Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/g-5Ump-kVkggu60odmU-Vig88CE.roa
File: g-5Ump-kVkggu60odmU-Vig88CE.roa (raw, json)
Hash identifier: ElVSTTdI+BE8TBGEGh5F9tkaj8ajmCqwRPI/MBxfusI=
Subject key identifier: 83:EE:54:9A:9F:A4:56:48:20:BB:AD:28:76:65:3E:56:28:3C:F0:21
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0192FFCC235E91CC6A3B5D699DA2688CA996
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/g-5Ump-kVkggu60odmU-Vig88CE.roa
Signing time: Wed 06 Nov 2024 04:47:01 +0000
ROA not before: Wed 06 Nov 2024 04:47:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 394844
IP address blocks: 185.52.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ff:cc:23:5e:91:cc:6a:3b:5d:69:9d:a2:68:8c:a9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Nov 6 04:47:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83ee549a9fa4564820bbad2876653e56283cf021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:eb:8a:3d:38:9f:82:1b:22:c3:d4:1b:16:
ed:a4:66:df:eb:4b:53:71:66:b0:18:e4:75:39:e5:
e3:e6:16:a2:06:49:a0:5a:06:56:ec:4c:73:93:9e:
5f:b1:5d:11:7f:4b:cc:b0:89:f8:7a:7a:30:a6:0b:
54:0d:4e:e1:9b:51:46:df:f3:97:d8:1a:dc:61:21:
19:16:3b:5c:b8:a8:ef:de:39:16:a2:63:9f:4a:f7:
ba:85:bc:21:71:f6:3b:e2:bd:4f:0f:b7:2d:99:a7:
8c:38:a1:7e:29:7b:ac:15:7f:54:21:dd:f1:b9:fa:
ee:d3:0c:2d:af:58:47:21:c7:1e:06:11:9d:1a:f6:
af:b5:82:e1:53:c9:91:d0:88:33:c5:34:13:7d:a6:
51:21:0b:49:63:a9:66:4e:71:a0:17:73:cf:fa:66:
d7:23:55:4d:63:22:2c:4c:62:95:81:33:b3:bb:1b:
1e:2f:7b:18:93:23:94:d3:41:c4:d4:2c:0c:85:b0:
40:fe:8f:a6:97:7f:9e:4b:af:79:aa:77:d5:c9:7b:
64:b2:ff:de:59:c6:a3:ca:c2:b2:9e:5f:c8:fc:af:
b3:65:a8:75:59:bb:2f:ed:44:ba:03:70:37:d4:e1:
f2:81:81:e9:02:0f:c5:a5:cc:68:62:6b:f9:5a:9d:
ad:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EE:54:9A:9F:A4:56:48:20:BB:AD:28:76:65:3E:56:28:3C:F0:21
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/g-5Ump-kVkggu60odmU-Vig88CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.136.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:dd:ac:bf:1f:3a:a0:97:69:80:b3:1f:96:21:a6:53:5f:31:
d5:32:75:bd:e6:1f:6d:a6:e4:b9:a6:d5:b7:25:8e:af:40:42:
16:74:29:fb:66:e6:52:a7:87:35:43:ff:6e:70:e3:ad:30:8c:
07:3a:ea:2e:d0:f3:8c:d2:8a:2b:66:7d:f8:1f:1f:aa:6f:46:
8c:28:eb:10:47:b3:ee:ad:de:23:fd:26:9e:1f:5c:00:a3:f6:
92:66:ce:56:da:50:bf:40:86:44:c8:b2:39:12:57:9f:70:e8:
1c:8f:68:85:b9:ac:c4:91:e4:11:ec:d9:4b:de:f0:ff:f8:5f:
f4:88:ca:b1:17:fe:ca:68:d0:99:d2:0b:49:08:6b:18:e9:6d:
01:f3:fb:c2:92:ec:7a:3d:3b:62:19:5b:ee:ee:f9:9a:c7:3f:
74:d0:5d:50:d6:63:f4:1e:49:3d:54:7d:92:9a:3e:8e:16:fe:
5a:dd:40:85:16:bd:51:82:7b:11:35:03:6d:1c:56:ee:c5:82:
b7:f5:15:50:31:54:64:ce:87:dc:61:d5:18:8b:2e:62:22:e5:
49:38:a4:04:00:e5:bd:2e:bd:10:7a:e1:e2:61:31:cf:52:12:
a5:b6:c9:de:99:d3:1d:c2:dd:06:81:20:06:4c:c9:ab:94:6b:
db:9d:d4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:46:34 2024 by rpki-client on console-fra.rpki-client.org