Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/a15lA5D1OLi34X1OMtCk0WVlPLk.roa
File: a15lA5D1OLi34X1OMtCk0WVlPLk.roa (raw, json)
Hash identifier: UIn8uAzaSigNOyDqUMWlXhx3m4Rpkc8kOYoLnoeBanw=
Subject key identifier: 6B:5E:65:03:90:F5:38:B8:B7:E1:7D:4E:32:D0:A4:D1:65:65:3C:B9
Certificate issuer: /CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Certificate serial: 018CC86FCFE19028A2DCA43112818945E8B9
Authority key identifier: 0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/a15lA5D1OLi34X1OMtCk0WVlPLk.roa
Signing time: Tue 02 Jan 2024 04:30:19 +0000
ROA not before: Tue 02 Jan 2024 04:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62236
IP address blocks: 185.224.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:cf:e1:90:28:a2:dc:a4:31:12:81:89:45:e8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Validity
Not Before: Jan 2 04:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b5e650390f538b8b7e17d4e32d0a4d165653cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ea:83:66:68:66:14:91:53:17:d2:67:c9:3e:
67:5e:de:4b:ad:a0:13:a8:cc:f3:92:bc:5e:93:a8:
e9:2d:2d:2b:78:60:51:af:1c:8a:0f:b3:cb:03:fb:
1c:62:00:ad:e2:b6:15:19:a4:d1:47:d7:e8:38:7e:
3e:25:9e:6e:bc:82:ca:6e:08:09:89:17:fe:12:7a:
34:a1:b0:bf:87:47:9b:53:55:f0:19:77:82:af:63:
e2:f2:9e:9e:b6:b1:c4:1d:7d:b5:45:30:53:a7:46:
47:d6:fb:38:8d:6f:6f:20:f8:ba:aa:6b:f6:90:f3:
73:ac:3f:44:66:1c:e2:9a:8a:33:17:99:24:96:99:
fb:ae:0c:bd:b9:50:84:a6:9a:8d:67:b1:0d:47:bd:
9a:1b:fc:12:29:fe:55:fd:f2:93:f5:e1:2f:59:9a:
3a:10:f2:6a:46:0b:c8:49:a9:8c:66:61:d3:b8:a6:
f4:1a:fa:e9:72:ce:49:f3:1c:55:f0:b4:97:05:29:
12:83:2d:cf:94:93:c9:cf:25:52:f6:5b:d5:e0:56:
d1:56:c5:8a:f8:d3:ee:d1:ac:2e:98:50:bb:86:9e:
bc:7e:13:14:24:35:ca:69:26:67:a0:05:c2:b5:a7:
ec:06:1b:7b:ac:c4:3e:ca:e2:ce:77:4c:49:75:4e:
7c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5E:65:03:90:F5:38:B8:B7:E1:7D:4E:32:D0:A4:D1:65:65:3C:B9
X509v3 Authority Key Identifier:
keyid:0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/a15lA5D1OLi34X1OMtCk0WVlPLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.28.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:1c:08:22:88:83:b5:7a:4b:63:6d:8c:31:e9:12:6f:c4:3d:
75:09:3f:b8:59:2f:4c:ac:e8:09:ee:c9:69:96:08:65:ea:9f:
e8:6c:2e:04:d8:db:96:5f:f2:3e:43:28:b8:c1:05:31:dd:78:
73:3d:da:3e:14:e1:f8:3d:f1:2e:07:5b:5b:18:1b:70:a7:25:
46:c3:72:f3:f5:1e:e0:d5:79:99:22:b7:45:c7:c3:3d:c6:62:
6d:04:7c:64:38:c4:4a:59:60:52:eb:65:e2:1e:83:a5:9e:f2:
0b:42:b5:11:07:73:43:74:0b:f9:47:00:33:f2:3b:79:ba:11:
6f:40:5d:46:55:08:84:97:04:83:f3:a6:07:85:b6:c3:3e:32:
c9:5e:a8:dc:6b:da:3f:c4:42:6f:90:4d:9b:59:f1:d0:14:ed:
60:59:f5:81:26:e6:26:cc:9c:e0:ee:48:dd:ff:1e:32:88:99:
55:67:3a:28:f1:1e:ec:c8:be:83:c9:b8:89:4d:68:22:29:1c:
2c:6d:f5:b1:db:89:84:d3:a2:ca:fb:9a:75:df:9f:e0:69:a7:
8c:c5:69:02:26:72:56:4e:2c:a7:51:e9:a4:1b:4a:61:4d:a6:
dd:5f:6b:38:f9:8a:95:2f:79:d1:fd:1b:f0:4f:3e:ff:93:11:
b8:24:94:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 02:00:14 2024 by rpki-client on console-fra.rpki-client.org