Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/ls30qglQhlzT6rdumlShksLULN4.roa
File: ls30qglQhlzT6rdumlShksLULN4.roa (raw, json)
Hash identifier: QEAqfnuTNOFE0+L1NYjaIvQVrbFOKL5GAQ0VuflmL9E=
Subject key identifier: 96:CD:F4:AA:09:50:86:5C:D3:EA:B7:6E:9A:54:A1:92:C2:D4:2C:DE
Certificate issuer: /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Certificate serial: 01942143D62823479E57585F79AE439BEB28
Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/ls30qglQhlzT6rdumlShksLULN4.roa
Signing time: Wed 01 Jan 2025 09:48:01 +0000
ROA not before: Wed 01 Jan 2025 09:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59676
IP address blocks: 95.215.175.0/24 maxlen: 24
2001:67c:2278::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d6:28:23:47:9e:57:58:5f:79:ae:43:9b:eb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Validity
Not Before: Jan 1 09:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96cdf4aa0950865cd3eab76e9a54a192c2d42cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:03:6a:c8:0f:05:7b:db:af:22:22:f1:f2:
c2:af:d9:ee:f4:f0:96:06:e5:76:bd:e3:6f:ca:44:
c3:b6:b0:93:91:da:25:a1:91:25:6c:79:10:05:dc:
ba:90:8c:1c:a6:52:d1:59:5b:53:57:cb:b3:be:59:
62:18:7f:81:14:04:ef:38:23:f2:df:00:2c:bb:c7:
76:fc:c0:44:62:bc:bb:cc:ae:a5:81:ca:4c:92:76:
51:24:e6:31:4e:fb:74:13:b1:8f:78:18:3d:49:0a:
e7:cd:2a:a4:1f:99:07:1f:cd:d0:ea:98:1f:da:c7:
4d:a1:d0:e1:55:08:a4:c1:f3:38:87:0e:3c:b0:c0:
9a:75:77:40:cb:27:9c:59:dc:9a:c8:48:c5:8a:95:
5b:d3:32:26:d8:9c:b0:66:28:9f:d3:d9:91:b7:c9:
43:bd:3e:9d:75:8c:ed:f2:cf:e4:69:74:d0:45:5c:
4d:a7:df:fc:89:39:a9:5c:af:9f:f2:bb:5e:e1:31:
f4:c0:8b:4b:f0:0f:79:5a:1a:a4:b4:bd:d2:3f:5a:
e8:64:71:ac:0d:f2:53:b3:cd:bc:df:62:45:8b:de:
55:1d:62:03:de:03:ce:7a:cd:8f:0f:ed:5f:7d:22:
f3:1d:cc:68:d6:e8:d7:a4:e1:be:ca:d6:55:12:75:
76:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CD:F4:AA:09:50:86:5C:D3:EA:B7:6E:9A:54:A1:92:C2:D4:2C:DE
X509v3 Authority Key Identifier:
keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/ls30qglQhlzT6rdumlShksLULN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.175.0/24
IPv6:
2001:67c:2278::/48
Signature Algorithm: sha256WithRSAEncryption
4a:28:1e:59:7f:ff:8e:1a:34:4c:b6:29:62:e8:6e:5e:fd:d9:
50:90:8c:12:f4:e0:f7:77:b8:9e:7f:f7:85:90:2a:b6:31:a9:
d4:7f:b7:96:db:15:57:2b:bc:ac:ab:7b:27:a4:34:62:4e:00:
02:c3:89:5d:29:5b:55:54:ba:8e:3e:a0:f3:b8:39:61:cc:10:
e3:58:d9:63:c1:e6:14:3d:87:46:6a:3a:4f:c7:09:56:a7:70:
ea:d9:fd:81:ce:96:82:fe:2e:a8:53:e0:45:26:e1:e9:12:c8:
94:02:ef:ae:13:f4:ec:45:5b:6a:ec:e7:a2:be:2c:85:82:93:
35:30:3b:bc:32:85:64:28:11:69:b3:d9:39:b7:bf:35:3f:64:
28:1f:34:98:fb:61:12:4d:12:a7:ce:1d:ab:4f:b7:4c:41:e1:
b0:c0:d0:f1:82:87:60:f7:65:02:61:07:63:6a:2d:b9:2f:21:
65:43:64:79:8b:b3:53:c7:e3:7b:5b:e6:aa:99:e5:df:95:e8:
d8:a4:d9:a1:6b:09:c7:a3:45:ed:49:2a:ae:ff:fa:e6:01:92:
8f:91:66:eb:05:e1:80:fb:be:7c:c3:ad:44:29:27:d2:7c:cc:
c0:a7:e6:4e:6c:23:e2:ff:b5:63:14:eb:22:72:d1:45:e2:62:
6f:df:94:da
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQhQ9YoI0eeV1hfea5Dm+soMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMmU0ZmQyMTlmNWI3N2NlODBjZGZhZjllM2E2NDQxZGVj
NTAwNDIwHhcNMjUwMTAxMDk0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmNkZjRhYTA5NTA4NjVjZDNlYWI3NmU5YTU0YTE5MmMyZDQyY2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVADasgPBXvbryIi8fLCr9nu9PCW
BuV2veNvykTDtrCTkdoloZElbHkQBdy6kIwcplLRWVtTV8uzvlliGH+BFATvOCPy
3wAsu8d2/MBEYry7zK6lgcpMknZRJOYxTvt0E7GPeBg9SQrnzSqkH5kHH83Q6pgf
2sdNodDhVQikwfM4hw48sMCadXdAyyecWdyayEjFipVb0zIm2JywZiif09mRt8lD
vT6ddYzt8s/kaXTQRVxNp9/8iTmpXK+f8rte4TH0wItL8A95WhqktL3SP1roZHGs
DfJTs82832JFi95VHWID3gPOes2PD+1ffSLzHcxo1ujXpOG+ytZVEnV21wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJbN9KoJUIZc0+q3bppUoZLC1CzeMB8GA1UdIwQY
MBaAFA4uT9IZ9bd86Azfr546ZEHexQBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGk1UDBobjF0M3pvRE4tdm5qcGtRZDdGQUVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lMTEyMjQtNjFjNy00Nzg2LTg2ZTkt
MjM4ZmVlNjkyNDMwLzEvbHMzMHFnbFFobHpUNnJkdW1sU2hrc0xVTE40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9lMTEyMjQtNjFjNy00Nzg2LTg2ZTktMjM4ZmVlNjkyNDMw
LzEvRGk1UDBobjF0M3pvRE4tdm5qcGtRZDdGQUVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAX9evMA8E
AgACMAkDBwAgAQZ8IngwDQYJKoZIhvcNAQELBQADggEBAEooHll//44aNEy2KWLo
bl792VCQjBL04Pd3uJ5/94WQKrYxqdR/t5bbFVcrvKyreyekNGJOAALDiV0pW1VU
uo4+oPO4OWHMEONY2WPB5hQ9h0ZqOk/HCVancOrZ/YHOloL+LqhT4EUm4ekSyJQC
764T9OxFW2rs56K+LIWCkzUwO7wyhWQoEWmz2Tm3vzU/ZCgfNJj7YRJNEqfOHatP
t0xB4bDA0PGCh2D3ZQJhB2NqLbkvIWVDZHmLs1PH43tb5qqZ5d+V6Nik2aFrCcej
Re1JKq7/+uYBko+RZusF4YD7vnzDrUQpJ9J8zMCn5k5sI+L/tWMU6yJy0UXiYm/f
lNo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:04 2025 by rpki-client