Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FiCksGLwuvEEn2xNyci19-YjpRY.roa
File: FiCksGLwuvEEn2xNyci19-YjpRY.roa (raw, json)
Hash identifier: 04Bj4HxrzrNM3ips+Z4tzx6elcHzHZ7ew2oipqZ174c=
Subject key identifier: 16:20:A4:B0:62:F0:BA:F1:04:9F:6C:4D:C9:C8:B5:F7:E6:23:A5:16
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018D47788FC2FC1B86A3CCE2B910B35AAD22
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FiCksGLwuvEEn2xNyci19-YjpRY.roa
Signing time: Fri 26 Jan 2024 20:31:39 +0000
ROA not before: Fri 26 Jan 2024 20:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215672
IP address blocks: 62.72.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:47:78:8f:c2:fc:1b:86:a3:cc:e2:b9:10:b3:5a:ad:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 26 20:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1620a4b062f0baf1049f6c4dc9c8b5f7e623a516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:b2:2a:54:c2:aa:41:62:fa:b2:6f:a7:0e:
74:74:f1:61:a3:f5:0d:7b:98:16:15:71:47:94:d8:
a1:31:63:22:64:3d:77:b8:17:15:d2:d6:e9:5d:ee:
08:a8:ba:80:ae:90:07:ae:49:1b:98:4d:26:7e:97:
7a:23:b6:09:7b:1f:c5:f1:ab:03:01:17:68:eb:2a:
8e:22:89:64:f8:40:12:9f:d6:dc:1a:30:de:52:66:
a8:52:39:bd:49:89:c4:a1:36:68:6c:49:30:ef:4a:
bf:f1:18:bb:02:81:d8:53:af:49:11:80:08:d3:45:
ce:ec:5c:35:ce:bb:e8:9a:3a:2d:1a:99:6a:bb:38:
08:c1:4f:83:da:e3:f8:39:b0:7a:6b:fd:34:89:da:
fb:59:a4:d3:c1:da:72:15:5c:a6:b2:5b:ab:34:62:
41:cb:98:1e:9f:c8:ce:29:b1:02:11:61:80:3f:22:
44:e8:2d:c8:96:77:56:51:6b:58:8b:c0:32:9d:da:
35:47:bb:69:38:d6:68:45:5b:a0:37:09:1c:54:08:
cc:0d:d5:5c:3a:53:c3:47:53:84:b7:4d:c7:27:7a:
76:52:5d:66:e2:8f:72:5e:6b:05:9e:7a:b6:94:20:
79:0f:50:d2:aa:80:52:8c:7e:02:91:46:e1:51:3e:
0f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:20:A4:B0:62:F0:BA:F1:04:9F:6C:4D:C9:C8:B5:F7:E6:23:A5:16
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FiCksGLwuvEEn2xNyci19-YjpRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.188.0/24
Signature Algorithm: sha256WithRSAEncryption
10:b3:37:23:30:6e:bc:39:67:86:3d:a4:76:50:26:b7:d4:7c:
0b:d8:ef:b8:78:9d:cd:de:9f:74:17:7b:5f:6d:f3:1d:32:b3:
8d:f8:77:c2:29:b2:bf:a7:17:7a:1a:f7:1e:64:b0:3b:77:58:
0f:e3:c7:cf:1c:db:97:13:bc:bf:20:07:a8:23:cb:3b:32:1e:
45:5a:fe:5b:d8:ec:ab:0e:92:c7:fc:63:5c:b3:3e:2d:72:49:
5d:cf:25:42:a2:88:86:d7:af:02:99:6d:9a:e0:ea:5c:81:34:
f9:e7:a1:9e:bf:3b:22:7d:e6:99:49:75:13:86:7e:e5:1e:87:
ad:5c:8a:22:8a:a4:d8:6f:40:9c:e6:49:96:14:dc:5e:2d:7d:
9c:26:95:df:d2:19:d6:bd:61:db:e4:f3:8a:6c:e4:96:ee:b7:
b4:89:69:3c:7b:92:9d:8c:75:b9:10:c3:6e:ad:a0:91:50:89:
b2:dd:9f:f0:37:b4:14:8e:e7:f1:54:26:06:fb:ed:fe:e8:1b:
75:50:8c:93:77:99:24:8b:50:73:f8:59:76:a1:99:80:c7:8c:
e2:85:3f:63:e3:c3:fd:82:95:ed:b1:8b:b3:8f:43:ba:9d:f1:
2c:da:16:42:65:8a:5e:16:52:15:a6:47:6b:77:94:96:a3:f9:
9d:ee:b5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:06:48 2024 by rpki-client on console-fra.rpki-client.org