Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/x15WQLljcDBBR_Tvt5NPGcsw2uw.roa
File: x15WQLljcDBBR_Tvt5NPGcsw2uw.roa (raw, json)
Hash identifier: 7MHMzAjHsrEE08oVo6OzEXHJkIN/y7YpvEsjNR1w4AE=
Subject key identifier: C7:5E:56:40:B9:63:70:30:41:47:F4:EF:B7:93:4F:19:CB:30:DA:EC
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018CC6B9392EB4521CAC49EAA8BB05BC8CF1
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/x15WQLljcDBBR_Tvt5NPGcsw2uw.roa
Signing time: Mon 01 Jan 2024 20:31:16 +0000
ROA not before: Mon 01 Jan 2024 20:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 65544
IP address blocks: 45.156.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:39:2e:b4:52:1c:ac:49:ea:a8:bb:05:bc:8c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 20:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c75e5640b96370304147f4efb7934f19cb30daec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:05:be:38:6d:21:92:88:13:7f:b4:cf:fa:50:
ea:fe:b5:6c:c9:a6:9e:bc:3f:52:7d:99:72:b3:aa:
04:7d:ec:06:59:c2:44:e0:a1:51:ae:8f:1b:3f:6a:
4e:e8:48:28:a7:99:12:fe:c2:95:1e:7f:e2:a6:31:
4a:f8:54:cf:29:8a:f8:44:9e:eb:d8:06:68:a7:da:
bb:2b:dd:7d:f8:9e:21:be:b1:c6:f9:98:15:52:22:
b5:d6:c2:8d:d0:d5:9f:d8:1d:88:83:cb:89:bf:79:
e3:39:21:56:01:3a:08:9a:f8:b8:fc:5f:b1:88:41:
a1:12:b8:0f:01:71:78:ef:14:e9:1d:1b:45:6d:a8:
60:e8:45:01:7b:80:0b:36:8e:92:f5:62:e3:57:b6:
48:72:bb:34:ad:57:56:13:1a:c9:d0:91:e8:b9:b4:
f5:55:c6:c7:be:15:5b:75:22:14:b4:31:9c:8b:83:
6f:8a:b3:e0:e1:01:71:5f:13:54:67:f4:d0:e5:fa:
28:0d:88:fd:5c:86:93:dd:c5:03:4e:35:0d:f3:8f:
71:51:7d:9b:71:e1:4c:bb:4c:5e:bc:32:ba:32:57:
fc:eb:0a:b0:81:cf:3f:67:1d:b6:f5:71:b5:19:70:
ff:7b:5b:3c:02:ab:9a:50:da:bd:b0:7a:0f:fd:3a:
23:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5E:56:40:B9:63:70:30:41:47:F4:EF:B7:93:4F:19:CB:30:DA:EC
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/x15WQLljcDBBR_Tvt5NPGcsw2uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.15.0/24
Signature Algorithm: sha256WithRSAEncryption
af:e3:76:ec:97:3d:d4:60:57:29:cf:83:cc:72:10:67:22:56:
76:74:79:52:ec:dc:95:5c:e0:a9:d7:e6:cb:b3:92:38:5e:f9:
5e:91:db:fb:83:10:8d:e1:37:d5:e1:09:69:d3:24:7d:bb:62:
32:65:0c:7a:5d:e6:d0:8c:a8:53:1c:8e:4b:30:29:d5:37:bf:
92:c5:ac:13:44:64:6b:95:53:8f:67:5e:30:74:38:34:8f:9c:
70:19:a0:a2:e3:d2:55:6e:73:b7:b6:06:c3:86:4d:ee:02:f6:
76:0b:60:66:04:68:ae:87:2f:ff:ca:65:cb:05:46:13:e4:30:
2f:78:0e:db:69:44:4e:a8:bd:1c:77:f1:3f:8a:a8:f5:e2:3c:
f4:30:1b:49:e0:f0:02:bd:90:50:99:9b:59:a1:3b:8a:e6:3b:
e6:86:5d:e8:52:23:37:e2:12:17:5d:02:77:e3:0d:00:07:21:
bd:56:3f:6b:76:07:51:04:3f:82:cd:30:73:76:fe:37:d7:d4:
1f:cb:0f:70:e0:66:fc:d6:6d:0c:8e:3f:9e:ea:70:ef:60:e5:
04:ab:0b:c2:c7:9b:67:10:5c:cb:87:b7:f4:d5:50:70:06:16:
5c:a7:1a:3e:04:db:bc:b7:53:7f:50:76:35:4c:54:1e:93:f9:
2f:c9:c5:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuTkutFIcrEnqqLsFvIzxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw
MWY0YzkwHhcNMjQwMTAxMjAzMTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzVlNTY0MGI5NjM3MDMwNDE0N2Y0ZWZiNzkzNGYxOWNiMzBkYWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwW+OG0hkogTf7TP+lDq/rVsyaae
vD9SfZlys6oEfewGWcJE4KFRro8bP2pO6Egop5kS/sKVHn/ipjFK+FTPKYr4RJ7r
2AZop9q7K919+J4hvrHG+ZgVUiK11sKN0NWf2B2Ig8uJv3njOSFWAToImvi4/F+x
iEGhErgPAXF47xTpHRtFbahg6EUBe4ALNo6S9WLjV7ZIcrs0rVdWExrJ0JHoubT1
VcbHvhVbdSIUtDGci4NvirPg4QFxXxNUZ/TQ5fooDYj9XIaT3cUDTjUN849xUX2b
ceFMu0xevDK6Mlf86wqwgc8/Zx229XG1GXD/e1s8AquaUNq9sHoP/TojTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMdeVkC5Y3AwQUf077eTTxnLMNrsMB8GA1UdIwQY
MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt
ODNkNjQ4Zjc5NzQ2LzEveDE1V1FMbGpjREJCUl9UdnQ1TlBHY3N3MnV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2
LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZwPMA0G
CSqGSIb3DQEBCwUAA4IBAQCv43bslz3UYFcpz4PMchBnIlZ2dHlS7NyVXOCp1+bL
s5I4Xvlekdv7gxCN4TfV4Qlp0yR9u2IyZQx6XebQjKhTHI5LMCnVN7+SxawTRGRr
lVOPZ14wdDg0j5xwGaCi49JVbnO3tgbDhk3uAvZ2C2BmBGiuhy//ymXLBUYT5DAv
eA7baUROqL0cd/E/iqj14jz0MBtJ4PACvZBQmZtZoTuK5jvmhl3oUiM34hIXXQJ3
4w0AByG9Vj9rdgdRBD+CzTBzdv4319Qfyw9w4Gb81m0Mjj+e6nDvYOUEqwvCx5tn
EFzLh7f01VBwBhZcpxo+BNu8t1N/UHY1TFQek/kvycUr
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:38:46 2024 by rpki-client on console-fra.rpki-client.org