Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/GFXUCZYRdF_TR1nqtvzPqa0VQJE.roa
File: GFXUCZYRdF_TR1nqtvzPqa0VQJE.roa (raw, json)
Hash identifier: LR8YdDKKfe2eMpoaQd+7ghSevNlP9RNzHVqbedVni6c=
Subject key identifier: 18:55:D4:09:96:11:74:5F:D3:47:59:EA:B6:FC:CF:A9:AD:15:40:91
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A82AF52EDB20A95B843DEFE072C65
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/GFXUCZYRdF_TR1nqtvzPqa0VQJE.roa
Signing time: Mon 01 Jan 2024 18:30:21 +0000
ROA not before: Mon 01 Jan 2024 18:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201825
IP address blocks: 37.230.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:82:af:52:ed:b2:0a:95:b8:43:de:fe:07:2c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1855d4099611745fd34759eab6fccfa9ad154091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:02:71:e0:cf:d0:bc:c6:44:51:43:b9:23:e5:
a7:09:09:45:51:b3:4a:93:7f:e5:b5:c8:cc:ca:15:
ae:b1:54:af:f0:44:98:c4:7c:92:8c:27:3d:84:da:
f1:19:2f:96:69:5a:a2:7a:f7:c6:83:89:16:d6:a5:
9d:67:86:94:c8:d5:f3:e2:40:45:8f:b5:c1:d9:36:
41:3f:ca:47:d3:c5:3b:93:3e:3c:5a:ba:2b:cf:13:
5e:95:48:4c:33:78:3e:2c:48:f2:dc:82:a3:12:02:
fc:5b:33:06:cb:45:55:ab:4b:74:98:af:5f:54:e2:
cb:93:2b:c0:4a:63:22:f6:75:2a:5b:e9:17:d1:74:
d1:90:31:81:f1:c9:df:49:d0:93:7c:50:97:47:29:
7e:b9:28:a0:d5:6e:02:c8:d3:f5:39:93:26:d4:96:
c5:d1:53:30:8c:4f:25:89:91:55:de:dd:24:6d:84:
90:71:6d:8f:c4:af:69:0b:c2:56:b3:b2:17:0d:2b:
ce:17:04:39:75:7a:1f:3b:e4:5e:2a:13:08:41:ac:
d3:2b:52:ed:eb:f8:6a:e5:6c:4d:21:de:8a:5a:43:
4f:7f:1c:d0:d5:0d:74:c5:72:84:9c:86:d1:f4:bc:
f1:62:f3:b3:d7:9d:a4:a6:a8:1b:41:56:17:fb:63:
b8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:55:D4:09:96:11:74:5F:D3:47:59:EA:B6:FC:CF:A9:AD:15:40:91
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/GFXUCZYRdF_TR1nqtvzPqa0VQJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.237.0/24
Signature Algorithm: sha256WithRSAEncryption
83:cd:ec:d9:c6:5b:ce:ed:5d:24:a1:3f:52:a4:ef:cf:1f:e7:
e5:91:91:37:39:80:cc:14:8e:e9:22:2d:54:88:38:c6:83:df:
98:f0:67:66:bd:fa:bf:41:3a:2c:ed:90:3e:bf:aa:0d:64:ff:
7d:f2:8e:3c:32:a0:a3:66:0b:22:e8:dc:37:2f:89:d2:05:66:
fe:86:2b:d5:66:59:dd:c5:16:59:54:de:08:24:3c:0e:3a:e0:
b2:f5:b8:d8:69:3f:d5:ef:ee:cd:d1:99:35:d1:b0:36:ed:2e:
0f:e8:4f:38:2d:36:49:18:4d:19:59:c6:eb:45:1d:ba:fb:0a:
23:2e:74:be:c4:39:3c:db:ba:17:a9:77:1c:8a:10:61:98:0d:
14:05:de:c7:b8:5f:26:c0:a7:82:da:ad:72:f3:ef:61:da:48:
1c:98:3b:ea:70:21:d8:a8:ae:75:1a:d8:d7:55:60:59:aa:c0:
0e:14:63:79:7c:91:37:06:57:be:dd:48:1c:60:72:69:81:5b:
57:a3:ae:ea:d1:b7:56:e4:e2:82:a5:d2:d4:c8:80:0b:01:a8:
53:9d:54:d2:6f:16:78:a0:3b:f0:cf:46:a5:62:51:ba:6c:44:
6b:51:51:b1:1c:93:d1:46:42:e0:7f:76:c8:18:eb:50:1a:9f:
35:4f:a1:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSoKvUu2yCpW4Q97+ByxlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjQwMTAxMTgzMDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODU1ZDQwOTk2MTE3NDVmZDM0NzU5ZWFiNmZjY2ZhOWFkMTU0MDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAJx4M/QvMZEUUO5I+WnCQlFUbNK
k3/ltcjMyhWusVSv8ESYxHySjCc9hNrxGS+WaVqievfGg4kW1qWdZ4aUyNXz4kBF
j7XB2TZBP8pH08U7kz48WrorzxNelUhMM3g+LEjy3IKjEgL8WzMGy0VVq0t0mK9f
VOLLkyvASmMi9nUqW+kX0XTRkDGB8cnfSdCTfFCXRyl+uSig1W4CyNP1OZMm1JbF
0VMwjE8liZFV3t0kbYSQcW2PxK9pC8JWs7IXDSvOFwQ5dXofO+ReKhMIQazTK1Lt
6/hq5WxNId6KWkNPfxzQ1Q10xXKEnIbR9LzxYvOz152kpqgbQVYX+2O47QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBhV1AmWEXRf00dZ6rb8z6mtFUCRMB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvR0ZYVUNaWVJkRl9UUjFucXR2elBxYTBWUUpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJebtMA0G
CSqGSIb3DQEBCwUAA4IBAQCDzezZxlvO7V0koT9SpO/PH+flkZE3OYDMFI7pIi1U
iDjGg9+Y8Gdmvfq/QTos7ZA+v6oNZP998o48MqCjZgsi6Nw3L4nSBWb+hivVZlnd
xRZZVN4IJDwOOuCy9bjYaT/V7+7N0Zk10bA27S4P6E84LTZJGE0ZWcbrRR26+woj
LnS+xDk827oXqXccihBhmA0UBd7HuF8mwKeC2q1y8+9h2kgcmDvqcCHYqK51GtjX
VWBZqsAOFGN5fJE3Ble+3UgcYHJpgVtXo67q0bdW5OKCpdLUyIALAahTnVTSbxZ4
oDvwz0alYlG6bERrUVGxHJPRRkLgf3bIGOtQGp81T6Ee
-----END CERTIFICATE-----
Generated at Wed Jun 26 09:02:26 2024 by rpki-client on console-ams.rpki-client.org