Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/DDr25wR70ntiWcfhohtG3cBGEGE.roa
File: DDr25wR70ntiWcfhohtG3cBGEGE.roa (raw, json)
Hash identifier: mIb0IQL11Tde7zS2epwQuIuL0OmD1DgZztCuBTYVExg=
Subject key identifier: 0C:3A:F6:E7:04:7B:D2:7B:62:59:C7:E1:A2:1B:46:DD:C0:46:10:61
Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial: 018CCA29868F053CF26FE03047ABAED15B3B
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/DDr25wR70ntiWcfhohtG3cBGEGE.roa
Signing time: Tue 02 Jan 2024 12:32:48 +0000
ROA not before: Tue 02 Jan 2024 12:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15600
IP address blocks: 5.145.32.0/19 maxlen: 24
185.74.128.0/22 maxlen: 22
2a00:d3e0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:86:8f:05:3c:f2:6f:e0:30:47:ab:ae:d1:5b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Validity
Not Before: Jan 2 12:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c3af6e7047bd27b6259c7e1a21b46ddc0461061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:24:c3:55:db:74:e6:7b:48:24:01:ae:2b:64:
e8:87:bf:21:5d:ed:55:9e:63:23:4c:4a:3e:dd:74:
b5:c4:4d:0d:35:d6:bd:c7:62:e6:12:6a:10:56:41:
c2:e0:d1:2d:6f:04:a8:48:23:8c:3c:67:89:06:b9:
89:73:7a:b4:89:2e:49:5b:2c:3a:90:8b:19:7d:90:
91:e3:82:b3:d9:8d:0e:82:df:3c:ce:36:0a:33:e6:
c1:72:a9:79:fe:71:c6:8f:61:9f:eb:04:88:7e:34:
87:cf:3d:c6:64:bc:88:9c:e2:cc:a4:0d:1e:f8:23:
b8:dd:d5:55:58:59:40:9a:c0:4e:62:ff:57:04:0a:
dd:5c:ca:3d:ac:21:dd:da:2c:b9:6e:f5:80:7b:cc:
95:9f:a4:0b:21:89:ae:2e:3a:34:cf:7b:73:9e:4b:
26:d6:46:99:bb:8f:14:5b:8d:23:ac:c7:bc:a0:3c:
3e:2a:cc:de:05:a7:92:7b:81:68:b3:b1:9b:ee:03:
66:c9:47:4c:61:67:fa:06:ea:63:bf:95:5e:4d:70:
54:15:bf:ef:f7:a2:fe:9c:f6:f3:ea:5a:dc:16:1a:
76:00:60:ab:94:c2:94:62:38:4d:ef:d0:ee:db:d5:
94:bf:e5:87:f6:9d:94:14:22:52:78:53:86:90:b2:
a4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3A:F6:E7:04:7B:D2:7B:62:59:C7:E1:A2:1B:46:DD:C0:46:10:61
X509v3 Authority Key Identifier:
keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/DDr25wR70ntiWcfhohtG3cBGEGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.32.0/19
185.74.128.0/22
IPv6:
2a00:d3e0::/29
Signature Algorithm: sha256WithRSAEncryption
00:24:89:25:0c:52:2d:ed:ed:5e:15:65:c0:cd:b0:1c:61:78:
4b:6c:99:eb:eb:a3:e4:39:f0:90:78:d6:39:c5:c4:85:48:a4:
fd:3d:80:f7:2f:cd:47:60:bf:02:ec:c2:fe:da:5b:c3:53:2b:
22:43:0a:c8:ea:ca:fe:1c:f4:6f:ec:69:fa:e7:da:39:10:bf:
ed:0e:01:20:3e:a3:6a:f7:01:6b:6a:25:c3:30:cc:66:2c:b8:
27:84:8c:57:fa:0f:d9:b5:d3:81:89:cc:e0:1f:64:77:c7:93:
91:27:54:29:1d:1d:6f:7c:af:c1:e1:01:ac:e6:59:bd:1b:6a:
79:b4:ff:d0:a4:c4:be:fd:80:f6:69:f5:11:be:08:eb:56:1d:
67:51:d5:d6:05:50:45:db:09:74:56:b2:c4:bd:55:04:ef:ee:
f1:2a:e0:39:75:a6:bb:d3:c9:3e:dc:cc:6a:61:ec:0c:88:26:
f4:54:ed:b2:e0:22:7e:d9:37:b9:85:07:94:d9:6b:ef:4f:90:
74:96:32:37:de:dc:b9:4b:48:55:b6:30:fb:93:c3:e4:92:2c:
ba:67:af:e4:79:d4:ca:53:a2:f0:ea:97:ee:0a:f2:9c:f9:37:
8e:50:ac:e4:52:95:16:c6:5d:a6:49:9d:c6:1b:15:9c:80:99:
34:7b:c7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 05:19:32 2024 by rpki-client on console-fra.rpki-client.org