Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/4HNgDUaSh_uVGhGAQnTEGVwVX2k.roa
File: 4HNgDUaSh_uVGhGAQnTEGVwVX2k.roa (raw, json)
Hash identifier: oViwXXBtz3EZlh4w828b/j4vs044wSs0DmuJkoT8jCE=
Subject key identifier: E0:73:60:0D:46:92:87:FB:95:1A:11:80:42:74:C4:19:5C:15:5F:69
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 018CC500D9D0784E7D9734921DFD677E2AA5
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/4HNgDUaSh_uVGhGAQnTEGVwVX2k.roa
Signing time: Mon 01 Jan 2024 12:30:16 +0000
ROA not before: Mon 01 Jan 2024 12:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209565
IP address blocks: 188.72.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jul 2024 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:d9:d0:78:4e:7d:97:34:92:1d:fd:67:7e:2a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Jan 1 12:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e073600d469287fb951a11804274c4195c155f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1f:60:7b:1a:8c:c6:d9:2b:29:fa:fd:2f:88:
0f:ce:e1:a8:f3:fc:03:23:7f:fc:ad:44:c7:d5:af:
cd:3d:14:91:14:f0:ac:0f:57:e6:7b:5b:1d:7f:aa:
c2:f1:7e:a7:e1:8c:1d:fd:2d:9f:3a:79:e7:23:24:
b9:36:ce:68:2b:9f:b1:26:40:a1:41:a3:bd:10:19:
fe:f3:2e:f1:0f:8d:5e:0d:9f:35:8e:66:5d:32:44:
3b:7b:e4:0a:e3:95:c7:fb:20:d7:60:f2:a6:25:72:
62:7d:e8:68:97:77:32:47:1d:c1:af:4e:72:db:4c:
9a:42:16:57:1b:da:d5:74:05:a4:68:bb:4a:0c:b8:
c0:07:8e:e9:db:93:55:4e:0d:7d:b1:c1:f6:9d:7f:
75:cf:9b:67:f4:83:4e:d0:a1:19:2a:57:0e:5e:a1:
98:41:c2:4b:0e:e0:e2:eb:6f:1a:ee:36:78:43:f7:
ca:cb:af:9d:45:d3:32:38:bd:07:db:53:e7:f4:9e:
21:d4:a6:a2:76:76:4e:9e:c3:5b:d1:22:b7:0d:3a:
52:43:be:9d:f9:8d:95:d3:23:b2:a9:f8:87:29:2d:
bd:27:6f:c5:15:1d:70:d6:af:1a:5b:03:10:cb:d0:
ab:fc:2c:88:d2:77:31:f0:32:0b:0a:4e:e3:2f:ca:
93:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:73:60:0D:46:92:87:FB:95:1A:11:80:42:74:C4:19:5C:15:5F:69
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/4HNgDUaSh_uVGhGAQnTEGVwVX2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.52.0/24
Signature Algorithm: sha256WithRSAEncryption
10:30:c7:c4:b6:fc:9c:d7:71:25:69:fb:5d:f4:95:67:c8:0a:
07:b8:dc:78:a3:ab:7f:2c:86:cd:e8:73:94:58:c2:1e:75:37:
db:56:0a:59:bc:65:d7:18:80:fd:a2:ec:4d:f5:e6:94:18:0a:
4c:1f:d5:48:fa:43:0b:93:4f:b4:1d:3c:64:c3:b8:bc:9d:ce:
2c:75:8c:19:2d:ec:f5:4a:e0:fe:e4:58:1f:3c:d4:01:0b:c6:
fa:7d:ef:53:eb:08:bb:47:23:e1:d2:eb:f3:6a:b7:b3:c2:5d:
33:c6:9e:ae:e4:c4:22:a5:35:f0:70:c8:05:0f:2d:98:cb:64:
40:58:cc:82:e9:e0:2e:18:7c:a3:7b:c1:b5:03:a3:81:4f:51:
1b:9a:94:14:1e:b3:ab:d5:a7:e3:bc:4e:c0:b9:a9:a6:e2:05:
a9:7f:88:ee:59:39:dd:8c:40:59:4f:93:3a:b0:32:3a:a4:5f:
ab:46:a1:cf:d3:21:9c:13:66:57:e3:84:ef:c9:75:b0:71:77:
5d:7f:b2:52:a8:3d:c9:4e:56:08:f1:7b:fa:fe:18:56:90:27:
13:d2:2f:6e:8d:29:8d:63:52:bf:87:22:ba:53:48:17:37:ec:
67:a9:f5:b6:31:22:9a:de:c2:c8:21:bd:ad:a4:18:1e:35:73:
5b:af:01:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFANnQeE59lzSSHf1nfiqlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm
ZjA4NjEwHhcNMjQwMTAxMTIzMDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDczNjAwZDQ2OTI4N2ZiOTUxYTExODA0Mjc0YzQxOTVjMTU1ZjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB9gexqMxtkrKfr9L4gPzuGo8/wD
I3/8rUTH1a/NPRSRFPCsD1fme1sdf6rC8X6n4Ywd/S2fOnnnIyS5Ns5oK5+xJkCh
QaO9EBn+8y7xD41eDZ81jmZdMkQ7e+QK45XH+yDXYPKmJXJifehol3cyRx3Br05y
20yaQhZXG9rVdAWkaLtKDLjAB47p25NVTg19scH2nX91z5tn9INO0KEZKlcOXqGY
QcJLDuDi628a7jZ4Q/fKy6+dRdMyOL0H21Pn9J4h1KaidnZOnsNb0SK3DTpSQ76d
+Y2V0yOyqfiHKS29J2/FFR1w1q8aWwMQy9Cr/CyI0ncx8DILCk7jL8qT7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOBzYA1Gkof7lRoRgEJ0xBlcFV9pMB8GA1UdIwQY
MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt
ZGU5MTQ2OWQzNzcyLzEvNEhOZ0RVYVNoX3VWR2hHQVFuVEVHVndWWDJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy
LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvEg0MA0G
CSqGSIb3DQEBCwUAA4IBAQAQMMfEtvyc13Elaftd9JVnyAoHuNx4o6t/LIbN6HOU
WMIedTfbVgpZvGXXGID9ouxN9eaUGApMH9VI+kMLk0+0HTxkw7i8nc4sdYwZLez1
SuD+5FgfPNQBC8b6fe9T6wi7RyPh0uvzarezwl0zxp6u5MQipTXwcMgFDy2Yy2RA
WMyC6eAuGHyje8G1A6OBT1EbmpQUHrOr1afjvE7Auamm4gWpf4juWTndjEBZT5M6
sDI6pF+rRqHP0yGcE2ZX44TvyXWwcXddf7JSqD3JTlYI8Xv6/hhWkCcT0i9ujSmN
Y1K/hyK6U0gXN+xnqfW2MSKa3sLIIb2tpBgeNXNbrwGu
-----END CERTIFICATE-----
Generated at Thu Jul 4 13:45:15 2024 by rpki-client on console-ams.rpki-client.org