Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/P0gknQkCOMbVzThgOEzo-RRYhFs.roa
File: P0gknQkCOMbVzThgOEzo-RRYhFs.roa (raw, json)
Hash identifier: 3s+8tk/uIXEOtPVD88QexGdAI+qkSXfsdPQMGByW8xw=
Subject key identifier: 3F:48:24:9D:09:02:38:C6:D5:CD:38:60:38:4C:E8:F9:14:58:84:5B
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019204C62A863323AB6D76478982A9CE9F5F
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/P0gknQkCOMbVzThgOEzo-RRYhFs.roa
Signing time: Wed 18 Sep 2024 10:55:48 +0000
ROA not before: Wed 18 Sep 2024 10:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 62.72.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:04:c6:2a:86:33:23:ab:6d:76:47:89:82:a9:ce:9f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Sep 18 10:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f48249d090238c6d5cd3860384ce8f91458845b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:ad:2c:50:47:04:72:51:ce:e9:4d:07:9b:
17:3e:cb:6f:4c:c5:5b:df:7f:87:15:55:d8:69:bd:
af:c5:8f:50:a0:47:0f:c9:74:00:d1:91:10:de:97:
ee:d7:ed:38:66:0d:6f:b7:da:0c:2e:49:fa:ed:f8:
aa:7c:74:19:56:05:a9:12:21:54:25:cf:45:06:bb:
89:29:c4:bb:25:53:9c:8a:a8:46:32:f5:32:05:d8:
d1:b6:36:f2:29:fe:89:ac:95:46:52:88:ee:83:4a:
e0:9b:6b:9a:c7:2c:12:86:74:a6:31:f5:7b:53:86:
55:f8:b5:db:6d:8c:86:34:1e:0d:31:2e:99:2a:6a:
25:b3:b1:4b:41:db:43:69:5c:ae:d5:5f:b1:d8:2e:
aa:4a:5f:24:bb:21:f4:08:87:f6:01:68:21:fb:81:
db:2d:63:70:63:1e:72:ed:5a:3a:a1:26:88:53:bb:
28:06:2b:c7:6a:88:a8:73:3d:5f:04:06:ed:a0:a2:
3e:74:41:b2:d7:96:04:b2:ca:36:76:75:83:65:52:
60:7e:a0:22:52:8e:51:5a:aa:43:d8:e9:0a:48:55:
f0:df:6c:59:f5:3c:d5:7f:b6:fe:cf:d1:05:f1:79:
06:56:5d:cc:51:c9:fe:5a:c7:42:13:04:70:9e:7e:
ad:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:48:24:9D:09:02:38:C6:D5:CD:38:60:38:4C:E8:F9:14:58:84:5B
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/P0gknQkCOMbVzThgOEzo-RRYhFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.183.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:eb:5e:ce:d8:8b:dd:d0:0e:e9:af:7a:60:37:3b:3f:8e:db:
08:45:e8:e3:9b:a7:64:15:b6:86:14:01:8b:ca:43:19:71:36:
51:d4:39:b5:c0:91:4a:5e:1d:77:c8:e5:90:03:e4:0d:8e:d5:
7a:17:52:1a:75:91:2a:83:1d:d3:ea:fc:1e:af:db:9c:51:33:
45:20:8b:b9:1e:0b:53:78:d9:bc:a9:7b:dd:91:13:70:1e:b3:
1a:48:ac:d8:32:72:9a:c4:50:b0:a5:2d:38:af:e0:d4:8a:a7:
e0:7b:3d:10:c6:01:b0:f0:1e:d4:9e:9e:17:f0:8c:5f:7a:44:
5c:0b:a2:5b:55:46:0f:3a:8d:73:e2:bd:a7:ee:a9:0c:38:8a:
bc:e6:6f:42:4c:b9:1f:dd:cf:82:64:27:36:8e:da:3a:16:2d:
0e:ef:02:b8:7a:f6:28:ef:12:d4:d4:83:45:e7:ee:6e:a0:19:
c3:b7:e0:ab:0c:bc:64:31:ba:b6:0c:7b:56:86:d7:e2:ce:3f:
41:b6:22:13:ae:eb:f1:8a:5f:d3:66:c2:af:af:e1:67:99:f6:
a5:66:e7:b9:46:d8:7a:14:72:65:03:63:55:91:94:45:c9:5f:
fb:e1:18:8c:e8:8d:29:3c:88:fd:f2:1a:30:c8:6f:30:69:f2:
a2:36:79:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZIExiqGMyOrbXZHiYKpzp9fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjQwOTE4MTA1NTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjQ4MjQ5ZDA5MDIzOGM2ZDVjZDM4NjAzODRjZThmOTE0NTg4NDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8itLFBHBHJRzulNB5sXPstvTMVb
33+HFVXYab2vxY9QoEcPyXQA0ZEQ3pfu1+04Zg1vt9oMLkn67fiqfHQZVgWpEiFU
Jc9FBruJKcS7JVOciqhGMvUyBdjRtjbyKf6JrJVGUojug0rgm2uaxywShnSmMfV7
U4ZV+LXbbYyGNB4NMS6ZKmols7FLQdtDaVyu1V+x2C6qSl8kuyH0CIf2AWgh+4Hb
LWNwYx5y7Vo6oSaIU7soBivHaoiocz1fBAbtoKI+dEGy15YEsso2dnWDZVJgfqAi
Uo5RWqpD2OkKSFXw32xZ9TzVf7b+z9EF8XkGVl3MUcn+WsdCEwRwnn6tFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD9IJJ0JAjjG1c04YDhM6PkUWIRbMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvUDBna25Ra0NPTWJWelRoZ09Fem8tUlJZaEZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPki3MA0G
CSqGSIb3DQEBCwUAA4IBAQCm617O2Ivd0A7pr3pgNzs/jtsIRejjm6dkFbaGFAGL
ykMZcTZR1Dm1wJFKXh13yOWQA+QNjtV6F1IadZEqgx3T6vwer9ucUTNFIIu5HgtT
eNm8qXvdkRNwHrMaSKzYMnKaxFCwpS04r+DUiqfgez0QxgGw8B7Unp4X8IxfekRc
C6JbVUYPOo1z4r2n7qkMOIq85m9CTLkf3c+CZCc2jto6Fi0O7wK4evYo7xLU1INF
5+5uoBnDt+CrDLxkMbq2DHtWhtfizj9BtiITruvxil/TZsKvr+FnmfalZue5Rth6
FHJlA2NVkZRFyV/74RiM6I0pPIj98howyG8wafKiNnn/
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:14:09 2024 by rpki-client on console-ams.rpki-client.org