Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/gb5Z6mPCiB018Cop07d2ZrgX-r4.roa
File: gb5Z6mPCiB018Cop07d2ZrgX-r4.roa (raw, json)
Hash identifier: WHEERcSZiQhwr4aSS+NPwsP8t4TR59Gy6zyMon2zvDI=
Subject key identifier: 81:BE:59:EA:63:C2:88:1D:35:F0:2A:29:D3:B7:76:66:B8:17:FA:BE
Certificate issuer: /CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Certificate serial: 0190EEEB6CE89B594BEC4D8D677C86F3970E
Authority key identifier: 2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/gb5Z6mPCiB018Cop07d2ZrgX-r4.roa
Signing time: Fri 26 Jul 2024 12:02:04 +0000
ROA not before: Fri 26 Jul 2024 12:02:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 195.234.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ee:eb:6c:e8:9b:59:4b:ec:4d:8d:67:7c:86:f3:97:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Validity
Not Before: Jul 26 12:02:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81be59ea63c2881d35f02a29d3b77666b817fabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:07:7b:15:7a:bc:94:70:59:de:01:33:03:f9:
b4:96:69:40:2d:e6:69:5a:bb:74:02:de:fd:f2:de:
fa:48:a3:07:98:79:81:d7:f0:f7:75:20:cf:a1:77:
84:08:e2:80:57:88:a8:48:c3:f2:01:67:95:ff:12:
c9:e5:7c:8a:dc:65:86:eb:93:7e:3b:44:9b:b9:84:
66:7a:96:64:f7:ca:8b:f8:e4:c3:09:8c:e0:56:a5:
10:65:73:98:6b:ed:41:18:b2:a4:ac:a7:84:20:6d:
44:45:03:e8:08:e1:92:f9:0a:92:3a:57:6f:ec:39:
41:0b:ad:28:1e:eb:3d:bb:d0:21:55:5d:d6:9f:63:
84:8b:6a:68:6e:f3:36:76:2d:a1:c9:9a:60:ab:81:
2c:32:53:9d:f6:b3:62:32:d7:c8:53:95:7f:35:28:
a5:0e:8f:66:e4:d6:66:e2:ed:19:92:74:b0:63:0c:
e4:1d:13:c8:e9:a8:29:ad:d6:32:c5:ea:bd:a0:12:
90:b4:db:14:b9:a8:11:98:c1:c7:81:04:56:40:35:
62:24:60:53:69:94:1d:df:c7:f5:cf:d8:69:32:52:
e3:17:36:31:76:97:2e:d1:1a:4f:34:d7:72:8e:86:
e6:11:46:33:b2:78:03:6a:17:ef:89:de:c7:66:79:
4c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BE:59:EA:63:C2:88:1D:35:F0:2A:29:D3:B7:76:66:B8:17:FA:BE
X509v3 Authority Key Identifier:
keyid:2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/gb5Z6mPCiB018Cop07d2ZrgX-r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.153.0/24
Signature Algorithm: sha256WithRSAEncryption
30:07:97:14:0a:cd:0d:e9:f0:e0:80:9b:c9:d8:10:b6:8c:a0:
8e:b9:e8:4a:48:0e:6c:f2:68:c4:4e:0a:28:34:7c:e4:ca:f1:
b5:bc:0d:e3:21:17:59:85:77:76:ae:37:b9:21:79:ec:85:15:
10:fa:29:db:7c:d9:23:0d:45:b2:a1:a6:27:8c:e7:45:f5:a2:
b2:e3:5d:93:76:af:4a:d2:eb:d1:4f:30:52:3a:37:b6:b4:bf:
86:50:b7:55:e9:db:d6:21:c5:25:db:40:53:a5:34:22:57:12:
c2:a4:df:7b:69:02:5c:4e:27:75:f1:fc:9a:af:e1:96:d0:d7:
0e:a7:9e:67:39:46:64:ca:5a:13:fb:8f:b2:90:10:8f:66:0e:
29:d7:ed:6a:d7:67:53:97:0c:1d:49:cb:38:53:d1:60:7a:a9:
0d:b3:5c:db:ad:c9:80:55:b1:c5:39:27:e3:3c:b5:ba:75:c7:
87:2c:3b:31:f8:d8:24:5a:3d:de:13:6b:5b:28:7f:3d:e6:fa:
56:01:45:1d:a3:86:bb:53:a3:b4:80:c1:ac:82:3d:7d:cc:30:
74:41:0f:be:51:13:04:e7:1a:96:0e:9b:1b:a7:7a:c1:cd:88:
07:76:c9:d7:9a:31:99:57:5c:75:79:6a:b8:cc:0c:23:33:77:
8a:f5:59:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDu62zom1lL7E2NZ3yG85cOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMDUxZWYyMzA2MGViNTFiZmQ4Yzc5Nzk1ZjZhNGRhZjQ4
YTNhYTAwHhcNMjQwNzI2MTIwMjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWJlNTllYTYzYzI4ODFkMzVmMDJhMjlkM2I3NzY2NmI4MTdmYWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ad7FXq8lHBZ3gEzA/m0lmlALeZp
Wrt0At798t76SKMHmHmB1/D3dSDPoXeECOKAV4ioSMPyAWeV/xLJ5XyK3GWG65N+
O0SbuYRmepZk98qL+OTDCYzgVqUQZXOYa+1BGLKkrKeEIG1ERQPoCOGS+QqSOldv
7DlBC60oHus9u9AhVV3Wn2OEi2pobvM2di2hyZpgq4EsMlOd9rNiMtfIU5V/NSil
Do9m5NZm4u0ZknSwYwzkHRPI6agprdYyxeq9oBKQtNsUuagRmMHHgQRWQDViJGBT
aZQd38f1z9hpMlLjFzYxdpcu0RpPNNdyjobmEUYzsngDahfvid7HZnlMdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIG+WepjwogdNfAqKdO3dma4F/q+MB8GA1UdIwQY
MBaAFCsFHvIwYOtRv9jHl5X2pNr0ijqgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3dVZThqQmc2MUdfMk1lWGxmYWsydlNLT3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8zODE3OWMtMjVhYi00MzY4LThjZjgt
NTdlNTkzY2Y5YTRlLzEvZ2I1WjZtUENpQjAxOENvcDA3ZDJacmdYLXI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8zODE3OWMtMjVhYi00MzY4LThjZjgtNTdlNTkzY2Y5YTRl
LzEvS3dVZThqQmc2MUdfMk1lWGxmYWsydlNLT3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+qZMA0G
CSqGSIb3DQEBCwUAA4IBAQAwB5cUCs0N6fDggJvJ2BC2jKCOuehKSA5s8mjETgoo
NHzkyvG1vA3jIRdZhXd2rje5IXnshRUQ+inbfNkjDUWyoaYnjOdF9aKy412Tdq9K
0uvRTzBSOje2tL+GULdV6dvWIcUl20BTpTQiVxLCpN97aQJcTid18fyar+GW0NcO
p55nOUZkyloT+4+ykBCPZg4p1+1q12dTlwwdScs4U9FgeqkNs1zbrcmAVbHFOSfj
PLW6dceHLDsx+NgkWj3eE2tbKH895vpWAUUdo4a7U6O0gMGsgj19zDB0QQ++URME
5xqWDpsbp3rBzYgHdsnXmjGZV1x1eWq4zAwjM3eK9VnC
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:04:02 2024 by rpki-client on console-ams.rpki-client.org