Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/GHpec7zHYPHVc-u31tFlje5Kw9A.roa
File: GHpec7zHYPHVc-u31tFlje5Kw9A.roa (raw, json)
Hash identifier: U+XLC3cnnlaiYnkRCTpPc/nPXOo5/W6BMLWq2JqLK4Q=
Subject key identifier: 18:7A:5E:73:BC:C7:60:F1:D5:73:EB:B7:D6:D1:65:8D:EE:4A:C3:D0
Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Certificate serial: 018DFB8893270C4661436F37AEE31AD7C900
Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/GHpec7zHYPHVc-u31tFlje5Kw9A.roa
Signing time: Fri 01 Mar 2024 19:40:48 +0000
ROA not before: Fri 01 Mar 2024 19:40:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8492
IP address blocks: 91.90.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fb:88:93:27:0c:46:61:43:6f:37:ae:e3:1a:d7:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Validity
Not Before: Mar 1 19:40:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=187a5e73bcc760f1d573ebb7d6d1658dee4ac3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:bf:5b:06:45:5c:cc:d8:3f:a1:b3:dd:74:
51:88:9a:85:c4:63:fe:97:03:a6:14:89:97:a5:4f:
87:70:c1:3b:5c:23:ac:4d:41:7e:7a:f1:06:23:b6:
ee:07:c3:dd:98:79:18:58:18:e4:0d:6a:c0:1f:1d:
0f:ee:28:21:e6:f2:70:36:a3:23:1f:d8:d2:e2:65:
62:7b:b2:55:9b:30:0e:eb:cc:41:a6:01:9d:5b:a8:
9e:a0:15:cb:70:1f:bf:94:cb:ec:59:b1:bf:80:78:
4b:1f:af:a4:2a:b6:7b:f7:09:80:5f:35:01:ba:a8:
9e:23:fa:9b:d6:96:9c:e8:8d:5a:f2:29:a1:96:b6:
84:9f:0d:07:fb:ad:fe:6b:48:e6:44:35:f8:0d:32:
10:a2:e5:d3:60:a3:0a:ce:13:8c:8d:63:93:1f:4c:
8a:6f:98:91:69:47:12:51:70:f1:d9:5c:3e:00:f7:
75:f3:cb:d9:b9:f0:e5:aa:aa:0d:da:b2:6c:76:0a:
25:e0:f5:ef:1e:ce:70:41:b1:0c:56:b0:82:e4:7e:
45:28:21:e2:d9:79:2c:5d:78:3b:af:52:43:17:5f:
d8:6f:34:14:5e:1e:85:48:98:51:c6:72:7e:1c:e9:
8e:7e:aa:8f:5b:1b:bd:55:a3:67:32:6e:a9:47:83:
8e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7A:5E:73:BC:C7:60:F1:D5:73:EB:B7:D6:D1:65:8D:EE:4A:C3:D0
X509v3 Authority Key Identifier:
keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/GHpec7zHYPHVc-u31tFlje5Kw9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.211.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:d6:71:39:f0:7d:27:60:9b:bc:4c:a7:e4:cb:4a:75:6d:86:
ef:2f:41:3d:76:a5:1d:59:48:4f:cb:1c:89:96:e2:c7:a4:8d:
b4:73:4f:ed:a2:64:57:5d:16:18:c4:d0:b5:7e:23:8e:9b:32:
48:d1:27:8c:75:e5:93:b2:2a:6c:0e:b5:60:79:ef:7b:77:e2:
29:27:21:b6:b2:5d:7e:a8:f3:0b:e7:f5:9c:3f:41:cb:48:2d:
38:a8:46:b3:91:80:85:4c:dc:4c:68:f4:4f:f8:0f:7a:72:32:
ef:3b:c7:89:d7:35:91:f7:db:95:fa:23:11:06:8b:70:06:3e:
89:31:28:c3:74:e0:75:25:ca:9f:3b:73:94:bb:f5:93:5c:bb:
21:cf:40:2c:dc:6c:60:8f:d0:be:14:8b:69:91:ec:9f:05:d5:
24:04:d1:a6:9c:26:7d:24:2d:a2:ae:b4:f8:23:f1:67:80:8a:
69:8c:f6:4d:a5:43:79:f6:9a:1d:b4:b1:23:09:fb:c4:17:19:
61:7f:5d:73:33:fe:50:d8:25:c0:2e:b7:eb:c0:7a:59:83:6b:
b6:28:22:c7:e0:7f:e3:7c:46:2b:de:2e:7e:27:b7:ed:7b:0a:
02:c9:a8:28:d9:4b:76:3c:47:55:13:ce:53:69:3d:39:fc:7d:
47:0f:74:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY37iJMnDEZhQ283ruMa18kAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMGFhMTM1ZTc2NmJjNWIyN2RkMmY1MDE0ZmI2M2FlYjU5
MWY4ZmEwHhcNMjQwMzAxMTk0MDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODdhNWU3M2JjYzc2MGYxZDU3M2ViYjdkNmQxNjU4ZGVlNGFjM2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEC/WwZFXMzYP6Gz3XRRiJqFxGP+
lwOmFImXpU+HcME7XCOsTUF+evEGI7buB8PdmHkYWBjkDWrAHx0P7igh5vJwNqMj
H9jS4mVie7JVmzAO68xBpgGdW6ieoBXLcB+/lMvsWbG/gHhLH6+kKrZ79wmAXzUB
uqieI/qb1pac6I1a8imhlraEnw0H+63+a0jmRDX4DTIQouXTYKMKzhOMjWOTH0yK
b5iRaUcSUXDx2Vw+APd188vZufDlqqoN2rJsdgol4PXvHs5wQbEMVrCC5H5FKCHi
2XksXXg7r1JDF1/YbzQUXh6FSJhRxnJ+HOmOfqqPWxu9VaNnMm6pR4OOMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBh6XnO8x2Dx1XPrt9bRZY3uSsPQMB8GA1UdIwQY
MBaAFNoKoTXnZrxbJ90vUBT7Y661kfj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85NDczMDItMmE4Yi00ZGNlLTlmMjEt
YWYzYWYwODJmOTQzLzEvR0hwZWM3ekhZUEhWYy11MzF0RmxqZTVLdzlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85NDczMDItMmE4Yi00ZGNlLTlmMjEtYWYzYWYwODJmOTQz
LzEvMmdxaE5lZG12RnNuM1M5UUZQdGpycldSLVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW1rTMA0G
CSqGSIb3DQEBCwUAA4IBAQCb1nE58H0nYJu8TKfky0p1bYbvL0E9dqUdWUhPyxyJ
luLHpI20c0/tomRXXRYYxNC1fiOOmzJI0SeMdeWTsipsDrVgee97d+IpJyG2sl1+
qPML5/WcP0HLSC04qEazkYCFTNxMaPRP+A96cjLvO8eJ1zWR99uV+iMRBotwBj6J
MSjDdOB1JcqfO3OUu/WTXLshz0As3Gxgj9C+FItpkeyfBdUkBNGmnCZ9JC2irrT4
I/FngIppjPZNpUN59podtLEjCfvEFxlhf11zM/5Q2CXALrfrwHpZg2u2KCLH4H/j
fEYr3i5+J7ftewoCyago2Ut2PEdVE85TaT05/H1HD3TJ
-----END CERTIFICATE-----
Generated at Sat Jun 22 08:08:42 2024 by rpki-client on console-fra.rpki-client.org