Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/L5y3sa9ECsb2otajO807yAHxJE4.roa
File: L5y3sa9ECsb2otajO807yAHxJE4.roa (raw, json)
Hash identifier: vxX+mwD28mt0q8/ZJDjzfmnDC6eqQZVehkHatWqy3Uo=
Subject key identifier: 2F:9C:B7:B1:AF:44:0A:C6:F6:A2:D6:A3:3B:CD:3B:C8:01:F1:24:4E
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01906F4FCB3A97702A08A4E34D65E63143B2
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/L5y3sa9ECsb2otajO807yAHxJE4.roa
Signing time: Mon 01 Jul 2024 17:20:18 +0000
ROA not before: Mon 01 Jul 2024 17:20:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215898
IP address blocks: 185.132.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6f:4f:cb:3a:97:70:2a:08:a4:e3:4d:65:e6:31:43:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jul 1 17:20:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f9cb7b1af440ac6f6a2d6a33bcd3bc801f1244e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:28:bd:73:ab:46:3d:98:8d:90:b2:c1:33:a7:
e0:7a:83:76:80:78:12:f4:c5:f5:45:69:a4:0c:3e:
e1:c9:18:28:84:2e:52:d1:d5:c7:8f:43:f0:c2:22:
4b:f9:e7:a5:fb:95:26:6b:ca:34:4d:30:88:6c:44:
91:6e:22:1f:c0:0e:d8:53:ec:13:64:43:fa:ec:74:
c1:1f:02:ed:d4:bd:3d:c4:89:34:23:46:da:a4:f9:
a1:c7:8e:23:d6:28:ed:c9:d4:8b:bf:6c:e2:2d:6b:
0a:72:95:2a:73:3d:93:06:31:a3:7a:4b:14:8e:2a:
21:10:24:b7:b1:de:a5:3f:eb:34:ce:d2:24:20:a9:
75:6c:27:32:98:1f:f2:4a:6c:16:13:5d:60:8a:8b:
f8:cc:89:b6:58:aa:77:80:79:fb:d4:a3:90:d2:3b:
61:39:0f:0b:8a:db:e8:99:b0:54:5c:5d:98:3d:63:
ae:83:02:d1:36:23:df:b8:29:f7:3b:de:16:12:76:
a1:74:bd:7c:d6:9a:72:df:6b:f6:e4:6f:38:ac:19:
bb:78:43:3a:a6:99:ab:05:9b:d6:d0:16:38:69:0c:
03:9f:50:1d:13:0f:6b:8f:dc:9c:58:4a:76:ed:e9:
b5:ec:48:93:8e:a4:65:61:a1:25:1a:06:17:ca:6a:
39:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9C:B7:B1:AF:44:0A:C6:F6:A2:D6:A3:3B:CD:3B:C8:01:F1:24:4E
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/L5y3sa9ECsb2otajO807yAHxJE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.53.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:32:bd:02:b8:b2:22:c7:de:00:b0:54:0b:e0:a8:c2:87:af:
4f:66:40:b7:e8:ed:8f:d7:85:51:c5:5c:5b:88:4c:95:49:ca:
66:cb:18:ff:05:e3:0b:1f:d1:dc:65:ec:5d:ae:dc:0a:7b:9d:
4d:a5:31:89:12:79:c3:5f:47:4f:b2:e3:01:d2:01:9b:38:aa:
63:d9:30:5e:31:d9:99:6a:a7:a3:5a:80:d5:49:33:81:5e:35:
3c:12:45:79:2f:08:0f:06:9f:a5:ee:f2:57:c4:97:09:d2:d3:
3d:70:92:d8:5f:4f:80:43:fc:01:a7:e7:15:4e:d4:cf:34:7a:
4e:6f:cc:76:b3:10:04:df:6a:d5:7a:4c:1e:9e:ac:10:65:f5:
18:00:fc:2f:c0:28:77:90:cf:fc:53:64:6a:e0:db:1f:06:fc:
4b:99:36:ca:14:25:62:8e:81:0f:3d:3f:55:c8:fd:69:e4:c9:
ce:08:84:97:ad:5c:ce:53:84:a6:24:38:31:f6:ff:4d:c1:36:
ad:b4:70:54:75:ab:41:15:d7:88:63:8a:dd:9b:e2:2f:e1:b4:
d6:c2:21:2a:d9:2e:41:cc:a9:eb:8f:9a:5e:4b:1c:28:bd:f0:
c4:8f:aa:db:63:3b:1e:ff:7b:10:91:b7:f6:a1:9c:83:27:1e:
11:21:01:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:00:37 2024 by rpki-client on console-fra.rpki-client.org