Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/co1yp6fTXl5UMxOpw96bDbQaKlM.roa
File: co1yp6fTXl5UMxOpw96bDbQaKlM.roa (raw, json)
Hash identifier: epDT9cRl31ZRDuQRAVD2XOmRClFb1G1IWc0jXbuj3cg=
Subject key identifier: 72:8D:72:A7:A7:D3:5E:5E:54:33:13:A9:C3:DE:9B:0D:B4:1A:2A:53
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018FA4695CAC7E8B2261084C08FB0C259F44
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/co1yp6fTXl5UMxOpw96bDbQaKlM.roa
Signing time: Thu 23 May 2024 07:45:19 +0000
ROA not before: Thu 23 May 2024 07:45:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 996
IP address blocks: 62.72.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a4:69:5c:ac:7e:8b:22:61:08:4c:08:fb:0c:25:9f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: May 23 07:45:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=728d72a7a7d35e5e543313a9c3de9b0db41a2a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:5e:de:d8:e4:b0:80:68:0e:0c:8d:a4:4f:
ce:d2:c5:72:6a:53:75:ca:4e:09:6d:cd:62:0d:ba:
0e:88:ef:e1:63:70:97:30:a4:56:b1:73:71:89:66:
f2:dd:0d:1c:dc:0c:3f:db:05:34:fd:ba:7b:90:5e:
1c:38:1a:fb:9b:dd:bf:92:0c:99:4d:d4:8d:68:25:
63:ee:31:0a:a0:a9:64:f3:88:b4:c8:bf:bf:8f:20:
d7:ae:3b:e9:7a:00:30:4d:96:df:2a:a7:e8:5e:80:
81:ef:8b:a7:6c:89:60:36:85:48:d1:c4:07:c3:19:
d3:5a:30:21:9d:82:cf:db:65:d1:0b:46:62:79:cf:
75:ea:d9:14:62:7d:79:e0:ae:13:d7:b3:41:ed:3b:
a5:0b:3c:0a:22:3a:f9:13:3f:ac:36:bd:87:ba:34:
b4:30:12:c1:e4:09:89:7d:b8:11:8d:36:47:4e:15:
4b:8a:e9:b2:9b:21:5b:33:d7:33:84:7d:aa:2e:c4:
4d:1f:a5:01:b9:07:c4:0e:ac:08:4b:2d:b5:12:11:
a5:6c:29:29:2b:81:d7:01:f4:c6:46:b1:47:30:2b:
50:bc:63:ab:34:b0:1d:d0:07:88:f5:30:99:32:c7:
62:ca:d0:e4:2b:62:d0:a7:fe:b8:61:71:09:33:51:
18:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8D:72:A7:A7:D3:5E:5E:54:33:13:A9:C3:DE:9B:0D:B4:1A:2A:53
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/co1yp6fTXl5UMxOpw96bDbQaKlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.190.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:7f:dd:2a:7a:3a:65:51:a8:01:52:a1:7e:7e:aa:7e:08:da:
95:4d:b6:5c:34:30:7e:e7:51:46:17:40:38:5a:e3:84:04:98:
db:95:19:bc:76:4b:29:bc:fc:2c:10:a4:4b:da:c7:d4:96:01:
01:87:83:76:91:b6:c2:a9:14:d8:13:e5:68:cc:a2:1e:09:d0:
84:a9:aa:98:4c:dd:79:07:12:5c:da:a6:6e:74:44:b0:1f:75:
f9:63:f8:c0:04:1c:a8:d9:4c:65:f4:5f:ef:0a:28:90:72:88:
c6:67:0f:0d:87:32:22:1c:26:7b:b5:0c:5e:ad:6a:be:ae:c9:
b9:f4:db:e1:ab:a0:27:ed:fc:e5:70:c4:d5:e5:fb:09:df:0e:
80:92:65:3c:d9:21:6a:22:58:99:ef:2b:2b:4e:81:1d:88:bd:
f1:f1:cc:17:fa:b4:20:f3:ad:ae:89:37:22:76:ea:66:97:ef:
9f:95:df:bc:1e:f3:5d:aa:bf:83:9b:01:0c:e5:52:23:ec:77:
59:4b:11:5e:ad:ee:c7:33:d5:d4:a7:3a:ec:dd:dc:7e:3c:0f:
35:a6:7b:2a:b1:24:9f:fe:de:69:be:b7:74:b5:64:90:2e:e5:
51:ae:0b:24:5b:76:6e:fd:90:ff:55:bd:58:b1:91:97:ee:46:
50:78:99:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:56 2024 by rpki-client on console-fra.rpki-client.org