Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/cGhK-k60S8y9yXHXhwdYxj9n8QQ.roa
File: cGhK-k60S8y9yXHXhwdYxj9n8QQ.roa (raw, json)
Hash identifier: u1/vLMMWvHhVId4fAcZCM9tveybHVtGV77pUwx1XxMc=
Subject key identifier: 70:68:4A:FA:4E:B4:4B:CC:BD:C9:71:D7:87:07:58:C6:3F:67:F1:04
Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial: 018CC2DB03F5F618DD6E146D4FA19E87B7BC
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/cGhK-k60S8y9yXHXhwdYxj9n8QQ.roa
Signing time: Mon 01 Jan 2024 02:29:42 +0000
ROA not before: Mon 01 Jan 2024 02:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49571
IP address blocks: 188.72.17.0/24 maxlen: 24
188.72.15.0/24 maxlen: 24
188.72.12.0/24 maxlen: 24
188.72.16.0/24 maxlen: 24
188.72.21.0/24 maxlen: 24
188.72.22.0/24 maxlen: 24
188.72.18.0/24 maxlen: 24
188.72.31.0/24 maxlen: 24
188.72.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:03:f5:f6:18:dd:6e:14:6d:4f:a1:9e:87:b7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Validity
Not Before: Jan 1 02:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70684afa4eb44bccbdc971d7870758c63f67f104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4c:74:a7:04:d7:b4:b1:89:5a:97:63:50:3f:
ff:36:1e:94:48:c9:21:54:a1:9e:4f:4d:22:3c:3d:
f0:2c:e4:21:38:84:46:c3:29:bf:79:3b:2f:7d:ed:
0a:8b:82:49:c5:8e:15:93:1c:9f:dc:cb:1f:c4:18:
25:45:df:1f:20:71:4e:df:45:47:b1:83:9a:cf:2d:
5b:6a:ee:54:c0:b3:b3:22:15:42:0e:dd:8d:ea:9c:
b1:d5:78:83:9c:b6:79:9b:8f:53:16:93:39:78:45:
a9:4d:4b:9e:23:b1:ae:19:31:6b:5b:58:b3:54:a1:
50:c5:e9:65:7f:b4:a8:5f:80:75:95:f3:66:86:bf:
fe:33:29:34:0e:97:b7:54:ca:b3:4b:67:d8:c3:37:
d0:49:df:eb:51:1a:4d:de:5e:bf:ee:df:1d:79:0b:
8c:60:1f:ca:c2:a5:25:21:42:ae:6e:00:b7:a8:c3:
f3:5b:21:5d:26:9f:d7:fd:fd:8e:05:4b:5c:02:36:
22:d4:29:bf:37:d0:3d:98:dd:27:41:ce:f6:c7:32:
77:1d:92:ef:08:df:65:df:66:e9:71:46:b8:ba:59:
1e:ce:43:11:68:91:1f:68:07:dd:5a:c4:af:38:53:
8f:a5:ef:7f:61:47:4e:23:15:3d:03:f1:bf:13:cc:
0c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:68:4A:FA:4E:B4:4B:CC:BD:C9:71:D7:87:07:58:C6:3F:67:F1:04
X509v3 Authority Key Identifier:
keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/cGhK-k60S8y9yXHXhwdYxj9n8QQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.12.0/24
188.72.15.0-188.72.18.255
188.72.21.0-188.72.22.255
188.72.30.0/23
Signature Algorithm: sha256WithRSAEncryption
73:b2:1d:89:83:da:1e:ac:2f:e3:a4:07:27:86:3d:7e:d8:9c:
01:26:b0:00:3d:cb:cf:a8:c1:63:ba:9a:91:d2:db:12:1b:c1:
cb:6f:1c:bf:09:7c:98:8a:8f:3d:d6:4b:f9:35:92:ac:1d:ee:
2f:c3:1e:9e:11:8f:4c:8c:24:23:ea:e7:2b:1e:b5:16:15:38:
29:e4:d2:48:9e:a3:b3:be:59:07:ca:f8:0d:a5:e9:ab:55:77:
ce:bc:12:e4:d6:f3:e3:58:db:86:53:d5:07:98:fc:b9:07:27:
be:15:6c:1b:e0:9e:da:ab:2a:86:52:bd:c2:aa:fc:de:ca:e4:
13:7c:d3:a4:25:e2:14:86:38:7d:95:16:13:02:10:cc:67:39:
ed:7c:11:37:0b:a8:5c:29:b5:50:0c:6d:76:50:af:b0:2e:81:
dc:f8:1d:8d:84:b7:05:6b:8a:fd:13:57:88:53:3a:93:0e:a1:
2c:5a:a2:fd:10:93:e2:01:ba:93:5f:09:aa:0e:50:25:43:18:
6d:4d:53:74:c6:0d:1a:e5:49:8c:98:aa:0a:dd:ed:61:a7:98:
a0:00:7a:b3:29:53:03:c9:1a:82:5c:d7:85:f2:dd:34:d6:87:
36:32:06:ea:13:a4:07:49:61:1b:d9:03:4f:30:1e:0e:2c:c1:
0d:55:2c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:40:31 2024 by rpki-client on console-ams.rpki-client.org