Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/GIC1NkHgdxftANxZbMoUblhtXLo.roa
File: GIC1NkHgdxftANxZbMoUblhtXLo.roa (raw, json)
Hash identifier: l6pQ2f1PTS7bHOs4rhpn88PVSnFDezTUSdAC8+33NR0=
Subject key identifier: 18:80:B5:36:41:E0:77:17:ED:00:DC:59:6C:CA:14:6E:58:6D:5C:BA
Certificate issuer: /CN=57f9c1fb22bce1ef241dd7ef892a518d0566a8ab
Certificate serial: 018CC2DB61E1E7369F347CDA90D5D8E94547
Authority key identifier: 57:F9:C1:FB:22:BC:E1:EF:24:1D:D7:EF:89:2A:51:8D:05:66:A8:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V_nB-yK84e8kHdfviSpRjQVmqKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/GIC1NkHgdxftANxZbMoUblhtXLo.roa
Signing time: Mon 01 Jan 2024 02:30:06 +0000
ROA not before: Mon 01 Jan 2024 02:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43355
IP address blocks: 193.111.180.0/22 maxlen: 24
2a0b:7240::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/V_nB-yK84e8kHdfviSpRjQVmqKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:61:e1:e7:36:9f:34:7c:da:90:d5:d8:e9:45:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57f9c1fb22bce1ef241dd7ef892a518d0566a8ab
Validity
Not Before: Jan 1 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1880b53641e07717ed00dc596cca146e586d5cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:ef:54:a0:45:15:d8:fb:6c:da:d2:f6:59:
1a:3a:41:1d:e9:fa:3c:14:0e:70:d7:21:57:f3:6c:
99:fd:50:a2:f2:70:9d:96:5e:76:71:18:d7:99:91:
a7:e9:a6:36:83:8e:73:76:07:68:7e:d7:49:79:99:
6b:54:8e:16:21:b5:46:49:60:7f:a2:59:ae:5c:ec:
7f:ab:73:22:a9:5e:b9:09:c3:61:a6:f7:a1:b5:ea:
29:cb:a3:16:b4:f6:e6:3f:93:35:60:a1:55:56:7f:
3d:c6:7c:78:1e:09:d2:ac:18:24:26:8f:59:05:0f:
5d:b4:1f:aa:7b:f5:92:3e:6b:a7:62:42:2e:ac:90:
8d:96:94:b1:7b:d4:38:40:d1:a5:f1:c3:25:f2:d7:
b3:14:1e:61:89:ed:30:3b:cc:24:5d:74:cc:3a:f0:
90:e5:94:9a:63:72:96:85:fc:31:e1:9b:98:d6:ba:
49:d3:20:4e:36:ea:42:7d:99:19:29:d3:ba:fa:d5:
61:bb:f3:b3:ac:31:9d:15:28:a6:20:34:17:5b:48:
0d:12:61:b1:15:35:f8:9a:cd:cd:29:a7:64:e3:7b:
f5:2b:92:cc:09:82:6c:70:a1:7a:78:ea:7d:07:98:
ec:f7:1b:0f:c8:31:50:d9:d9:42:8b:6c:5a:e7:7a:
30:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:80:B5:36:41:E0:77:17:ED:00:DC:59:6C:CA:14:6E:58:6D:5C:BA
X509v3 Authority Key Identifier:
keyid:57:F9:C1:FB:22:BC:E1:EF:24:1D:D7:EF:89:2A:51:8D:05:66:A8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_nB-yK84e8kHdfviSpRjQVmqKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/GIC1NkHgdxftANxZbMoUblhtXLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.180.0/22
IPv6:
2a0b:7240::/29
Signature Algorithm: sha256WithRSAEncryption
51:c2:4f:a7:a7:0c:72:75:75:cb:b6:a6:66:92:5c:a8:ff:3b:
13:e0:17:40:51:8e:94:f2:21:ab:02:65:3b:52:54:65:d8:d6:
2d:7f:38:3d:9e:d6:e7:5f:b0:f2:cf:12:88:03:ef:f4:61:28:
bb:b1:44:72:69:48:da:20:cb:38:f6:37:15:63:3a:f1:27:dc:
17:d8:f8:44:2d:61:b7:a0:96:7a:57:00:1a:eb:17:9d:e0:d3:
b8:85:27:7e:4d:6b:df:41:c8:97:8a:79:96:73:71:cf:1b:d8:
1d:4c:d9:3e:05:be:71:8b:3a:e8:c6:1f:b7:d6:b5:73:57:5e:
71:e2:84:3f:dc:a3:ce:54:f6:61:24:8e:f2:cc:c9:50:29:a0:
dc:a8:cb:2c:09:3b:09:ac:1b:2a:68:bf:ba:b0:c0:a1:9e:bb:
be:b2:fa:1d:6c:37:e7:d8:e5:ea:41:8c:aa:a7:94:10:32:80:
8f:0d:b7:d3:d2:23:68:65:a7:14:66:3d:04:af:52:1f:6f:17:
b4:28:f9:fd:4b:5e:53:43:af:19:68:54:c9:0d:e5:b1:cd:6a:
17:e7:57:5d:86:7c:5e:da:e4:e4:2a:cf:b7:7b:64:e9:f0:53:
16:01:68:c0:7a:09:25:d1:6c:31:ea:4f:c4:28:78:f6:b6:e4:
bf:0a:0a:29
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzC22Hh5zafNHzakNXY6UVHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZjljMWZiMjJiY2UxZWYyNDFkZDdlZjg5MmE1MThkMDU2
NmE4YWIwHhcNMjQwMTAxMDIzMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODgwYjUzNjQxZTA3NzE3ZWQwMGRjNTk2Y2NhMTQ2ZTU4NmQ1Y2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG3vVKBFFdj7bNrS9lkaOkEd6fo8
FA5w1yFX82yZ/VCi8nCdll52cRjXmZGn6aY2g45zdgdoftdJeZlrVI4WIbVGSWB/
olmuXOx/q3MiqV65CcNhpvehteopy6MWtPbmP5M1YKFVVn89xnx4HgnSrBgkJo9Z
BQ9dtB+qe/WSPmunYkIurJCNlpSxe9Q4QNGl8cMl8tezFB5hie0wO8wkXXTMOvCQ
5ZSaY3KWhfwx4ZuY1rpJ0yBONupCfZkZKdO6+tVhu/OzrDGdFSimIDQXW0gNEmGx
FTX4ms3NKadk43v1K5LMCYJscKF6eOp9B5js9xsPyDFQ2dlCi2xa53owCwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBiAtTZB4HcX7QDcWWzKFG5YbVy6MB8GA1UdIwQY
MBaAFFf5wfsivOHvJB3X74kqUY0FZqirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVl9uQi15Szg0ZThrSGRmdmlTcFJqUVZtcUtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85NzY1OTctNjU5Yi00NGU0LTkyYjIt
OWQ4ZWEyMzQyOTViLzEvR0lDMU5rSGdkeGZ0QU54WmJNb1VibGh0WExvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS85NzY1OTctNjU5Yi00NGU0LTkyYjItOWQ4ZWEyMzQyOTVi
LzEvVl9uQi15Szg0ZThrSGRmdmlTcFJqUVZtcUtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwW+0MA0E
AgACMAcDBQMqC3JAMA0GCSqGSIb3DQEBCwUAA4IBAQBRwk+npwxydXXLtqZmklyo
/zsT4BdAUY6U8iGrAmU7UlRl2NYtfzg9ntbnX7DyzxKIA+/0YSi7sURyaUjaIMs4
9jcVYzrxJ9wX2PhELWG3oJZ6VwAa6xed4NO4hSd+TWvfQciXinmWc3HPG9gdTNk+
Bb5xizroxh+31rVzV15x4oQ/3KPOVPZhJI7yzMlQKaDcqMssCTsJrBsqaL+6sMCh
nru+svodbDfn2OXqQYyqp5QQMoCPDbfT0iNoZacUZj0Er1Ifbxe0KPn9S15TQ68Z
aFTJDeWxzWoX51ddhnxe2uTkKs+3e2Tp8FMWAWjAegkl0Wwx6k/EKHj2tuS/Cgop
-----END CERTIFICATE-----
Generated at Sat Jun 22 09:11:14 2024 by rpki-client on console-ams.rpki-client.org