Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/jl2QMltgucjm6DsSRtvejzHwgVk.roa
File: jl2QMltgucjm6DsSRtvejzHwgVk.roa (raw, json)
Hash identifier: 2ICsrOX/Ng80gGFWmU3eag4CX8TEZwSeNwBpo27725Q=
Subject key identifier: 8E:5D:90:32:5B:60:B9:C8:E6:E8:3B:12:46:DB:DE:8F:31:F0:81:59
Certificate issuer: /CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Certificate serial: 019427B68C5DCEA1F9892AC6B21FF1ED3388
Authority key identifier: 65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/jl2QMltgucjm6DsSRtvejzHwgVk.roa
Signing time: Thu 02 Jan 2025 15:51:02 +0000
ROA not before: Thu 02 Jan 2025 15:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 95.214.48.0/24 maxlen: 24
95.214.49.0/24 maxlen: 24
95.214.50.0/24 maxlen: 24
95.214.51.0/24 maxlen: 24
2a09:d680::/32 maxlen: 48
2a09:d681::/32 maxlen: 48
2a09:d682::/32 maxlen: 48
2a09:d683::/32 maxlen: 48
2a09:d684::/32 maxlen: 48
2a09:d685::/32 maxlen: 48
2a09:d686::/32 maxlen: 48
2a09:d687::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:8c:5d:ce:a1:f9:89:2a:c6:b2:1f:f1:ed:33:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Validity
Not Before: Jan 2 15:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e5d90325b60b9c8e6e83b1246dbde8f31f08159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:72:0a:1d:2a:22:56:b9:a6:00:97:b6:03:5d:
29:82:37:48:04:12:dd:3d:16:6a:e9:67:8a:18:f0:
41:8a:23:f2:07:10:74:a3:96:aa:6f:9a:d8:9a:62:
c7:d5:b4:67:d8:fd:fb:05:e1:38:71:b2:1e:84:ca:
f2:f7:f6:00:1c:0d:20:59:99:68:56:bc:b5:07:19:
5a:91:6a:29:d7:89:88:ca:c1:cf:85:70:b3:d7:76:
0d:d5:8d:44:5f:73:0e:bf:35:0e:f9:e6:e2:af:cb:
88:a7:8b:f4:7f:c0:77:f3:1a:49:30:4c:ad:ad:e7:
59:1c:a7:0d:b4:61:18:4f:28:d1:d2:c2:ce:6d:5f:
6c:01:f3:6a:67:9c:24:5b:70:5c:59:be:bf:48:ce:
dd:f1:6b:f9:96:0f:5f:8e:8e:6f:b0:34:df:e1:53:
e6:86:57:ec:fe:b1:88:16:d8:a0:d5:7b:a8:a7:01:
24:7a:5a:f1:53:83:1a:57:c2:10:06:16:39:d3:a0:
fa:4c:9c:4b:90:68:53:59:8c:1e:b3:e8:c2:a2:0a:
ad:7f:69:7c:2f:df:fc:84:fa:dd:94:5c:a3:f1:2e:
6f:0a:34:4a:b1:fe:a3:95:b5:9f:fd:af:57:13:e1:
1f:e6:6b:11:78:85:d6:11:90:60:d9:46:bd:8d:b8:
21:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5D:90:32:5B:60:B9:C8:E6:E8:3B:12:46:DB:DE:8F:31:F0:81:59
X509v3 Authority Key Identifier:
keyid:65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/jl2QMltgucjm6DsSRtvejzHwgVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.48.0/22
IPv6:
2a09:d680::/29
Signature Algorithm: sha256WithRSAEncryption
48:d1:2a:bf:40:7f:7f:1d:95:a4:ca:17:11:d1:9c:1f:42:64:
85:20:1a:9e:de:ba:1b:2e:a0:8e:3a:76:cd:91:4c:48:7c:0d:
ee:6c:59:13:cf:4a:3b:35:e9:47:93:eb:c8:0c:5e:4b:2e:e3:
60:1d:47:33:e5:b2:56:68:e7:32:c5:6d:c6:0d:5e:00:14:96:
8c:52:78:d5:63:5f:e0:06:4f:5a:cc:f5:e1:7b:7c:3a:bd:e4:
25:66:43:90:3a:25:a6:85:da:5d:df:8f:8a:d3:69:b7:2f:dc:
b5:13:a5:b4:d4:97:50:6b:cc:52:7c:01:8a:23:5a:f9:f5:26:
7a:f5:36:52:16:f4:ca:d5:b4:b9:c2:3b:7a:aa:0c:7c:cb:52:
b3:ac:db:ec:ea:df:95:25:6d:af:0e:1d:e6:0e:6a:75:98:ff:
46:ce:ad:6d:b0:47:c7:db:56:49:4e:2f:49:b2:98:69:57:83:
d9:e8:55:c8:04:e2:72:e2:ad:66:99:1b:02:f4:63:ca:be:44:
da:84:e6:66:98:64:dc:fb:61:66:04:e3:01:f3:e4:94:30:22:
39:a1:54:17:93:5d:5f:d5:80:5b:0e:6f:a4:30:5a:b8:2c:7a:
60:e6:71:c7:60:ab:cc:cb:16:0b:99:3b:e4:2c:35:81:d2:b3:
8d:63:35:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:54:41 2025 by rpki-client