Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/Kq4K15_Ub3XI7IzjWsq7Rwn-JGc.roa
File: Kq4K15_Ub3XI7IzjWsq7Rwn-JGc.roa (raw, json)
Hash identifier: 1TDfHybtzLaZite/JJzdxJlXyCPCVks+bItTmrJqRzg=
Subject key identifier: 2A:AE:0A:D7:9F:D4:6F:75:C8:EC:8C:E3:5A:CA:BB:47:09:FE:24:67
Certificate issuer: /CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Certificate serial: 018CC727405689B6A980CFF3799A8832626D
Authority key identifier: BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/Kq4K15_Ub3XI7IzjWsq7Rwn-JGc.roa
Signing time: Mon 01 Jan 2024 22:31:27 +0000
ROA not before: Mon 01 Jan 2024 22:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203682
IP address blocks: 185.4.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:40:56:89:b6:a9:80:cf:f3:79:9a:88:32:62:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Validity
Not Before: Jan 1 22:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2aae0ad79fd46f75c8ec8ce35acabb4709fe2467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7f:1e:8e:8d:a3:ee:d6:77:5a:0c:6f:7c:ef:
e6:8f:52:86:c7:8d:c7:5f:ac:5b:1d:4b:1d:e7:90:
7b:ba:ab:06:83:03:6c:8d:05:cb:9f:f4:99:85:74:
9c:51:d1:9e:7b:0c:3d:c6:44:38:c2:3c:1f:64:38:
91:6b:b1:9e:b4:61:87:2a:94:f2:aa:b2:d2:81:8e:
49:9e:bb:6d:20:11:d8:70:90:39:35:9b:7e:f8:59:
8c:72:86:1b:94:5d:47:cd:31:9a:a0:ad:8a:c0:99:
d3:f3:94:c4:1e:a5:21:0f:98:d1:c2:59:c7:a7:5d:
92:45:82:40:ed:9b:1f:c5:06:d0:22:12:bb:2a:1e:
9f:49:04:ea:9c:2f:bc:db:32:2e:45:f2:b8:a0:9d:
1c:71:3a:ae:ff:1a:c7:4f:93:c4:ed:da:ae:21:2e:
a6:78:87:bd:a5:3c:1e:83:05:93:87:5d:c3:2e:12:
d8:03:b4:2d:c1:8a:0f:5b:f1:c4:d0:60:ac:b1:0e:
d1:df:39:fd:e9:d1:c4:94:34:d3:a6:f7:49:a8:bb:
d9:08:a3:e8:07:fb:17:2a:ab:34:4d:b0:cf:61:26:
50:ff:ee:83:60:fd:1d:c5:48:c2:21:c9:ec:b2:a2:
30:e2:35:bf:4b:9b:9b:b2:82:3d:55:a0:14:1a:13:
60:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AE:0A:D7:9F:D4:6F:75:C8:EC:8C:E3:5A:CA:BB:47:09:FE:24:67
X509v3 Authority Key Identifier:
keyid:BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/Kq4K15_Ub3XI7IzjWsq7Rwn-JGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.15.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:82:4b:b2:12:f8:b0:85:ec:20:2f:11:44:ea:8e:a6:58:5c:
ec:f7:b2:f2:33:59:81:f8:a0:85:51:d2:12:ba:77:0e:98:95:
64:64:27:d4:6f:f4:ed:56:17:db:b6:fe:07:bf:23:d0:29:a1:
c8:4a:6f:79:f6:ad:0a:7b:ec:b2:60:e3:57:79:e5:4b:35:f0:
70:91:00:ad:88:fb:88:77:ce:68:2a:85:88:e4:50:98:c5:fd:
fa:cc:7a:5c:aa:0d:d7:e2:37:33:03:fd:a4:51:f6:27:40:ed:
5d:c0:a5:bd:a9:fd:3f:b3:90:c1:a3:5a:f8:39:2d:8a:f4:88:
56:c9:26:5c:dc:09:4c:45:ed:24:57:d4:9a:b5:d1:ce:b1:2f:
23:d7:3e:5e:7b:33:54:9b:48:07:01:ee:a2:cb:db:9e:c4:3c:
47:5d:61:14:70:c5:82:a3:fe:a4:6c:05:c6:d8:1f:bf:23:1d:
f2:f1:62:4f:3f:3b:68:cd:b0:a2:66:84:68:7d:86:c7:97:d5:
91:3d:3a:2f:c0:2b:2a:21:2c:1b:7e:5d:3b:1c:e2:c0:a1:0c:
21:7d:6b:74:75:d3:a8:99:48:38:a4:1d:fb:3a:5a:e6:b1:d0:
e2:22:70:ae:fb:94:4a:be:57:91:87:36:36:b6:d1:d1:ab:b4:
ff:03:b6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:52:25 2024 by rpki-client on console-fra.rpki-client.org