Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/GHveTmKIp_WeMGI9j-fJ_QzoFRc.roa
File: GHveTmKIp_WeMGI9j-fJ_QzoFRc.roa (raw, json)
Hash identifier: 7l5TbCsmr1IuLJQpAupardorGSh4230bSs+eL0bhEPg=
Subject key identifier: 18:7B:DE:4E:62:88:A7:F5:9E:30:62:3D:8F:E7:C9:FD:0C:E8:15:17
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018F9CCA256C64F66CF7143915A70C91F0DF
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/GHveTmKIp_WeMGI9j-fJ_QzoFRc.roa
Signing time: Tue 21 May 2024 20:14:04 +0000
ROA not before: Tue 21 May 2024 20:14:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216416
IP address blocks: 2a0d:6f80:2301::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9c:ca:25:6c:64:f6:6c:f7:14:39:15:a7:0c:91:f0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 21 20:14:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=187bde4e6288a7f59e30623d8fe7c9fd0ce81517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5c:11:be:0c:13:db:11:1c:f3:70:b7:f7:ca:
33:c9:68:02:c5:37:80:f0:91:09:b4:59:5d:5e:7b:
92:eb:c3:b0:59:42:52:a7:e6:d0:66:27:37:9b:d4:
b5:c7:6b:eb:9e:64:aa:eb:32:6c:e2:16:26:a6:06:
88:d0:00:f7:1a:08:ca:a9:1a:ce:72:4b:94:18:0d:
13:23:22:fb:a1:51:4f:21:70:7a:ef:35:8d:af:c8:
e6:cb:65:12:98:21:b1:09:34:17:01:ad:f2:fb:1e:
e6:25:90:54:33:c6:aa:64:d9:8c:09:8c:c2:b8:14:
40:f6:bb:f6:c4:8e:1e:d6:86:af:35:de:ea:1a:90:
a5:01:cc:d8:f3:09:45:bc:44:d6:fc:61:87:a1:4c:
75:9e:c8:e8:e3:09:d0:b6:37:f7:cc:7e:9c:8a:10:
53:7c:43:be:ae:25:88:c7:3f:e3:46:ff:75:af:84:
b0:36:51:af:98:2b:a4:78:f7:dd:08:ad:16:dc:e2:
9c:21:c1:44:0c:3f:2a:64:52:24:8d:41:a8:12:b2:
1d:24:8c:04:82:a1:45:9f:7d:17:3c:f2:9b:c7:07:
09:cc:ac:b8:da:d3:a4:01:cb:35:e5:c0:29:fa:9d:
b3:85:e2:42:5d:e7:9c:ba:d1:69:2f:0c:ad:eb:07:
86:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7B:DE:4E:62:88:A7:F5:9E:30:62:3D:8F:E7:C9:FD:0C:E8:15:17
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/GHveTmKIp_WeMGI9j-fJ_QzoFRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:6f80:2301::/48
Signature Algorithm: sha256WithRSAEncryption
1e:28:c5:98:89:9f:45:1b:30:d7:36:ee:60:37:a5:d2:57:67:
ce:10:2b:5c:83:69:b0:d2:53:e8:b8:55:0e:52:8f:88:7f:1b:
70:c4:f2:c3:f5:32:aa:2b:f0:a2:c3:22:76:c9:56:66:80:07:
08:e3:96:29:6c:fa:b5:6c:4e:e2:53:0b:07:c8:03:f4:06:df:
a9:92:8e:e9:74:79:b3:c4:bd:fc:73:7a:aa:a1:5a:49:6f:a6:
03:d0:21:c3:7d:6b:9b:39:3e:6d:f8:13:e1:ac:71:09:4b:ed:
25:df:d7:7d:54:7f:a7:4f:eb:10:f0:c3:bc:3b:13:32:15:a9:
54:aa:b2:c4:93:4f:48:11:34:1a:18:9c:63:22:3f:25:50:06:
a2:28:52:59:57:1a:63:4e:f3:f4:65:b8:e9:26:21:06:85:5f:
01:49:67:15:37:9d:66:f3:69:57:48:cd:26:aa:65:60:6a:03:
d1:db:af:ef:f4:19:0c:a8:ac:ba:7b:2a:19:8d:70:6a:5a:07:
07:0a:13:11:87:ba:ad:99:58:8f:56:92:98:25:56:86:46:75:
f5:96:92:68:99:ef:c1:02:5e:7b:6f:c4:af:a5:90:cc:19:ee:
53:ef:15:21:51:8d:f2:35:c5:35:fe:f2:5e:fe:f8:b4:60:52:
6d:54:dc:f9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY+cyiVsZPZs9xQ5FacMkfDfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjQwNTIxMjAxNDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODdiZGU0ZTYyODhhN2Y1OWUzMDYyM2Q4ZmU3YzlmZDBjZTgxNTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlwRvgwT2xEc83C398ozyWgCxTeA
8JEJtFldXnuS68OwWUJSp+bQZic3m9S1x2vrnmSq6zJs4hYmpgaI0AD3GgjKqRrO
ckuUGA0TIyL7oVFPIXB67zWNr8jmy2USmCGxCTQXAa3y+x7mJZBUM8aqZNmMCYzC
uBRA9rv2xI4e1oavNd7qGpClAczY8wlFvETW/GGHoUx1nsjo4wnQtjf3zH6cihBT
fEO+riWIxz/jRv91r4SwNlGvmCukePfdCK0W3OKcIcFEDD8qZFIkjUGoErIdJIwE
gqFFn30XPPKbxwcJzKy42tOkAcs15cAp+p2zheJCXeecutFpLwyt6weGWQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBh73k5iiKf1njBiPY/nyf0M6BUXMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvR0h2ZVRtS0lwX1dlTUdJOWotZkpfUXpvRlJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg1vgCMB
MA0GCSqGSIb3DQEBCwUAA4IBAQAeKMWYiZ9FGzDXNu5gN6XSV2fOECtcg2mw0lPo
uFUOUo+IfxtwxPLD9TKqK/CiwyJ2yVZmgAcI45YpbPq1bE7iUwsHyAP0Bt+pko7p
dHmzxL38c3qqoVpJb6YD0CHDfWubOT5t+BPhrHEJS+0l39d9VH+nT+sQ8MO8OxMy
FalUqrLEk09IETQaGJxjIj8lUAaiKFJZVxpjTvP0ZbjpJiEGhV8BSWcVN51m82lX
SM0mqmVgagPR26/v9BkMqKy6eyoZjXBqWgcHChMRh7qtmViPVpKYJVaGRnX1lpJo
me/BAl57b8SvpZDMGe5T7xUhUY3yNcU1/vJe/vi0YFJtVNz5
-----END CERTIFICATE-----
Generated at Sun Jun 30 18:45:46 2024 by rpki-client on console-fra.rpki-client.org