Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/Wy-opa1KYQPwaYJdHQjDA9IHxHo.roa
File: Wy-opa1KYQPwaYJdHQjDA9IHxHo.roa (raw, json)
Hash identifier: z0SX9Qmy1epn8a7P2KT9yGfGlbtPqNf6ZOA5kTy+jog=
Subject key identifier: 5B:2F:A8:A5:AD:4A:61:03:F0:69:82:5D:1D:08:C3:03:D2:07:C4:7A
Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial: 018CC64AC3D05EB76A1815AAB6AF93A86F0E
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/Wy-opa1KYQPwaYJdHQjDA9IHxHo.roa
Signing time: Mon 01 Jan 2024 18:30:37 +0000
ROA not before: Mon 01 Jan 2024 18:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211487
IP address blocks: 185.15.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:c3:d0:5e:b7:6a:18:15:aa:b6:af:93:a8:6f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
Validity
Not Before: Jan 1 18:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b2fa8a5ad4a6103f069825d1d08c303d207c47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:eb:b2:9a:fc:6c:c1:c2:a5:cf:c3:a7:5d:6c:
13:a9:f1:2b:25:b8:18:1b:f5:1d:6a:c1:58:c8:13:
fc:88:06:42:c5:fa:3e:8c:3e:4f:ba:2b:93:ee:0a:
bb:f7:ca:6a:fd:16:fa:31:41:26:3f:63:0b:28:e5:
dc:0f:fb:e6:0e:b7:49:13:10:5e:23:60:a7:cf:f7:
a7:ab:6d:a1:19:60:21:af:26:3d:5c:8f:b7:36:5a:
39:c3:7f:c2:69:55:d9:94:a9:ac:79:65:88:33:e8:
29:1f:aa:5a:d9:c7:a9:63:b0:4d:df:d2:f7:6b:ef:
91:34:01:b4:99:3c:67:b4:92:15:e9:be:a2:13:8a:
7e:08:73:a9:80:87:75:b2:66:42:34:81:41:14:f6:
d2:0f:62:42:f5:0e:84:82:24:5a:03:c3:a7:cf:bc:
2d:d4:b4:94:6c:3b:98:6f:fb:fc:34:4c:39:a3:7e:
0a:01:b1:e0:74:5c:a0:79:92:9b:7a:a6:43:1a:a9:
1e:8e:80:a7:cf:7b:c6:e8:38:e1:63:bf:82:97:f7:
84:0d:d2:c3:ae:41:1f:99:7b:b3:6a:af:30:b5:50:
c3:15:31:bd:4f:10:60:1e:3e:73:66:b7:2e:39:db:
25:e1:90:9d:70:27:2e:e0:70:d6:d9:c2:08:14:5a:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2F:A8:A5:AD:4A:61:03:F0:69:82:5D:1D:08:C3:03:D2:07:C4:7A
X509v3 Authority Key Identifier:
keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/Wy-opa1KYQPwaYJdHQjDA9IHxHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.156.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:e1:fe:20:71:24:5a:c2:3b:0e:58:5b:23:55:89:1f:14:46:
a6:aa:43:8e:64:a9:30:a0:2d:f2:5c:b9:92:54:cb:f1:07:b3:
bc:c6:23:92:2e:e8:49:ab:72:a7:ea:a5:6b:f3:58:22:0f:c4:
b0:12:e6:cc:df:61:6f:30:5a:a7:c7:ce:f5:2f:3d:20:47:9d:
ee:da:80:f5:96:bb:d6:d0:af:05:2b:44:53:35:2e:cd:da:0b:
90:88:1b:4e:69:89:b8:42:dd:bb:a2:52:ce:b9:44:94:aa:f6:
63:0d:29:b3:e7:23:dd:fe:3e:7a:bb:dd:53:a3:37:b8:d6:91:
27:61:e0:85:9a:08:c7:9d:e2:9d:25:da:54:d7:fb:7c:84:3a:
f5:32:77:39:fc:1c:cb:ec:d0:0e:c0:49:79:e5:ae:9b:b8:15:
8d:08:58:80:99:cb:9a:ff:49:1c:0f:9d:1c:a0:13:a6:4e:90:
7b:e4:9c:8d:70:3e:45:5b:bf:fd:88:28:db:ad:24:b5:95:e1:
f7:45:74:e2:d0:f5:6e:9c:de:9b:68:67:2a:0f:56:34:f0:ca:
7b:65:29:b4:15:ff:67:0a:a0:1f:a5:64:15:97:0d:a3:43:77:
a8:f7:bc:c8:a1:a6:f0:f6:ec:08:fd:ab:09:72:c1:bc:7e:5f:
3d:a2:d1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 11:15:37 2024 by rpki-client on console-fra.rpki-client.org