Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/EqhA-Rr8k4bqPx5bEew6C8pwgxI.roa
File: EqhA-Rr8k4bqPx5bEew6C8pwgxI.roa (raw, json)
Hash identifier: 76KRxOkrwHnYCBM8USqmxS5tguqYtq8kcgbX7I+0ifg=
Subject key identifier: 12:A8:40:F9:1A:FC:93:86:EA:3F:1E:5B:11:EC:3A:0B:CA:70:83:12
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 018FA58F9964801C7A9D669046D98CC835CA
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/EqhA-Rr8k4bqPx5bEew6C8pwgxI.roa
Signing time: Thu 23 May 2024 13:06:42 +0000
ROA not before: Thu 23 May 2024 13:06:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214893
IP address blocks: 188.72.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jul 2024 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a5:8f:99:64:80:1c:7a:9d:66:90:46:d9:8c:c8:35:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: May 23 13:06:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12a840f91afc9386ea3f1e5b11ec3a0bca708312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:45:dd:fb:4a:87:e7:e9:8c:1c:d0:32:1d:b4:
27:13:c1:53:97:81:91:8f:a7:34:14:e3:fc:1d:91:
e9:95:7c:07:a5:f5:57:57:16:11:15:3e:be:c6:0c:
9c:fb:78:96:c8:f2:96:b0:fd:96:d9:ab:3b:57:7e:
8d:dc:bc:78:b2:e0:0d:f3:a5:98:e4:e4:8f:eb:00:
8e:cd:e1:48:7c:d7:8a:8e:0c:27:a6:62:1e:7b:81:
92:b9:7d:b7:72:d3:cc:41:e3:f4:10:e2:c8:5d:80:
27:c6:79:9e:28:f8:52:84:99:23:c6:a5:04:57:de:
84:81:f3:cd:d9:b5:37:c1:af:e7:93:4a:46:f5:5f:
a7:4f:46:3d:76:80:06:06:ca:95:00:68:bf:01:1a:
43:28:2e:07:67:10:56:04:35:83:f6:df:2a:65:e7:
70:1c:07:f8:a6:cc:81:f4:14:71:7b:72:bf:cd:51:
07:24:7b:ce:f1:8a:72:31:9e:3e:00:f3:b5:47:f5:
f4:2c:10:75:6e:b4:26:6e:bd:1f:e4:48:ea:4c:2f:
c2:01:1e:af:72:4d:3d:ab:d5:90:85:13:a1:42:86:
a7:c5:ca:0d:c6:ce:fa:5e:f3:44:c7:00:98:99:38:
14:45:cd:90:9a:54:24:08:10:7f:ea:d8:fd:b4:05:
cf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A8:40:F9:1A:FC:93:86:EA:3F:1E:5B:11:EC:3A:0B:CA:70:83:12
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/EqhA-Rr8k4bqPx5bEew6C8pwgxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.9.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:9a:50:7e:04:72:3f:8c:55:22:28:9a:a7:7a:8b:ee:4d:62:
0c:52:0a:0f:35:8d:2e:74:ed:41:63:83:3d:fa:a7:a4:1c:2d:
19:66:01:cd:ea:82:b2:f7:6b:0b:c1:bb:35:1f:3c:1d:14:9f:
12:f6:a8:83:4b:07:d0:86:b8:26:3d:a7:1d:ad:7f:de:44:70:
f1:95:f3:c5:2f:ca:b3:e7:be:b6:ea:2f:3c:0c:62:78:ef:ea:
b5:e2:0b:40:7e:52:bb:01:37:ca:82:98:1e:d6:d7:dc:94:fa:
b6:72:61:82:53:e5:2e:a5:0d:13:34:9c:53:d0:95:7b:4f:25:
e0:c9:ef:05:9a:a0:e4:e7:eb:87:e3:e6:c8:26:a5:d3:f5:e1:
73:2f:9e:75:90:36:3b:38:15:3f:61:3e:5f:ae:0c:cf:68:0b:
62:2d:b2:7c:f0:e8:6b:43:4d:f0:f5:3b:d1:32:98:f3:cd:f7:
7c:38:33:bf:a7:ab:9a:15:d0:52:fe:85:e0:79:80:ad:17:e2:
96:26:dc:36:42:7b:ca:77:55:a6:c9:f8:88:d0:ce:78:0e:07:
81:b1:7f:e9:92:fe:a3:be:ae:6e:7a:b8:5c:4e:b2:24:76:96:
11:13:fd:42:f2:2c:d0:a0:ac:45:cf:5c:49:dd:ad:22:05:44:
1b:70:2b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 13:45:15 2024 by rpki-client on console-ams.rpki-client.org