Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DiliRPwRjP6D-WBIXNpcI_uIJzI.roa
File: DiliRPwRjP6D-WBIXNpcI_uIJzI.roa (raw, json)
Hash identifier: ut4bSKD0jhs7WDv5PHmxnpCUZErJkrPwIwtAwTPpjBU=
Subject key identifier: 0E:29:62:44:FC:11:8C:FE:83:F9:60:48:5C:DA:5C:23:FB:88:27:32
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 01968F66F0C421D755C423CE01AA6A5F9ADF
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DiliRPwRjP6D-WBIXNpcI_uIJzI.roa
Signing time: Fri 02 May 2025 05:10:10 +0000
ROA not before: Fri 02 May 2025 05:10:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211888
IP address blocks: 188.72.56.0/24 maxlen: 24
188.72.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:66:f0:c4:21:d7:55:c4:23:ce:01:aa:6a:5f:9a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: May 2 05:10:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e296244fc118cfe83f960485cda5c23fb882732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ea:f3:33:aa:dd:e3:ea:b2:f3:1d:72:f7:62:
de:b5:92:7b:20:83:27:ad:52:0f:4b:07:29:e3:8b:
4f:27:01:72:a1:43:dc:73:f7:38:fb:75:12:f6:03:
ee:d4:32:51:0b:18:7c:63:8c:1a:d5:fc:3c:47:d0:
fa:c3:70:26:75:da:71:44:56:0b:ed:00:45:01:1d:
64:f3:76:0c:bb:18:52:34:77:00:63:fc:a9:c1:88:
22:48:a3:b5:14:cc:89:aa:51:31:4e:22:54:ff:64:
9b:8f:a6:cd:62:ae:e3:59:2c:1d:b7:60:8f:6f:55:
29:49:ea:21:dd:e9:63:c8:98:6c:e2:d7:25:46:96:
47:24:bc:b3:51:4e:5d:0a:3d:5b:6e:3b:23:44:4e:
7c:33:e9:63:64:6d:2a:cf:29:3b:e1:da:22:71:db:
6d:1b:c5:11:f4:48:a2:19:2b:bb:45:0e:4a:42:11:
1a:e1:e0:68:21:3c:d4:54:da:c5:f3:46:60:d1:be:
c0:51:8f:07:54:3c:00:be:ff:35:4b:04:b2:4e:81:
73:f9:0d:22:b3:d3:6b:4b:c5:12:d9:d3:63:5b:0f:
37:a4:20:2f:fc:14:df:30:ee:97:8b:f5:5b:23:70:
6b:58:a3:48:9c:2a:e0:fd:3c:88:e3:e0:55:92:3a:
9a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:29:62:44:FC:11:8C:FE:83:F9:60:48:5C:DA:5C:23:FB:88:27:32
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DiliRPwRjP6D-WBIXNpcI_uIJzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.56.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:1e:73:2d:7c:96:81:6c:46:12:78:a8:42:f2:d0:ee:2d:6f:
94:d4:cb:66:5c:c5:1c:4e:59:eb:e6:bc:15:11:56:ec:20:17:
3c:30:05:ac:0b:12:68:7c:59:17:1c:75:41:a5:81:3b:74:2a:
17:28:48:88:a3:89:f0:80:8c:3b:b7:89:40:0f:e0:a1:8f:3b:
ff:97:a2:a4:80:06:d4:0a:c5:bf:b5:17:ba:e8:f4:e8:ca:ca:
49:e4:c6:2d:72:a9:9d:18:23:4f:29:93:3b:87:4e:ff:48:62:
8b:81:b2:49:08:8a:8f:f8:9b:ec:5a:9c:a5:cc:99:fb:a0:c0:
14:41:10:c5:5d:4f:34:ce:e9:1f:95:25:52:4c:4c:c4:ab:cc:
9a:6b:73:b4:2e:6f:bc:7c:2e:57:59:1f:f5:b0:39:80:9a:72:
d2:b2:50:99:2a:17:ec:0e:5a:39:2e:5a:db:13:a0:15:a8:e6:
e9:80:13:be:71:2c:22:80:d2:c7:9c:b0:5e:c4:e3:1b:a1:64:
02:a4:55:9d:a8:6a:02:94:2d:52:56:ad:94:93:62:cc:84:4e:
34:88:10:01:28:cf:ef:b5:d4:01:60:6b:e7:25:2b:5f:92:b6:
b8:28:ea:38:38:58:40:3d:dd:c8:eb:4d:2a:f1:db:1b:46:7d:
32:b6:81:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:45:46 2025 by rpki-client