Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/iXuYjiMVbwReZewg5MqqY-la1Rc.roa
File: iXuYjiMVbwReZewg5MqqY-la1Rc.roa (raw, json)
Hash identifier: dRwNIjeZSIGESEO1HXXh1aUKOS1Dh7ylA20t5Rvk3BE=
Subject key identifier: 89:7B:98:8E:23:15:6F:04:5E:65:EC:20:E4:CA:AA:63:E9:5A:D5:17
Certificate issuer: /CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Certificate serial: 018CC8DEB8D54B76154F2822CB3C91B1F9A7
Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/iXuYjiMVbwReZewg5MqqY-la1Rc.roa
Signing time: Tue 02 Jan 2024 06:31:28 +0000
ROA not before: Tue 02 Jan 2024 06:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6939
IP address blocks: 194.15.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:b8:d5:4b:76:15:4f:28:22:cb:3c:91:b1:f9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Validity
Not Before: Jan 2 06:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=897b988e23156f045e65ec20e4caaa63e95ad517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e2:8d:ec:94:66:1e:b7:da:b1:93:04:a6:18:
7e:88:85:88:0a:9b:a5:29:a2:7d:4a:75:e3:72:40:
42:a5:ea:7e:fb:a6:aa:09:7e:9d:63:27:af:24:58:
a4:19:f4:18:0a:08:37:f4:73:74:03:21:43:3d:88:
91:46:3b:53:59:ba:fc:4d:8b:4e:4e:ea:19:91:22:
d8:9b:d2:8a:43:06:45:f3:ce:61:b6:02:0b:95:b4:
5d:92:9b:5a:22:1f:f1:2a:fb:5e:44:d5:f4:bc:ae:
14:12:83:42:88:ae:4e:41:b3:93:cb:91:e8:e5:1a:
7f:8b:b1:b7:c1:6b:41:3b:7a:15:a8:1f:ef:d6:9c:
8a:d0:d4:20:eb:05:dc:2d:32:88:7b:98:4c:d4:6f:
8d:68:9a:b3:b8:b3:d5:20:8d:27:87:af:25:1c:96:
9d:07:15:a4:6d:ca:49:76:41:e3:07:cf:95:fd:4e:
1c:a7:5b:47:62:44:5b:44:fd:88:09:c7:ff:eb:12:
21:7f:88:31:33:af:5b:cb:b3:b1:c3:07:01:94:8c:
e7:c1:a7:46:43:a9:0f:f6:e4:3e:c3:d2:be:68:39:
22:bb:5d:54:8d:76:41:d5:2c:69:22:3f:51:b2:58:
1b:ce:12:51:1b:8c:1b:86:21:e3:12:d8:6c:d1:9a:
70:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7B:98:8E:23:15:6F:04:5E:65:EC:20:E4:CA:AA:63:E9:5A:D5:17
X509v3 Authority Key Identifier:
keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/iXuYjiMVbwReZewg5MqqY-la1Rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.115.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:8b:b8:23:86:0f:ee:0f:a2:3d:1f:5d:63:54:3a:27:63:59:
d1:c7:6e:13:a4:a1:08:41:0d:f4:62:09:35:91:56:45:87:ab:
df:65:1c:a4:ce:f3:cc:1c:70:ca:ff:a4:5a:4d:8d:5d:4f:b8:
3a:03:4f:52:30:a3:16:9e:1c:2a:f1:6d:a7:84:8c:dc:00:d8:
b6:20:00:5f:bd:13:63:d9:ab:ba:59:2f:a7:00:a2:ba:cf:7c:
d6:09:cf:8f:29:56:ae:c6:59:ca:8b:06:42:72:b0:63:ad:1c:
f5:04:c3:13:97:3b:29:2e:e7:d2:ba:6b:ff:d0:27:d3:9e:93:
24:da:bc:dc:85:2c:a5:86:b6:2d:85:01:0b:be:c8:0d:09:00:
2f:69:b5:e3:ad:a2:ef:8e:c7:9d:23:21:32:e9:ab:f1:93:fc:
16:a5:87:5b:2f:97:68:fc:ac:7b:0d:d4:a9:87:0f:a4:d7:f3:
72:71:15:29:be:69:e6:94:35:8b:a3:3a:fc:7d:58:af:bf:91:
24:46:ac:dd:fc:97:c2:18:ec:dd:31:3a:50:4c:b6:16:2e:91:
5a:25:05:5c:48:5b:0e:75:b6:56:2e:e7:ee:62:1b:4b:24:bd:
3a:b7:c8:aa:7b:73:68:f9:54:ab:82:03:b4:44:55:a6:63:eb:
b0:49:1a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 12:21:06 2024 by rpki-client on console-ams.rpki-client.org