ac9995483b60c6363e08a7e99ede5405bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:82:a6:f4:1f:df:3a:a3:8a:8a:0f:b0:b7:81:
36:fa:e2:df:7a:77:62:a6:cb:b9:d1:a5:ed:d9:40:
3c:ab:d1:db:4b:65:09:91:db:df:5c:0b:11:16:0d:
de:65:bd:e4:4e:fe:26:b5:b9:d2:20:2a:2f:f4:2f:
7a:48:f7:d4:65:5d:fd:5d:a7:8d:de:dc:aa:65:85:
0a:6b:88:c7:bb:a3:c4:61:c0:58:5f:c3:91:fe:23:
59:af:45:e2:44:3e:4b:fd:58:01:3a:51:6a:b4:cc:
57:7d:41:50:ae:88:db:a0:b2:a0:5b:20:f6:cd:79:
5f:11:41:1c:c2:6f:f2:a6:64:d0:ca:91:84:24:5d:
5b:7b:6d:c1:ac:fb:8d:ff:57:2f:75:53:11:f4:dc:
0e:6b:fb:cc:d0:f5:5b:24:28:4c:ab:b4:d4:6f:d0:
ad:61:ee:1e:eb:78:73:8f:4b:1b:ab:9b:38:ca:58:
dc:38:f3:00:6e:60:1f:7c:fb:1d:4a:30:91:83:ec:
b2:92:20:38:d3:ae:a1:09:36:e5:23:10:56:12:8d:
44:35:52:a7:8a:ca:4d:34:6c:b8:e8:11:4c:4c:ce:
a5:f1:3a:01:47:99:33:c2:83:32:e6:98:4b:29:41:
4f:a0:6a:3a:02:0c:3c:fd:c5:e6:d9:d4:1c:21:70:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7D:9A:C9:99:54:83:B6:0C:63:63:E0:8A:7E:99:ED:E5:40:5B:C7
X509v3 Authority Key Identifier:
keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/A32ayZlUg7YMY2Pgin6Z7eVAW8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.110.0/24
195.93.196.0/23
Signature Algorithm: sha256WithRSAEncryption
70:2c:d7:c3:9b:56:08:48:a9:ce:bc:87:5b:63:88:5d:56:5c:
08:5d:f3:86:5f:0e:eb:80:10:8b:ec:a0:56:88:54:fc:0c:fd:
4d:37:9e:f1:d9:80:85:31:d1:99:01:bb:46:5a:3e:15:62:71:
70:96:53:51:19:a5:c8:4c:da:9c:30:08:4d:c3:29:6b:ac:61:
88:26:3b:b8:2b:3f:da:7b:0c:0c:14:b8:24:24:0a:d0:ce:9c:
5c:fe:ee:1b:74:40:ea:f3:9b:ef:44:a5:f5:2d:20:e8:c2:0d:
52:bf:2c:d5:de:d1:1d:94:52:c3:7f:b2:dc:21:15:4e:78:39:
53:67:b7:15:87:5e:2f:c8:91:40:a6:ee:5d:f5:73:95:a7:bf:
94:3d:1a:89:9e:b1:75:23:74:94:47:48:ab:1f:b5:e8:99:fd:
4a:1f:6d:4c:5b:a7:3f:47:c2:be:78:1f:f0:08:9f:2c:0f:7c:
9d:91:23:b5:66:2a:f5:db:58:11:fd:72:16:18:c5:57:1c:6f:
ba:b4:f4:68:1a:06:e6:0a:b5:5c:f4:9a:35:ae:d2:25:bb:31:
fc:e8:09:b8:8d:70:66:f5:a1:81:bb:09:a3:01:31:1f:1f:16:
ba:ed:bb:b7:9a:2e:ba:92:68:97:e7:e4:6d:70:32:5b:a0:32:
3b:16:b6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 23:10:25 2024 by rpki-client on console-fra.rpki-client.org