Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/JdHVrtrj0kFN-8TcyUni4bw6LEU.roa
File: JdHVrtrj0kFN-8TcyUni4bw6LEU.roa (raw, json)
Hash identifier: JmgR9+iKN5XVkBEQeH/ADarpjAi970qSWgdB0bmIuq8=
Subject key identifier: 25:D1:D5:AE:DA:E3:D2:41:4D:FB:C4:DC:C9:49:E2:E1:BC:3A:2C:45
Certificate issuer: /CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Certificate serial: 018CC8DFB2C54AE460383B47558E270168DA
Authority key identifier: 65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/JdHVrtrj0kFN-8TcyUni4bw6LEU.roa
Signing time: Tue 02 Jan 2024 06:32:32 +0000
ROA not before: Tue 02 Jan 2024 06:32:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 95.214.50.0/24 maxlen: 24
95.214.51.0/24 maxlen: 24
95.214.48.0/24 maxlen: 24
95.214.49.0/24 maxlen: 24
2a09:d682::/32 maxlen: 48
2a09:d685::/32 maxlen: 48
2a09:d686::/32 maxlen: 48
2a09:d681::/32 maxlen: 48
2a09:d683::/32 maxlen: 48
2a09:d684::/32 maxlen: 48
2a09:d687::/32 maxlen: 48
2a09:d680::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:b2:c5:4a:e4:60:38:3b:47:55:8e:27:01:68:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Validity
Not Before: Jan 2 06:32:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25d1d5aedae3d2414dfbc4dcc949e2e1bc3a2c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:2d:9f:86:df:2d:9c:e0:24:63:61:51:3d:
65:87:0b:e6:c5:db:70:0e:38:85:7f:9f:5d:1d:6e:
6f:ba:54:5a:c6:41:d4:81:ae:e0:42:0c:c1:a7:2a:
aa:4a:a1:62:a7:f9:f9:01:54:94:e6:2d:fb:fe:ea:
d1:4e:9b:39:15:0b:c9:84:9c:de:f6:6a:e8:c8:dd:
9b:d9:c0:6c:07:3f:b3:9d:0d:01:1b:d8:df:bf:0b:
95:3d:9f:41:e2:06:c1:84:d8:e7:be:9f:62:83:dc:
a3:5b:15:29:53:0e:0a:14:3c:fd:ea:e2:08:59:eb:
dc:5c:49:47:42:33:80:28:71:f9:08:54:ac:ca:af:
56:81:c8:68:e6:1a:e5:a7:fd:09:b4:33:e3:45:ee:
58:2d:07:06:a3:ef:05:77:d7:33:c3:88:68:b8:70:
0f:08:82:8e:de:be:de:eb:6e:17:28:f8:d1:dc:fb:
a9:3a:c6:20:d6:9a:53:ba:ab:a1:32:fa:84:ea:a0:
43:46:f1:62:b0:1d:18:c5:36:18:94:04:38:e1:6d:
4f:f1:f7:98:68:ea:ea:59:fa:89:55:13:5c:07:6d:
2c:b0:c0:09:48:ee:b4:1c:5a:01:27:cf:bb:5a:43:
8e:7c:57:1d:35:47:3f:c3:89:72:d6:33:75:84:8d:
04:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D1:D5:AE:DA:E3:D2:41:4D:FB:C4:DC:C9:49:E2:E1:BC:3A:2C:45
X509v3 Authority Key Identifier:
keyid:65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/JdHVrtrj0kFN-8TcyUni4bw6LEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.48.0/22
IPv6:
2a09:d680::/29
Signature Algorithm: sha256WithRSAEncryption
17:40:ba:7d:45:54:15:89:7b:40:a7:a4:2b:a1:05:5b:f2:89:
12:77:71:3b:4b:ea:c3:f7:2e:2a:a3:e3:1d:99:fd:aa:c7:f5:
ca:9b:38:67:78:e3:eb:f2:b8:4e:6e:91:9e:4d:04:5f:c0:9c:
b3:1e:4e:66:2e:03:32:3c:9d:67:9a:b9:ff:90:0b:b5:fb:af:
c5:86:04:e3:ff:f9:2d:62:8d:62:f6:a2:0e:4b:c4:a8:f4:5e:
76:99:dd:31:6a:89:d2:fd:85:01:66:f1:b5:d3:a9:88:2b:42:
0d:e2:ee:b6:31:57:43:2f:bb:42:ef:6b:be:5f:f8:d3:6e:75:
66:41:e0:a8:1d:7f:38:9c:ef:a9:1a:bb:21:c8:ba:4f:91:44:
27:14:30:8c:e1:49:5d:e7:f8:aa:e4:40:56:2e:99:b7:6f:00:
bd:0c:dd:bc:5d:2c:38:5b:a2:be:a8:4a:f5:a0:26:6a:84:be:
f5:ad:91:11:87:a2:24:2e:34:5d:eb:71:3e:fb:82:59:5b:46:
89:5d:20:bb:e4:83:e5:3a:20:10:21:54:77:ab:df:f8:cb:fe:
83:98:2f:67:07:83:b7:5b:5e:06:20:61:2c:1f:b8:b5:27:5f:
91:8c:f4:0c:a0:d4:89:0e:ee:63:99:3d:b2:0b:7c:4c:c8:56:
59:24:9a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 00:54:19 2024 by rpki-client on console-fra.rpki-client.org