Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/_XJXFrFv6PwDIbH0ynH6bTrZoTw.roa
File: _XJXFrFv6PwDIbH0ynH6bTrZoTw.roa (raw, json)
Hash identifier: DCncYoGslzPDsgMbrcD6N2mWqDX9nQ+WzY59SYfjBLY=
Subject key identifier: FD:72:57:16:B1:6F:E8:FC:03:21:B1:F4:CA:71:FA:6D:3A:D9:A1:3C
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 0191C15DE8F0F5D6E29057EDDF9E12AE7099
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/_XJXFrFv6PwDIbH0ynH6bTrZoTw.roa
Signing time: Thu 05 Sep 2024 08:47:22 +0000
ROA not before: Thu 05 Sep 2024 08:47:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39216
IP address blocks: 185.72.252.0/24 maxlen: 24
185.72.253.0/24 maxlen: 24
188.72.1.0/24 maxlen: 24
188.72.2.0/24 maxlen: 24
188.72.4.0/24 maxlen: 24
188.72.5.0/24 maxlen: 24
188.72.6.0/24 maxlen: 24
188.72.7.0/24 maxlen: 24
188.72.34.0/24 maxlen: 24
188.72.35.0/24 maxlen: 24
188.72.56.0/24 maxlen: 24
188.72.59.0/24 maxlen: 24
188.72.60.0/24 maxlen: 24
188.72.61.0/24 maxlen: 24
188.72.62.0/24 maxlen: 24
188.72.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c1:5d:e8:f0:f5:d6:e2:90:57:ed:df:9e:12:ae:70:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Sep 5 08:47:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd725716b16fe8fc0321b1f4ca71fa6d3ad9a13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5f:ba:8a:45:34:2c:66:3f:dd:4b:9c:9d:da:
4c:e3:bb:76:40:66:25:00:2d:8a:d5:8f:8c:7e:16:
fb:27:66:8d:cd:f8:30:7c:d6:79:17:26:fd:48:e4:
c4:4f:4c:39:24:37:13:bf:29:0c:12:f5:32:3c:65:
9b:07:93:53:1f:72:51:e1:bb:6d:fe:61:6e:7a:3e:
e8:f1:00:11:1f:10:2b:7c:68:22:05:26:25:91:70:
a6:76:f9:28:46:27:c6:69:f0:50:4d:ee:88:9b:00:
b6:6b:57:3a:0c:e9:fc:13:6d:11:b4:eb:2b:3e:b5:
e3:05:0f:ed:27:31:80:47:88:7a:0f:f4:16:94:3a:
b4:5b:f0:05:67:78:c5:c6:dd:b2:0d:ab:db:9c:e3:
fd:c9:9d:c3:d4:3c:5b:8e:26:46:ad:a5:27:8e:56:
4e:57:4e:a7:71:4c:f3:3e:fe:fa:3f:b4:08:23:8c:
56:ad:53:8b:1a:8f:4b:2d:da:74:a4:5a:2b:7d:87:
71:46:5d:56:d2:09:8d:1c:e9:47:b0:6a:bb:a1:2a:
cc:3d:01:7b:ae:d9:87:ef:c7:79:d7:ea:e1:1f:9d:
1f:20:ee:89:d5:1d:13:27:12:d2:d9:70:03:52:93:
3e:12:be:87:1e:ef:8b:00:87:16:b2:4d:e8:62:e0:
ea:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:72:57:16:B1:6F:E8:FC:03:21:B1:F4:CA:71:FA:6D:3A:D9:A1:3C
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/_XJXFrFv6PwDIbH0ynH6bTrZoTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.252.0/23
188.72.1.0-188.72.2.255
188.72.4.0/22
188.72.34.0/23
188.72.56.0/24
188.72.59.0-188.72.63.255
Signature Algorithm: sha256WithRSAEncryption
14:34:51:a5:57:ce:62:de:f9:2d:a9:3d:33:b6:c5:be:53:c5:
2d:9a:da:7a:9b:98:d8:d9:a8:00:54:59:69:61:3a:d6:15:12:
c5:66:29:f5:29:c0:61:25:9f:c7:67:f0:fc:22:74:8f:fc:84:
b4:38:8d:97:23:23:9b:cc:f5:dc:1d:65:12:dd:55:34:97:39:
d8:65:11:dc:2b:e9:d6:32:98:35:7f:33:74:90:5d:f1:ed:ea:
63:3a:42:db:79:5a:08:1f:44:ae:73:2c:2c:f1:d1:b1:dd:53:
26:09:84:51:90:ae:53:02:a2:aa:c9:0d:f3:13:3f:4d:57:dd:
29:b9:1b:95:90:04:ae:22:9a:d9:54:1b:99:32:ed:1a:df:ad:
7e:ad:ad:f6:b3:b0:92:21:91:ec:ce:5f:69:b3:c8:a5:ab:48:
ce:58:74:a8:74:cd:34:0c:e0:15:fb:35:64:d5:6f:fc:f4:86:
90:b6:57:56:2f:f4:4b:9a:2c:95:34:7e:be:7b:bf:7c:db:b0:
5e:73:10:4e:de:14:0f:92:e4:9f:5f:a5:67:2f:74:95:5e:03:
04:03:de:bf:f6:30:43:ee:cc:ff:19:28:b9:12:3a:8e:13:01:
b1:c8:39:cd:b2:b2:ac:b2:52:b9:15:0b:ad:64:cf:cc:b8:48:
58:fc:6f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:22:53 2024 by rpki-client on console-ams.rpki-client.org