Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/ESIPKtG6AoOSyUPwfJTZyZJsqNU.roa
File: ESIPKtG6AoOSyUPwfJTZyZJsqNU.roa (raw, json)
Hash identifier: zR2AbNVFcmwb4RZGRN7/TAkW+GRcJUfjK0YuwiH6Esc=
Subject key identifier: 11:22:0F:2A:D1:BA:02:83:92:C9:43:F0:7C:94:D9:C9:92:6C:A8:D5
Certificate issuer: /CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Certificate serial: 018CC94D6A465CC7A1D84B9D942570F0B092
Authority key identifier: F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/ESIPKtG6AoOSyUPwfJTZyZJsqNU.roa
Signing time: Tue 02 Jan 2024 08:32:23 +0000
ROA not before: Tue 02 Jan 2024 08:32:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35161
IP address blocks: 195.95.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:6a:46:5c:c7:a1:d8:4b:9d:94:25:70:f0:b0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Validity
Not Before: Jan 2 08:32:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11220f2ad1ba028392c943f07c94d9c9926ca8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d1:25:62:9c:b8:bc:1b:04:a1:09:90:71:8f:
20:15:08:43:56:07:11:b6:63:80:21:19:f2:9d:95:
34:64:3c:4e:d9:2c:ae:a9:51:e9:8a:80:34:77:49:
a3:a1:1d:6e:19:fe:8b:f6:ae:51:08:42:1d:c4:87:
9b:4d:ce:61:bb:c7:d3:81:62:cc:3d:33:e9:42:b4:
23:75:59:6b:f8:ae:34:d0:22:ea:11:2e:48:d2:43:
2f:67:95:0a:66:23:8d:25:81:50:a7:e9:22:4b:25:
aa:cc:d1:a2:a1:3d:c3:b7:2c:8d:ac:3a:82:a2:7a:
31:3d:21:7f:89:bc:c7:5d:df:8a:be:e8:2e:fb:f6:
d1:51:0b:51:64:ea:62:9e:e8:40:d5:3f:5f:3b:35:
9d:f8:bd:9c:79:c4:bb:25:a6:02:fa:bb:04:a7:c3:
d7:de:57:33:af:e6:b2:5d:fc:22:37:67:ad:e7:ce:
18:c1:b5:a3:9a:d0:29:be:a0:7f:17:52:8d:e4:19:
4f:fb:ba:be:9b:aa:b1:6d:ff:9d:73:ee:33:02:9c:
f5:c4:b0:c3:d0:05:4b:5c:d7:33:34:f4:87:5d:8f:
2b:a9:ae:50:5d:cb:29:49:e2:9c:e7:66:72:31:81:
3d:64:5b:0c:0e:d8:b3:6c:6d:39:82:37:46:61:29:
0e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:22:0F:2A:D1:BA:02:83:92:C9:43:F0:7C:94:D9:C9:92:6C:A8:D5
X509v3 Authority Key Identifier:
keyid:F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/ESIPKtG6AoOSyUPwfJTZyZJsqNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.152.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ed:9d:9d:d5:60:b3:ea:2d:2d:2e:f8:d7:7a:a5:b1:43:8b:
57:f6:38:54:45:02:3d:5e:c2:c9:9d:71:27:14:d8:d4:58:17:
80:11:b6:3a:b1:c2:26:d1:d1:c1:44:36:0a:4e:d7:34:2d:37:
20:1e:6e:e7:b0:ec:68:39:1b:1e:bb:04:63:36:e1:82:fd:d9:
0e:3a:a5:e3:f3:98:22:eb:fe:84:62:01:33:ab:4c:4e:81:b1:
5a:73:16:5d:74:e2:86:30:30:00:ed:2b:81:db:a8:a1:20:ba:
65:96:20:f9:48:8e:8f:b0:fd:df:74:e1:44:14:05:3f:68:ea:
ef:c4:83:4a:4a:77:c2:a1:7f:ee:46:6d:20:fe:f5:d2:37:32:
37:39:94:87:ca:e7:6f:dd:c1:84:c3:81:f9:5d:12:5b:1c:cf:
cb:b4:ce:30:5e:ba:87:38:6a:7c:91:b5:d5:6f:68:ce:f6:82:
4f:29:3f:f7:2e:e3:c8:35:5d:73:13:1d:34:f7:1e:fb:cc:81:
dd:14:5f:3e:b6:81:69:58:fe:08:3a:07:f4:70:9d:0d:16:b9:
5d:02:cc:db:be:e0:48:05:b9:7e:69:e6:02:c3:fa:3c:ce:00:
f7:d2:fe:32:12:96:9d:77:99:c6:35:b4:ab:9d:10:a6:7b:da:
37:22:1c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 04:40:31 2024 by rpki-client on console-ams.rpki-client.org