Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/Gd5K8pPhz-qJIInGcc8PFaM5yKA.roa
File: Gd5K8pPhz-qJIInGcc8PFaM5yKA.roa (raw, json)
Hash identifier: HRB/xAqNNElZPkpJPj5FnAHEJlOhAamggI3OQ+OlT9Y=
Subject key identifier: 19:DE:4A:F2:93:E1:CF:EA:89:20:89:C6:71:CF:0F:15:A3:39:C8:A0
Certificate issuer: /CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Certificate serial: 018CC64B4FB0C5EC372AF2F6953D16C64F1F
Authority key identifier: 8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/Gd5K8pPhz-qJIInGcc8PFaM5yKA.roa
Signing time: Mon 01 Jan 2024 18:31:13 +0000
ROA not before: Mon 01 Jan 2024 18:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200612
IP address blocks: 185.100.209.0/24 maxlen: 24
185.100.210.0/24 maxlen: 24
185.100.211.0/24 maxlen: 24
185.100.208.0/24 maxlen: 24
185.100.208.0/22 maxlen: 22
2a07:4340::/29 maxlen: 29
2a07:4343::/32 maxlen: 32
2a07:4347::/32 maxlen: 32
2a07:4340::/32 maxlen: 32
2a07:4346::/32 maxlen: 32
2a07:4341::/32 maxlen: 32
2a07:4344::/32 maxlen: 32
2a07:4345::/32 maxlen: 32
2a07:4342::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:4f:b0:c5:ec:37:2a:f2:f6:95:3d:16:c6:4f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Validity
Not Before: Jan 1 18:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19de4af293e1cfea892089c671cf0f15a339c8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e5:54:35:7d:5d:83:64:f1:0a:1a:53:23:e1:
5a:c2:c9:11:d9:01:1a:6f:ce:bb:80:00:fb:81:94:
48:90:e5:a1:47:44:81:71:38:9c:8c:89:25:05:12:
03:c6:6b:43:38:cb:4c:8d:f0:1a:e6:19:c6:53:c4:
7a:4e:a6:95:62:5f:0a:ad:13:a8:14:1d:df:8f:8a:
5d:c3:0d:6f:7f:ed:5b:5a:d4:7c:a5:90:ee:76:5c:
89:8d:03:fc:d1:da:bb:28:9b:56:ab:df:60:49:2f:
1e:cc:d8:c0:cf:98:cf:82:15:91:b8:b6:66:b5:0b:
55:61:88:e8:3d:7e:ea:71:9a:88:a6:68:f3:82:6f:
7a:f1:5e:3d:21:e2:97:8b:52:1b:fc:3a:6c:66:3e:
9b:da:f3:48:3b:92:ae:72:5f:fe:c0:0d:9f:a0:5a:
34:63:8b:d3:51:24:69:1e:50:b6:bd:a8:a3:3d:8e:
98:80:64:45:69:d0:72:79:99:56:99:5c:3b:2c:88:
fa:3e:cd:79:cd:22:67:2f:e2:78:c9:6f:84:91:14:
d7:06:40:2b:2a:6a:a5:70:ff:f0:9f:61:d6:5d:e4:
54:94:78:b3:36:c7:a7:55:1b:1e:36:c7:dc:0e:41:
ab:3e:e5:4d:56:1b:05:74:e7:53:76:31:b1:e9:44:
03:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DE:4A:F2:93:E1:CF:EA:89:20:89:C6:71:CF:0F:15:A3:39:C8:A0
X509v3 Authority Key Identifier:
keyid:8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/Gd5K8pPhz-qJIInGcc8PFaM5yKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.208.0/22
IPv6:
2a07:4340::/29
Signature Algorithm: sha256WithRSAEncryption
6f:80:96:3d:51:33:13:be:9d:32:a6:14:79:b3:22:0d:7c:6a:
9d:50:e9:ec:b2:f4:57:d5:73:bc:88:73:d7:b5:5e:d0:28:89:
71:40:b7:6b:30:2c:88:8b:8f:b0:d1:99:92:0f:80:74:71:b1:
c7:91:29:32:3b:78:bd:e5:82:4a:59:85:a1:e4:1b:77:32:f8:
0a:80:29:5e:f2:5f:93:01:59:4e:a6:ca:6f:80:6e:dd:9e:ae:
1f:86:45:6a:d6:1d:af:da:4b:97:38:99:cb:d6:e0:55:91:64:
fe:a9:67:70:41:99:78:d9:80:c0:b6:7c:0c:3c:35:fa:1a:04:
ea:16:df:ca:37:1b:14:9c:2b:e3:23:15:d4:df:68:f4:48:67:
74:3f:9c:df:09:ad:c8:be:29:7b:4e:90:f5:c6:18:0a:2d:29:
4f:21:a3:52:4a:e2:aa:41:2b:5a:02:7f:7e:79:d8:a1:84:b9:
8a:76:79:97:ee:3d:27:20:4d:78:71:d0:71:af:77:13:00:bc:
e9:d8:8e:bc:5c:81:3f:ec:54:ca:65:fe:e8:e2:10:84:d2:3b:
18:60:a0:12:57:f8:cc:83:fb:35:e3:d8:ab:24:ca:53:37:4e:
63:ca:0a:d5:3e:c8:14:3d:72:c0:f0:74:f9:2a:a2:20:ea:cc:
70:29:ae:67
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzGS0+wxew3KvL2lT0Wxk8fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNzAwM2M3YzY3N2NjM2JkNjg2MDMxNzY5OTJhM2ViZDAy
ZjQ2Y2IwHhcNMjQwMTAxMTgzMTEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWRlNGFmMjkzZTFjZmVhODkyMDg5YzY3MWNmMGYxNWEzMzljOGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguVUNX1dg2TxChpTI+FawskR2QEa
b867gAD7gZRIkOWhR0SBcTicjIklBRIDxmtDOMtMjfAa5hnGU8R6TqaVYl8KrROo
FB3fj4pdww1vf+1bWtR8pZDudlyJjQP80dq7KJtWq99gSS8ezNjAz5jPghWRuLZm
tQtVYYjoPX7qcZqIpmjzgm968V49IeKXi1Ib/DpsZj6b2vNIO5Kucl/+wA2foFo0
Y4vTUSRpHlC2vaijPY6YgGRFadByeZlWmVw7LIj6Ps15zSJnL+J4yW+EkRTXBkAr
KmqlcP/wn2HWXeRUlHizNsenVRseNsfcDkGrPuVNVhsFdOdTdjGx6UQDIQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBneSvKT4c/qiSCJxnHPDxWjOcigMB8GA1UdIwQY
MBaAFI5wA8fGd8w71oYDF2mSo+vQL0bLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam5BRHg4WjN6RHZXaGdNWGFaS2o2OUF2UnNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84ZDM0MTktNzhlMC00MTc2LTgyMTMt
ZjE3ZjAwNTYxMDhjLzEvR2Q1SzhwUGh6LXFKSUluR2NjOFBGYU01eUtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi84ZDM0MTktNzhlMC00MTc2LTgyMTMtZjE3ZjAwNTYxMDhj
LzEvam5BRHg4WjN6RHZXaGdNWGFaS2o2OUF2UnNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWTQMA0E
AgACMAcDBQMqB0NAMA0GCSqGSIb3DQEBCwUAA4IBAQBvgJY9UTMTvp0yphR5syIN
fGqdUOnssvRX1XO8iHPXtV7QKIlxQLdrMCyIi4+w0ZmSD4B0cbHHkSkyO3i95YJK
WYWh5Bt3MvgKgCle8l+TAVlOpspvgG7dnq4fhkVq1h2v2kuXOJnL1uBVkWT+qWdw
QZl42YDAtnwMPDX6GgTqFt/KNxsUnCvjIxXU32j0SGd0P5zfCa3Ivil7TpD1xhgK
LSlPIaNSSuKqQStaAn9+edihhLmKdnmX7j0nIE14cdBxr3cTALzp2I68XIE/7FTK
Zf7o4hCE0jsYYKASV/jMg/s149irJMpTN05jygrVPsgUPXLA8HT5KqIg6sxwKa5n
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:01:16 2024 by rpki-client on console-fra.rpki-client.org