Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/S85cJVCevxzmXw4rRE4kiYrpM5M.roa
File: S85cJVCevxzmXw4rRE4kiYrpM5M.roa (raw, json)
Hash identifier: KKZEgz8sIVXmsSTy1OOEJmU5iB1JH/JFG0WGlnD0p6U=
Subject key identifier: 4B:CE:5C:25:50:9E:BF:1C:E6:5F:0E:2B:44:4E:24:89:8A:E9:33:93
Certificate issuer: /CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Certificate serial: 018CC8DEB966CA713B3AB3032F4FDF509210
Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/S85cJVCevxzmXw4rRE4kiYrpM5M.roa
Signing time: Tue 02 Jan 2024 06:31:28 +0000
ROA not before: Tue 02 Jan 2024 06:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50935
IP address blocks: 194.15.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:b9:66:ca:71:3b:3a:b3:03:2f:4f:df:50:92:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Validity
Not Before: Jan 2 06:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bce5c25509ebf1ce65f0e2b444e24898ae93393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:63:11:6f:b6:02:26:b1:3f:a6:83:a1:6c:92:
e9:76:c4:27:49:91:ec:e6:09:18:a7:1e:ae:c3:39:
41:64:1e:8c:34:97:a0:67:28:5e:a6:7b:95:a8:28:
55:2e:cd:46:c5:97:9d:b1:ce:9a:7c:69:d1:b0:d0:
16:4a:e0:5a:8d:b5:8f:5a:af:7a:0b:73:a3:1d:3f:
46:d4:f8:c1:b4:d2:a3:16:94:e0:0b:0e:bd:cf:11:
51:3f:eb:40:e7:1b:aa:99:f3:92:e9:50:f2:2c:f7:
58:7d:17:e3:5e:52:a5:bf:7a:8d:99:6d:0a:65:9d:
c9:70:e2:08:31:1e:e7:f0:3c:02:fd:97:83:f7:9d:
aa:e6:39:ab:a3:fd:7e:19:4f:b6:f7:70:d5:f8:7a:
df:27:85:3c:03:56:ae:1e:4c:e1:09:ba:fc:d1:c7:
5f:72:df:93:38:96:5f:5d:e0:87:20:59:36:7b:60:
fc:e4:8d:57:a5:5f:3b:fc:f6:5e:06:4f:80:23:bd:
e3:8c:31:4d:19:3f:c9:e5:55:2b:ad:53:c7:d9:0a:
8a:6a:36:8e:ac:85:d6:0f:ca:2f:12:84:56:2a:32:
3f:43:36:0a:30:bd:5c:03:0c:1c:bd:5b:c6:92:e5:
02:55:2e:6b:83:a0:36:ed:fb:81:25:e6:d9:c3:d8:
9c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CE:5C:25:50:9E:BF:1C:E6:5F:0E:2B:44:4E:24:89:8A:E9:33:93
X509v3 Authority Key Identifier:
keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/S85cJVCevxzmXw4rRE4kiYrpM5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.115.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:8b:09:1f:62:da:8c:a5:c0:49:55:2a:a0:20:17:90:6a:32:
e7:ac:a1:06:f9:83:4f:bf:ec:3b:33:fd:bc:72:43:33:2c:32:
b7:3d:69:e9:2c:73:ca:42:dc:87:4a:07:f4:b4:01:62:56:2b:
b5:f2:df:21:03:75:58:bd:f4:4a:f7:6b:44:f4:c5:f6:82:b3:
87:fe:6c:ed:32:47:d3:bc:d8:f0:fe:dd:37:ff:af:5e:36:93:
77:28:1c:d6:53:d1:f4:f7:82:37:03:4d:89:7b:ae:10:91:93:
71:ee:34:d5:8b:87:ef:c0:b1:c1:eb:af:5a:60:68:82:22:bb:
9b:3c:02:03:48:6e:ad:b3:f2:e9:b8:2a:50:df:13:9e:dd:cf:
2b:72:73:03:ee:60:20:02:3d:ac:cb:8f:9d:26:d5:aa:6d:4d:
28:33:1b:24:37:08:f2:35:a2:5d:84:bb:ec:a6:16:04:a3:4a:
f6:17:c2:97:ec:19:c0:44:43:36:16:fe:a8:f8:01:cd:46:92:
0a:ab:24:c6:20:53:5c:d8:0d:34:8b:09:6b:43:ff:9f:e4:c8:
80:16:07:da:a0:12:df:a9:30:34:e0:64:35:76:0f:db:c5:56:
63:92:10:03:c1:49:f0:27:3d:c2:23:1a:ed:a5:19:08:48:f4:
91:71:39:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:59:36 2024 by rpki-client on console-ams.rpki-client.org