Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/gVjl5l_qpqWd0kk9ohkTfqilGEc.roa
File: gVjl5l_qpqWd0kk9ohkTfqilGEc.roa (raw, json)
Hash identifier: YXjc/+T5IkabPBRH6STfpAI5TLe2+x5mSw2GjA+/OpU=
Subject key identifier: 81:58:E5:E6:5F:EA:A6:A5:9D:D2:49:3D:A2:19:13:7E:A8:A5:18:47
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 018CCB3D417F4382DEF21C56D5320ECFA167
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/gVjl5l_qpqWd0kk9ohkTfqilGEc.roa
Signing time: Tue 02 Jan 2024 17:33:58 +0000
ROA not before: Tue 02 Jan 2024 17:33:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211970
IP address blocks: 188.72.56.0/24 maxlen: 24
185.234.245.0/24 maxlen: 24
188.72.3.0/24 maxlen: 24
188.72.0.0/24 maxlen: 24
188.72.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cb:3d:41:7f:43:82:de:f2:1c:56:d5:32:0e:cf:a1:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Jan 2 17:33:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8158e5e65feaa6a59dd2493da219137ea8a51847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:7f:09:da:e7:13:6f:13:fd:ae:9b:ab:2f:
0e:3c:ec:53:9e:58:a5:c6:d2:47:0f:df:fd:8f:32:
75:08:4e:7a:64:de:99:fd:9c:1f:13:8f:50:b6:0e:
36:d0:27:4b:7f:d9:7b:3c:d6:57:e0:18:7f:f8:88:
d8:4e:00:d3:db:bb:6a:25:dd:4a:18:ea:37:24:87:
8b:7b:62:04:92:b2:9d:38:63:6c:0a:57:75:fc:7e:
d2:68:94:24:21:27:54:9d:c4:e0:24:dd:8c:c3:fe:
ee:62:4a:01:d7:03:be:ab:6f:9e:7d:6b:59:59:91:
50:8d:ca:22:42:1e:17:95:00:3e:8b:55:04:df:99:
e6:2c:ff:ef:9c:30:f4:36:e0:24:84:7f:84:dc:03:
f8:57:bc:7e:b0:3d:55:fd:f7:44:15:e8:46:30:39:
f5:d9:7b:c7:df:88:a8:3f:2e:e4:4e:d8:86:97:ed:
f8:2d:34:b9:67:dc:f5:5e:bf:29:34:50:03:e3:f7:
c1:24:e1:ec:42:f9:2d:29:91:24:c9:81:6d:ed:3c:
9f:8e:c8:c0:d5:8c:1e:da:75:31:7e:58:de:ee:0d:
04:34:58:c3:70:dc:5a:5b:67:91:c6:15:00:57:87:
4c:3e:03:89:70:7d:b5:71:2f:f2:de:9b:2b:51:11:
a1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:58:E5:E6:5F:EA:A6:A5:9D:D2:49:3D:A2:19:13:7E:A8:A5:18:47
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/gVjl5l_qpqWd0kk9ohkTfqilGEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.245.0/24
188.72.0.0/24
188.72.3.0/24
188.72.51.0/24
188.72.56.0/24
Signature Algorithm: sha256WithRSAEncryption
00:b8:11:0d:e6:d2:01:7c:a6:b2:dc:e0:02:59:56:c0:74:05:
c3:39:60:bb:a2:14:a5:a8:a7:a0:29:a9:81:f1:80:40:ee:c3:
9e:44:46:35:54:1d:ca:64:06:07:bc:a6:23:77:f9:6a:08:97:
32:97:2c:ac:57:da:99:e5:9a:e9:da:99:2c:e8:35:9e:78:aa:
9a:c9:ca:6d:87:4c:6e:27:92:c4:f2:16:7f:49:3e:10:c6:49:
f5:56:35:9c:9f:54:b7:46:ae:8c:d5:3b:c0:37:dd:f6:55:69:
09:ea:40:2a:09:70:29:75:7b:41:0e:d2:34:96:1e:0f:b0:f6:
cb:05:d1:fd:ca:11:cb:8b:24:35:77:10:51:d0:43:35:f3:51:
50:a6:e5:65:c9:4f:21:0a:9e:72:54:a5:1c:3f:53:68:90:ea:
99:24:e9:ad:aa:47:e6:ec:5c:60:aa:f6:de:fe:98:54:ca:4e:
8c:34:1a:c3:dd:29:a8:26:44:4a:18:eb:7d:da:70:00:e8:bf:
25:11:e1:c4:c5:3d:28:d4:6a:ce:2f:96:7d:9a:57:bb:0b:90:
8e:1f:a5:bc:46:a6:1b:f7:72:67:c3:0a:94:5d:ef:b3:2f:b3:
e2:5a:0e:79:bc:76:b9:e2:a9:c5:e8:80:44:59:91:02:86:fa:
e4:21:1a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:22:53 2024 by rpki-client on console-ams.rpki-client.org