Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/Rar_D51RKjRXOdqruNYK4DGVtvs.roa
File: Rar_D51RKjRXOdqruNYK4DGVtvs.roa (raw, json)
Hash identifier: zy+1ZLCf+pNtJdxg4Ob/Rqd01hVTLWIo1rdOxXP+0Yw=
Subject key identifier: 45:AA:FF:0F:9D:51:2A:34:57:39:DA:AB:B8:D6:0A:E0:31:95:B6:FB
Certificate issuer: /CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Certificate serial: 018CC726A00DFB7719FC8995E09812C7B712
Authority key identifier: 00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/Rar_D51RKjRXOdqruNYK4DGVtvs.roa
Signing time: Mon 01 Jan 2024 22:30:46 +0000
ROA not before: Mon 01 Jan 2024 22:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209682
IP address blocks: 95.214.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:a0:0d:fb:77:19:fc:89:95:e0:98:12:c7:b7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Validity
Not Before: Jan 1 22:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45aaff0f9d512a345739daabb8d60ae03195b6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1e:98:06:83:a3:29:03:c0:40:c1:05:05:85:
06:ad:ea:5a:57:1d:3a:4e:e6:d4:56:f4:6e:0f:98:
fb:bc:6c:2b:5f:eb:5d:2a:0f:0f:28:a2:2b:8c:3b:
80:c5:23:6e:8a:42:b6:cf:87:e8:62:1b:96:a1:99:
e6:0f:09:19:76:42:93:d3:02:38:b3:f5:7d:a9:8c:
57:cc:73:74:da:2c:45:3c:77:9e:26:af:91:cf:dc:
a9:4a:99:b7:13:5b:10:12:6c:b0:68:17:e2:98:b0:
ce:55:5f:00:a2:d5:24:be:08:6a:4d:00:13:06:5a:
80:83:25:00:da:b7:53:7c:fe:a8:e5:77:d1:28:ca:
40:58:6e:ca:c2:5c:2a:5b:a4:2d:21:b7:37:9d:e5:
34:28:0e:e9:80:25:bf:94:d3:26:d0:c1:1d:15:b1:
0a:5d:9a:60:bc:cc:86:6d:36:a3:50:9a:a1:14:4b:
f9:79:ca:50:23:cc:34:b3:fd:1a:90:2d:b4:b2:8b:
c5:58:88:d7:ff:f7:59:7d:63:35:db:83:ad:af:c6:
92:c0:84:d6:49:00:76:0e:a6:62:b9:44:bd:0b:c1:
83:15:73:51:4d:bd:ed:a2:34:8f:38:d8:40:6d:00:
a6:26:19:75:4f:2a:29:52:f5:fb:76:10:01:fc:7a:
ac:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AA:FF:0F:9D:51:2A:34:57:39:DA:AB:B8:D6:0A:E0:31:95:B6:FB
X509v3 Authority Key Identifier:
keyid:00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/Rar_D51RKjRXOdqruNYK4DGVtvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.64.0/22
Signature Algorithm: sha256WithRSAEncryption
85:f8:be:0f:4e:07:f5:8c:d7:8c:78:92:2d:a3:b9:fe:d0:de:
bb:f6:6f:66:1f:71:7f:98:6a:68:4d:6c:ab:37:e9:8e:21:7b:
83:11:0f:27:8f:c9:88:24:5a:be:77:1c:95:70:43:2a:b2:81:
66:79:93:30:ce:48:05:aa:24:3b:6f:50:d3:35:d4:da:b6:d3:
6a:93:90:99:1b:49:66:59:d2:77:5a:cf:48:f7:41:ac:44:1a:
a7:f2:05:e9:87:2e:1e:6e:9e:9f:d2:1c:ae:57:97:9d:bb:fd:
59:17:dd:59:32:c3:20:c8:86:93:48:45:f1:88:ca:69:08:f9:
f5:be:30:8e:1d:b5:fc:c7:e0:0f:f7:9f:09:c3:99:36:45:0c:
f0:7d:2e:48:36:09:e1:34:b1:78:8c:1e:a9:8b:85:fc:ea:bd:
33:12:8e:02:dd:7a:b1:db:b2:bc:81:b2:61:4f:be:58:b5:cf:
de:f8:ed:8d:86:f9:e3:f8:84:83:e2:56:ef:6c:e5:b1:3f:56:
65:cc:e5:bf:2a:ed:54:fb:cb:b5:e2:1a:26:45:5f:71:68:b0:
b4:cf:0f:39:15:d4:26:5f:31:47:18:b4:4d:b3:41:40:42:d4:
0b:01:8b:38:98:02:f8:7b:58:c4:4f:1a:fa:3c:34:db:6a:f7:
ea:a3:59:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 16:16:36 2024 by rpki-client on console-fra.rpki-client.org