Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/67xwFwY8Vk2ZubSlLJvHrRraSTM.roa
File: 67xwFwY8Vk2ZubSlLJvHrRraSTM.roa (raw, json)
Hash identifier: jU5f+Ei9hwCgrVDyChiwT3f+vBtT/uSvK7fGn1pfLCc=
Subject key identifier: EB:BC:70:17:06:3C:56:4D:99:B9:B4:A5:2C:9B:C7:AD:1A:DA:49:33
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 01941FFAB0080674FD33B8FD11982E0D1AFC
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/67xwFwY8Vk2ZubSlLJvHrRraSTM.roa
Signing time: Wed 01 Jan 2025 03:48:30 +0000
ROA not before: Wed 01 Jan 2025 03:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205473
IP address blocks: 188.72.0.0/24 maxlen: 24
188.72.1.0/24 maxlen: 24
188.72.20.0/24 maxlen: 24
188.72.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b0:08:06:74:fd:33:b8:fd:11:98:2e:0d:1a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Jan 1 03:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebbc7017063c564d99b9b4a52c9bc7ad1ada4933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:26:d6:f0:6a:07:bf:7a:8e:90:95:02:19:c9:
15:e3:46:5f:7b:6d:ef:3a:6e:b0:cd:67:1f:f7:da:
b3:3a:df:dd:42:13:2d:7b:0a:a9:e7:ed:8b:7d:98:
f5:df:a8:5d:60:05:51:d8:a3:83:31:74:d7:ac:7b:
15:d0:8e:c0:11:32:3a:10:0b:cb:6e:92:1f:a7:d8:
78:ae:4b:d7:97:c8:77:19:ee:e9:ff:90:c1:01:01:
56:1e:2b:ad:54:42:01:df:c9:c0:33:61:f0:9c:f5:
4d:3d:3c:83:47:84:07:8e:8e:4b:1f:21:19:7f:40:
52:27:ec:e6:fb:30:69:84:ee:b6:24:e4:87:1a:4a:
dd:dd:77:48:09:8d:d9:84:cb:c7:71:03:c8:b4:3b:
7b:cf:d1:b4:49:64:ca:d7:5e:63:e8:7e:47:98:ad:
14:8c:c5:82:0a:82:de:e5:47:46:ef:83:ee:24:11:
a0:55:19:2a:d7:e9:48:6c:1b:2b:cd:ed:00:60:19:
35:e6:16:e6:e2:85:dd:d5:ec:f1:a5:6a:95:5e:ec:
14:76:05:d7:d2:9c:64:e4:a4:73:b5:5f:dd:1a:0a:
bc:b6:27:15:3b:f2:35:68:69:43:02:22:28:c5:f5:
83:57:f6:81:6e:28:e7:2e:60:67:71:d0:32:bd:c0:
8a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BC:70:17:06:3C:56:4D:99:B9:B4:A5:2C:9B:C7:AD:1A:DA:49:33
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/67xwFwY8Vk2ZubSlLJvHrRraSTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.0.0/23
188.72.20.0/24
188.72.51.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:d2:97:ac:9b:d1:c6:5a:bb:92:9c:36:81:02:25:a6:c2:42:
c6:d2:8b:11:fa:e1:e1:05:d0:33:eb:0a:97:73:0f:69:19:3d:
b8:4d:41:86:9d:dd:38:c7:94:c0:75:60:f7:f9:8c:8a:7f:9c:
64:9c:b2:c7:2f:92:8b:d7:d0:05:42:8e:df:7a:5f:b3:1d:c1:
15:c2:9d:46:76:f1:ff:0e:16:78:02:0d:1f:19:94:4e:20:33:
d5:64:88:f7:9f:d3:7d:9c:2f:4f:32:5a:18:cf:2d:0d:6b:72:
69:c0:9b:25:99:25:f3:77:80:ee:9b:8a:72:c4:c6:32:24:db:
11:6d:3e:87:1a:b0:bf:49:48:d6:d1:94:7c:9c:78:39:ca:5f:
a2:8b:4a:74:fa:da:9e:4c:21:1d:4e:f3:14:d7:0f:39:70:3d:
fd:e8:73:4f:ca:15:e3:97:fb:6d:a9:bc:66:b2:3b:ac:82:ff:
d6:2f:e7:84:f7:a1:b8:74:6a:f1:72:7b:90:5b:7f:7f:ad:30:
26:99:ea:5f:69:5b:88:25:69:24:3e:df:d9:80:ea:80:41:90:
de:2f:f5:b8:a2:50:9a:2e:42:2d:98:a7:04:4f:4c:63:06:be:
af:f4:69:ac:cd:4f:df:cc:14:b3:bf:72:e6:91:13:58:d0:53:
ad:a1:60:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:49:50 2025 by rpki-client