Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/0WTp0Wqb4g6G4QIMEQOUB5K1lSI.roa
File: 0WTp0Wqb4g6G4QIMEQOUB5K1lSI.roa (raw, json)
Hash identifier: LW4lJ6d6xtDINGIh1cD9XFqi/Qwo34mEfbYhahOAM5s=
Subject key identifier: D1:64:E9:D1:6A:9B:E2:0E:86:E1:02:0C:11:03:94:07:92:B5:95:22
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 018CC42458F18D68A7CDE27D2836F9EBA6AB
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/0WTp0Wqb4g6G4QIMEQOUB5K1lSI.roa
Signing time: Mon 01 Jan 2024 08:29:25 +0000
ROA not before: Mon 01 Jan 2024 08:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200096
IP address blocks: 185.182.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:58:f1:8d:68:a7:cd:e2:7d:28:36:f9:eb:a6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Jan 1 08:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d164e9d16a9be20e86e1020c1103940792b59522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:80:0f:4d:43:1f:c2:95:b9:02:5d:5d:5b:28:
f9:48:37:1f:15:25:f7:9b:dd:bc:58:eb:45:49:82:
81:cb:5e:c3:19:e7:b4:45:f7:88:d2:6a:ed:45:c8:
76:80:58:18:91:2b:64:5c:80:91:b3:b7:11:ad:99:
c1:9d:56:6d:d1:fa:ce:e4:19:6a:fc:e8:2d:32:7e:
81:0f:9e:1c:bf:52:eb:52:d9:b3:d2:08:5a:39:f2:
84:c9:31:73:52:2b:5f:cc:84:31:1c:ca:72:3e:71:
d1:89:ab:e0:fd:fd:37:9b:6c:60:fc:8b:25:e4:a9:
52:f2:8f:1d:97:e4:4e:f5:94:e0:eb:05:9a:91:ab:
a2:c3:3d:c6:f3:e0:9e:9a:43:a4:bb:a0:53:fe:ec:
73:a2:c3:dd:1d:3c:7e:a5:b4:8b:6f:5b:08:c5:08:
60:9b:1b:71:bf:e5:15:a9:17:15:09:19:33:e2:36:
4e:9a:65:6e:43:db:9a:13:9a:59:d2:3a:d5:be:ab:
48:d3:64:ce:1f:20:1a:28:e7:b5:b7:4c:76:59:ac:
96:a0:5d:db:ed:f8:ee:04:59:f9:0c:f0:44:a7:b0:
11:26:42:65:2c:4a:d9:91:ba:22:f2:a9:40:be:1d:
83:29:1b:62:11:8d:5a:8b:74:b3:31:dc:14:37:eb:
0f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:64:E9:D1:6A:9B:E2:0E:86:E1:02:0C:11:03:94:07:92:B5:95:22
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/0WTp0Wqb4g6G4QIMEQOUB5K1lSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.15.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:5b:ce:af:ca:fc:98:81:e4:44:9a:25:c4:9e:50:df:05:8a:
1c:8b:8a:ad:61:89:a3:ea:e6:1c:4d:df:d7:70:34:a8:0a:f4:
a0:28:ae:d2:f1:7b:65:3e:ce:93:ae:15:0d:3f:36:a5:d8:9d:
4a:b0:ff:0e:d9:14:cd:fa:eb:08:e0:4f:6d:72:ac:ee:84:45:
c5:32:0c:99:12:f5:44:d2:92:06:a9:16:03:59:aa:36:62:2a:
25:b5:d1:57:bb:e5:03:64:52:97:a8:8b:78:5e:9d:cc:2d:a2:
e5:36:8c:c6:b1:a4:34:81:ac:65:06:c3:1a:f0:ef:96:eb:49:
b0:5b:87:0d:f6:7f:37:1d:2d:35:38:36:7b:f7:36:fc:a2:4f:
79:7a:b4:3a:32:d9:00:cb:e6:ac:ee:38:7a:83:6f:9e:d5:b9:
5e:0e:3b:98:c4:62:8b:25:05:d9:be:f0:9a:8d:4e:25:7b:63:
19:cc:d3:c5:85:f8:8e:f6:6c:6c:f1:ba:51:02:36:32:0a:74:
57:d6:67:43:71:10:52:28:e7:f2:46:64:09:75:75:e4:79:fc:
20:7e:12:e8:27:eb:b5:42:49:6f:f8:56:99:5d:d4:19:c2:a1:
e3:3d:54:b6:bb:77:25:20:53:0b:0e:f6:3f:d0:58:af:0d:eb:
e6:33:16:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:10:05 2024 by rpki-client on console-fra.rpki-client.org