Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/gb04iAkBQWPyw9Ibl4RyAfltzg0.roa
File: gb04iAkBQWPyw9Ibl4RyAfltzg0.roa (raw, json)
Hash identifier: AsuzD+N3eM4Dlm5CmiRFvsp1xCp+p3VXuMuetzYVR/0=
Subject key identifier: 81:BD:38:88:09:01:41:63:F2:C3:D2:1B:97:84:72:01:F9:6D:CE:0D
Certificate issuer: /CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Certificate serial: 018F0205DA1D53869855D5BD57D807E4D88C
Authority key identifier: C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/gb04iAkBQWPyw9Ibl4RyAfltzg0.roa
Signing time: Sun 21 Apr 2024 18:58:09 +0000
ROA not before: Sun 21 Apr 2024 18:58:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203728
IP address blocks: 2001:678:90c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:02:05:da:1d:53:86:98:55:d5:bd:57:d8:07:e4:d8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Validity
Not Before: Apr 21 18:58:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81bd388809014163f2c3d21b97847201f96dce0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:30:b1:34:6c:05:16:24:25:94:70:08:52:1c:
d8:6a:39:81:b9:68:0d:c9:62:13:b1:33:59:a7:c9:
a1:a7:a4:78:27:98:10:0c:af:c5:ab:82:8e:d5:85:
8d:8c:89:31:14:9d:83:59:be:cb:32:be:ec:78:94:
b7:e8:31:7f:a7:e9:12:1b:b5:ce:aa:61:17:c3:13:
eb:33:ce:3c:be:df:4f:25:b4:70:25:76:af:ea:4c:
3d:50:c2:66:6d:96:32:56:cb:ea:18:40:0f:df:16:
35:ff:ab:ad:8c:e4:80:14:2b:fb:5b:00:6d:a5:33:
92:e4:c6:72:1f:ee:ed:1b:21:3c:3d:bf:1a:98:f6:
1e:ff:64:55:92:3f:10:60:d9:2c:9c:2d:e8:22:2f:
6b:bc:91:08:92:31:5a:fc:f0:6b:1f:46:39:1f:01:
8c:c4:2b:1d:38:96:72:28:8d:2e:02:24:ad:4d:81:
c5:fc:95:3f:b0:97:a0:29:9b:9e:0b:52:69:4c:3d:
fa:46:99:d0:4b:2a:bd:e6:11:2b:b2:42:d3:95:bf:
ef:cd:f5:ac:b8:4e:13:91:74:1f:d0:25:fe:da:ed:
6b:dd:25:a3:bd:aa:f2:e0:ce:b6:92:7f:33:09:0c:
ad:1c:5f:58:dd:66:87:bb:3f:ad:fc:7c:6d:42:67:
4e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BD:38:88:09:01:41:63:F2:C3:D2:1B:97:84:72:01:F9:6D:CE:0D
X509v3 Authority Key Identifier:
keyid:C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/gb04iAkBQWPyw9Ibl4RyAfltzg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:90c::/48
Signature Algorithm: sha256WithRSAEncryption
4c:c7:ac:af:b8:d0:19:22:08:bc:7a:f2:66:76:0b:36:96:f5:
f7:21:9c:17:75:66:41:36:64:55:87:7b:97:8c:9b:4e:91:3c:
45:e9:54:b3:3d:d8:07:48:5a:69:40:f9:e3:0f:b6:ad:af:bc:
db:5e:a1:72:2a:74:ce:33:32:24:7c:7b:b2:7b:7e:b5:44:43:
5c:d2:23:f7:7a:f2:ab:ab:5a:7d:c9:0b:25:d8:0b:35:e9:9a:
24:00:24:77:34:c5:26:b7:5b:65:93:45:d9:f0:28:59:79:9d:
aa:ab:3b:fe:db:e5:8e:77:d6:95:7e:dc:5c:35:02:49:fb:26:
92:ed:f9:c9:59:df:b5:73:eb:00:78:37:90:70:88:fa:ce:04:
29:3f:5d:a6:a0:ad:0d:e1:e8:b6:d9:36:3f:c2:66:a4:87:86:
ab:17:ec:42:0d:2a:64:25:a4:5c:06:04:e9:dd:4d:72:d5:a1:
5d:f3:df:e5:02:64:d9:81:e2:91:14:92:63:62:b0:fe:99:24:
9d:46:8f:b3:25:a9:03:f8:64:fe:91:3d:3e:8e:7f:c1:69:0a:
43:64:6f:63:73:d0:df:e8:00:2e:fb:2e:81:05:11:ee:a9:52:
84:a3:54:30:dd:71:6a:16:f7:23:10:8d:e1:c1:48:4e:fb:fc:
05:cb:bf:89
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY8CBdodU4aYVdW9V9gH5NiMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YzFkY2Y0YzAyMzQ2N2RiM2JmMmVlZjNkZDE1YjJlZmVl
YjJiZDcwHhcNMjQwNDIxMTg1ODA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWJkMzg4ODA5MDE0MTYzZjJjM2QyMWI5Nzg0NzIwMWY5NmRjZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDCxNGwFFiQllHAIUhzYajmBuWgN
yWITsTNZp8mhp6R4J5gQDK/Fq4KO1YWNjIkxFJ2DWb7LMr7seJS36DF/p+kSG7XO
qmEXwxPrM848vt9PJbRwJXav6kw9UMJmbZYyVsvqGEAP3xY1/6utjOSAFCv7WwBt
pTOS5MZyH+7tGyE8Pb8amPYe/2RVkj8QYNksnC3oIi9rvJEIkjFa/PBrH0Y5HwGM
xCsdOJZyKI0uAiStTYHF/JU/sJegKZueC1JpTD36RpnQSyq95hErskLTlb/vzfWs
uE4TkXQf0CX+2u1r3SWjvary4M62kn8zCQytHF9Y3WaHuz+t/HxtQmdOqQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIG9OIgJAUFj8sPSG5eEcgH5bc4NMB8GA1UdIwQY
MBaAFMjB3PTAI0Z9s78u7z3RWy7+6yvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU1IYzlNQWpSbjJ6dnk3dlBkRmJMdjdySzljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hMmZmZDQtMjM4Mi00Y2EyLTg2MDMt
NDRkOTJkZTQzOGM5LzEvZ2IwNGlBa0JRV1B5dzlJYmw0UnlBZmx0emcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hMmZmZDQtMjM4Mi00Y2EyLTg2MDMtNDRkOTJkZTQzOGM5
LzEveU1IYzlNQWpSbjJ6dnk3dlBkRmJMdjdySzljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAkM
MA0GCSqGSIb3DQEBCwUAA4IBAQBMx6yvuNAZIgi8evJmdgs2lvX3IZwXdWZBNmRV
h3uXjJtOkTxF6VSzPdgHSFppQPnjD7atr7zbXqFyKnTOMzIkfHuye361RENc0iP3
evKrq1p9yQsl2As16ZokACR3NMUmt1tlk0XZ8ChZeZ2qqzv+2+WOd9aVftxcNQJJ
+yaS7fnJWd+1c+sAeDeQcIj6zgQpP12moK0N4ei22TY/wmakh4arF+xCDSpkJaRc
BgTp3U1y1aFd89/lAmTZgeKRFJJjYrD+mSSdRo+zJakD+GT+kT0+jn/BaQpDZG9j
c9Df6AAu+y6BBRHuqVKEo1Qw3XFqFvcjEI3hwUhO+/wFy7+J
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:08:49 2024 by rpki-client on console-fra.rpki-client.org