Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/l65Ppe-3BZuwBeBIjCE2A2MQcQo.roa
File: l65Ppe-3BZuwBeBIjCE2A2MQcQo.roa (raw, json)
Hash identifier: JHdZdB6XVyTBV57ZGEVfXpz/1sfOe31YCHyftFuv1Eo=
Subject key identifier: 97:AE:4F:A5:EF:B7:05:9B:B0:05:E0:48:8C:21:36:03:63:10:71:0A
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018CC94E37694B504BFB363B0641959AAF30
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/l65Ppe-3BZuwBeBIjCE2A2MQcQo.roa
Signing time: Tue 02 Jan 2024 08:33:15 +0000
ROA not before: Tue 02 Jan 2024 08:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58052
IP address blocks: 194.15.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:37:69:4b:50:4b:fb:36:3b:06:41:95:9a:af:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 08:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97ae4fa5efb7059bb005e0488c2136036310710a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ab:69:9e:48:b8:98:52:ad:cb:f7:4c:f9:28:
da:0e:b4:ff:bf:cc:4d:e4:84:95:f9:06:b4:01:a3:
a3:a1:13:51:54:a2:f7:14:06:93:8d:74:67:33:53:
5f:40:21:d9:1d:f7:1c:b5:cd:32:04:93:66:ec:13:
93:7b:3b:b4:8e:72:28:72:51:80:92:f1:1b:f5:96:
a1:e7:b3:61:fc:61:f9:1a:cb:45:5d:a5:11:bf:94:
54:c8:3a:93:a9:e8:bb:a8:2d:58:f1:dd:ce:cb:3c:
ec:18:ae:9e:99:df:db:2d:77:ed:ca:26:af:73:32:
ef:ec:a5:18:cb:e3:43:1b:c8:79:2a:02:4a:bf:e5:
1a:eb:b2:b8:09:5d:a6:12:ff:c5:77:2f:84:a1:a0:
44:68:89:f8:7f:6d:ef:26:e7:df:25:85:41:7f:47:
65:52:1c:7f:e7:53:9e:f7:90:a4:97:2d:70:51:01:
25:4b:5b:e4:8c:65:9e:a1:92:e1:cd:8d:77:ed:bb:
71:ae:1c:25:6e:3a:1f:c5:b0:01:07:6b:ee:35:68:
1d:12:ab:ac:71:f1:15:05:4d:ed:a9:77:f6:f7:99:
d6:8e:eb:c1:ea:ea:98:73:7e:81:29:8a:1b:01:ca:
2e:82:f4:29:d5:d6:88:12:e3:f3:5b:f5:36:a4:9a:
41:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AE:4F:A5:EF:B7:05:9B:B0:05:E0:48:8C:21:36:03:63:10:71:0A
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/l65Ppe-3BZuwBeBIjCE2A2MQcQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.38.0/24
Signature Algorithm: sha256WithRSAEncryption
34:0b:50:1b:d0:41:64:15:80:12:6b:bb:79:a7:c2:26:0d:02:
2e:3f:f7:d5:87:1c:1e:12:4f:08:2d:c4:56:b7:69:3e:01:16:
a1:18:5b:44:62:26:4c:f2:89:21:0c:73:74:16:76:1f:e5:d7:
7c:ef:88:18:76:c0:17:55:6d:da:33:2c:74:a1:9a:9d:dc:18:
71:f5:2d:c2:a8:60:b4:8f:72:48:fc:ca:c4:49:35:e9:26:8e:
ce:b2:51:78:bf:6a:b7:7f:8d:cd:ca:83:72:fc:f1:20:56:0a:
bf:b9:dc:f2:6e:e3:99:01:81:fd:e6:2f:d0:b1:90:0b:e8:8a:
90:b3:ff:00:16:9a:83:05:33:6b:ea:08:d8:de:8f:0b:36:2c:
bc:ab:b6:f5:ee:16:b1:88:68:68:9a:25:0e:d2:db:27:6a:74:
87:fb:46:58:c2:a6:c9:b4:7c:0e:15:4c:84:54:d8:c1:df:0e:
cf:94:77:19:be:f2:c6:dd:8a:d0:0a:ef:35:a5:eb:4b:4f:9a:
ee:f5:e0:75:6e:a4:f9:77:00:04:44:61:52:67:d5:32:d9:e4:
9d:f8:d7:7c:a3:c7:5b:95:6c:d0:4c:7c:fe:13:3e:5a:70:6d:
6c:b0:9f:3a:9a:ed:5b:10:85:6b:f9:6f:53:e9:c3:75:91:d0:
10:d1:c4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:00:35 2024 by rpki-client on console-fra.rpki-client.org