Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/G8FZfl5elTF06TPL4AttnPvLc3g.roa
File: G8FZfl5elTF06TPL4AttnPvLc3g.roa (raw, json)
Hash identifier: co7v6PS2M65UJHFVrFCQaRvwUOVBFeU1wwAprozYOmw=
Subject key identifier: 1B:C1:59:7E:5E:5E:95:31:74:E9:33:CB:E0:0B:6D:9C:FB:CB:73:78
Certificate issuer: /CN=e86fc9f927947aa48983b027cf3de38475b053d3
Certificate serial: 018CC8013E65DA1543EAC73A482B1BB4F7F9
Authority key identifier: E8:6F:C9:F9:27:94:7A:A4:89:83:B0:27:CF:3D:E3:84:75:B0:53:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6G_J-SeUeqSJg7Anzz3jhHWwU9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/G8FZfl5elTF06TPL4AttnPvLc3g.roa
Signing time: Tue 02 Jan 2024 02:29:33 +0000
ROA not before: Tue 02 Jan 2024 02:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50123
IP address blocks: 194.247.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/6G_J-SeUeqSJg7Anzz3jhHWwU9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/6G_J-SeUeqSJg7Anzz3jhHWwU9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6G_J-SeUeqSJg7Anzz3jhHWwU9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:3e:65:da:15:43:ea:c7:3a:48:2b:1b:b4:f7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86fc9f927947aa48983b027cf3de38475b053d3
Validity
Not Before: Jan 2 02:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bc1597e5e5e953174e933cbe00b6d9cfbcb7378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:be:bb:4a:52:b8:aa:11:74:d0:79:c5:05:6d:
ae:2a:66:78:b3:8e:ab:30:b9:6c:97:b5:4d:43:2f:
55:c0:49:3f:89:14:3a:ed:d4:fc:fe:ba:76:af:b4:
d1:0c:aa:ce:66:66:f0:da:84:80:b7:7d:d4:98:78:
ec:67:e8:50:83:12:1f:c1:96:e0:72:9e:3d:76:b4:
bc:0f:93:e1:6e:fb:e9:41:c6:e0:78:1a:b6:71:2c:
0f:66:fc:3e:9e:d8:34:1c:bc:15:3f:bb:de:e2:db:
c3:9b:46:88:b9:66:f6:3e:b4:2c:36:a0:a6:35:6d:
e3:2d:2b:de:01:a8:58:8e:ad:b7:5f:63:e3:67:4a:
81:2d:48:ef:55:c8:88:2f:64:59:6f:45:a6:35:8d:
c3:ba:9c:e1:7a:b1:16:b0:12:38:c2:bb:fb:b3:ba:
c4:41:b5:23:d5:50:9a:d1:3d:d2:af:9d:b4:04:3c:
24:2c:07:a7:84:b5:0c:38:c8:1f:32:f0:87:1d:18:
8a:ad:98:86:5c:ea:a3:c0:49:73:72:f2:4e:c5:2e:
c1:33:ab:84:42:58:c9:fb:8b:04:58:41:4d:5e:9f:
43:8a:f6:f3:eb:01:fd:29:09:e1:1b:ae:6e:37:35:
da:eb:0d:df:fa:71:9e:1f:f6:bb:a7:da:7b:d1:77:
65:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C1:59:7E:5E:5E:95:31:74:E9:33:CB:E0:0B:6D:9C:FB:CB:73:78
X509v3 Authority Key Identifier:
keyid:E8:6F:C9:F9:27:94:7A:A4:89:83:B0:27:CF:3D:E3:84:75:B0:53:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6G_J-SeUeqSJg7Anzz3jhHWwU9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/G8FZfl5elTF06TPL4AttnPvLc3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/6G_J-SeUeqSJg7Anzz3jhHWwU9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.180.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:f4:66:1f:e3:86:dd:f2:b1:cd:7f:de:ac:06:d1:27:65:73:
d5:c6:1a:14:d1:6d:f7:88:bf:21:4a:8b:da:c0:de:1b:ca:2c:
fc:51:0b:87:1e:72:3f:3e:a2:a0:3d:01:9c:d9:4f:dc:e0:9d:
2b:57:61:b3:56:e4:ce:7b:a0:b3:14:30:eb:c1:91:da:f6:6a:
df:59:be:c0:d5:1b:64:f3:36:57:47:02:d6:9e:5f:17:17:14:
1a:76:99:83:f1:7d:25:aa:89:ac:b0:67:c5:6e:39:17:82:db:
df:55:c4:52:79:4a:4a:58:cd:21:ae:b6:af:8b:5d:a9:01:b5:
b2:fb:fd:3d:eb:3d:38:41:da:88:e5:68:fe:45:a1:8f:fd:9a:
b7:cd:e2:63:52:0e:cf:8b:6b:b1:d3:ad:9a:25:e8:6e:94:42:
4e:56:7d:f0:12:c2:fd:93:55:09:dd:05:d3:ee:d0:1f:83:b8:
ee:45:e7:34:94:5b:ec:e5:26:60:92:2d:49:1c:de:54:3f:58:
65:c6:a5:b3:2e:63:d2:7e:d4:a0:6a:37:9f:9c:91:1c:db:5a:
6e:db:6f:f7:6d:d9:d5:2f:8b:25:b9:ef:be:9a:7d:23:c2:94:
e3:17:ad:8e:56:c6:c2:85:be:e1:cd:4b:da:78:f4:29:51:3e:
5c:62:11:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAT5l2hVD6sc6SCsbtPf5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NmZjOWY5Mjc5NDdhYTQ4OTgzYjAyN2NmM2RlMzg0NzVi
MDUzZDMwHhcNMjQwMTAyMDIyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmMxNTk3ZTVlNWU5NTMxNzRlOTMzY2JlMDBiNmQ5Y2ZiY2I3Mzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir67SlK4qhF00HnFBW2uKmZ4s46r
MLlsl7VNQy9VwEk/iRQ67dT8/rp2r7TRDKrOZmbw2oSAt33UmHjsZ+hQgxIfwZbg
cp49drS8D5PhbvvpQcbgeBq2cSwPZvw+ntg0HLwVP7ve4tvDm0aIuWb2PrQsNqCm
NW3jLSveAahYjq23X2PjZ0qBLUjvVciIL2RZb0WmNY3DupzherEWsBI4wrv7s7rE
QbUj1VCa0T3Sr520BDwkLAenhLUMOMgfMvCHHRiKrZiGXOqjwElzcvJOxS7BM6uE
QljJ+4sEWEFNXp9Divbz6wH9KQnhG65uNzXa6w3f+nGeH/a7p9p70XdlBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBvBWX5eXpUxdOkzy+ALbZz7y3N4MB8GA1UdIwQY
MBaAFOhvyfknlHqkiYOwJ88944R1sFPTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkdfSi1TZVVlcVNKZzdBbnp6M2poSFd3VTlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9iYzk1NjMtOGZmOS00ZTk1LThlN2Ut
MTNiNGMwZDBhYWUxLzEvRzhGWmZsNWVsVEYwNlRQTDRBdHRuUHZMYzNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9iYzk1NjMtOGZmOS00ZTk1LThlN2UtMTNiNGMwZDBhYWUx
LzEvNkdfSi1TZVVlcVNKZzdBbnp6M2poSFd3VTlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwve0MA0G
CSqGSIb3DQEBCwUAA4IBAQBL9GYf44bd8rHNf96sBtEnZXPVxhoU0W33iL8hSova
wN4byiz8UQuHHnI/PqKgPQGc2U/c4J0rV2GzVuTOe6CzFDDrwZHa9mrfWb7A1Rtk
8zZXRwLWnl8XFxQadpmD8X0lqomssGfFbjkXgtvfVcRSeUpKWM0hrravi12pAbWy
+/096z04QdqI5Wj+RaGP/Zq3zeJjUg7Pi2ux062aJehulEJOVn3wEsL9k1UJ3QXT
7tAfg7juRec0lFvs5SZgki1JHN5UP1hlxqWzLmPSftSgajefnJEc21pu22/3bdnV
L4slue++mn0jwpTjF62OVsbChb7hzUvaePQpUT5cYhGm
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:12:12 2024 by rpki-client on console-ams.rpki-client.org