Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/GkxFjIQkz_4matnHuvpA7Bf9kpQ.roa
File: GkxFjIQkz_4matnHuvpA7Bf9kpQ.roa (raw, json)
Hash identifier: unI2paPL+gYCYYlWdxgFv8NJlCGlBO5hN3rc+TDbdns=
Subject key identifier: 1A:4C:45:8C:84:24:CF:FE:26:6A:D9:C7:BA:FA:40:EC:17:FD:92:94
Certificate issuer: /CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955
Certificate serial: 018CC6B796D982C8DEFABD5AC683718CF581
Authority key identifier: EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/GkxFjIQkz_4matnHuvpA7Bf9kpQ.roa
Signing time: Mon 01 Jan 2024 20:29:29 +0000
ROA not before: Mon 01 Jan 2024 20:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43529
IP address blocks: 94.248.192.0/19 maxlen: 19
79.121.64.0/21 maxlen: 21
94.248.128.0/19 maxlen: 19
79.121.88.0/21 maxlen: 21
46.251.16.0/20 maxlen: 20
94.248.240.0/21 maxlen: 21
79.121.0.0/18 maxlen: 18
2a03:bf00:200::/40 maxlen: 40
2a03:bf01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 14:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:96:d9:82:c8:de:fa:bd:5a:c6:83:71:8c:f5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955
Validity
Not Before: Jan 1 20:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a4c458c8424cffe266ad9c7bafa40ec17fd9294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:b5:12:1b:67:8e:96:69:17:94:40:05:9e:
31:20:57:a5:0b:29:68:37:6a:d4:9b:2f:68:12:92:
8c:4a:1d:49:be:b6:46:d3:7d:3b:74:ac:06:f4:61:
63:4b:e2:ef:40:4e:db:d9:f5:fc:b3:74:80:3d:4b:
97:df:a9:89:b2:42:bd:80:f6:ee:e2:b2:81:ed:f1:
ec:f1:18:25:23:9b:a6:a5:29:31:96:2a:19:2c:bd:
00:bd:94:62:ac:30:7d:1c:4f:54:55:33:d3:f8:a7:
fe:4b:a7:c0:d9:65:ec:e5:e5:93:d3:08:ba:1e:d4:
97:9e:fb:4c:49:1e:e5:58:d7:a8:12:c4:e7:58:4f:
ce:be:b7:22:5b:49:cd:e6:7c:ec:3d:f9:9e:4f:09:
a0:c7:e1:b7:ce:ed:78:5f:43:c5:8f:0b:eb:a6:28:
32:e8:fd:71:3a:f3:f3:fe:08:f7:e4:ad:dc:cb:c4:
a2:02:09:c6:4b:d3:cc:fb:ff:0c:53:a9:f5:4a:28:
7c:ac:4b:aa:fd:78:2e:93:d9:45:45:22:23:44:04:
11:46:7c:cc:17:28:91:b1:7a:a9:f4:ab:04:20:9b:
2b:56:a6:b7:84:16:01:c8:be:32:6b:19:f8:69:bb:
e0:f1:4f:61:6f:ef:a3:35:e4:43:4a:b4:dd:d6:6b:
0b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4C:45:8C:84:24:CF:FE:26:6A:D9:C7:BA:FA:40:EC:17:FD:92:94
X509v3 Authority Key Identifier:
keyid:EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/GkxFjIQkz_4matnHuvpA7Bf9kpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.251.16.0/20
79.121.0.0-79.121.71.255
79.121.88.0/21
94.248.128.0/19
94.248.192.0/19
94.248.240.0/21
IPv6:
2a03:bf00:200::/40
2a03:bf01::/32
Signature Algorithm: sha256WithRSAEncryption
60:70:92:1a:66:6a:91:79:0f:39:85:53:fd:fe:1f:8f:87:ca:
52:7e:6a:fa:e3:99:c6:27:49:37:dd:93:6b:df:b9:74:a9:c9:
41:8c:7f:6c:e1:ef:04:9d:fa:6d:5d:05:bf:5d:4c:9e:bb:83:
9e:6b:48:73:43:d7:32:a2:c7:0d:53:09:17:71:3a:33:af:d5:
3c:25:c9:4c:eb:68:08:8e:19:de:5c:1a:cb:d4:1c:52:bc:9f:
88:f2:52:7f:71:1f:f4:1f:d0:e5:ad:b4:8c:d0:ef:db:7b:94:
85:84:33:a1:7d:36:ef:a2:9b:b9:4a:23:58:01:10:05:34:fa:
52:81:40:c6:19:ea:17:dc:3d:cb:8b:ab:52:da:d8:c7:7e:3b:
e4:57:99:21:d9:38:c3:ed:24:6a:41:9c:e6:c1:f6:6e:03:5e:
dc:87:4b:92:b8:a7:13:b9:60:63:46:14:56:8c:43:cf:f9:42:
93:a9:90:4e:ca:84:03:22:3e:05:2f:15:15:aa:64:06:88:00:
bc:00:a6:a3:b4:0d:cb:13:34:06:39:57:95:6d:e9:a0:f7:ff:
83:f6:8a:4a:53:d0:2b:e7:78:de:8d:54:a6:9c:ca:d0:ca:1c:
70:c9:b9:34:b6:d7:a2:17:97:88:40:f7:bc:37:f8:ae:cc:c2:
ed:2a:8d:c3
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAYzGt5bZgsje+r1axoNxjPWBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMGVmZDVkZTc4ZjkzYmNhZWFkMTVlMTRjMDA2ZWRiYmQx
YjU5NTUwHhcNMjQwMTAxMjAyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTRjNDU4Yzg0MjRjZmZlMjY2YWQ5YzdiYWZhNDBlYzE3ZmQ5Mjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK21EhtnjpZpF5RABZ4xIFelCylo
N2rUmy9oEpKMSh1JvrZG0307dKwG9GFjS+LvQE7b2fX8s3SAPUuX36mJskK9gPbu
4rKB7fHs8RglI5umpSkxlioZLL0AvZRirDB9HE9UVTPT+Kf+S6fA2WXs5eWT0wi6
HtSXnvtMSR7lWNeoEsTnWE/OvrciW0nN5nzsPfmeTwmgx+G3zu14X0PFjwvrpigy
6P1xOvPz/gj35K3cy8SiAgnGS9PM+/8MU6n1Sih8rEuq/Xguk9lFRSIjRAQRRnzM
FyiRsXqp9KsEIJsrVqa3hBYByL4yaxn4abvg8U9hb++jNeRDSrTd1msLyQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFBpMRYyEJM/+JmrZx7r6QOwX/ZKUMB8GA1UdIwQY
MBaAFO8O/V3nj5O8rq0V4UwAbtu9G1lVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3c3OVhlZVBrN3l1clJYaFRBQnUyNzBiV1ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lMGY5ZTYtZDY1NS00Mzc3LThkMDkt
ZWE4NjUwOWMzYjMwLzEvR2t4RmpJUWt6XzRtYXRuSHV2cEE3QmY5a3BRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9lMGY5ZTYtZDY1NS00Mzc3LThkMDktZWE4NjUwOWMzYjMw
LzEvN3c3OVhlZVBrN3l1clJYaFRBQnUyNzBiV1ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjAxBAIAATArAwQELvsQMAsD
AwBPeQMEA095QAMEA095WAMEBV74gAMEBV74wAMEA1748DAVBAIAAjAPAwYAKgO/
AAIDBQAqA78BMA0GCSqGSIb3DQEBCwUAA4IBAQBgcJIaZmqReQ85hVP9/h+Ph8pS
fmr645nGJ0k33ZNr37l0qclBjH9s4e8EnfptXQW/XUyeu4Oea0hzQ9cyoscNUwkX
cTozr9U8JclM62gIjhneXBrL1BxSvJ+I8lJ/cR/0H9DlrbSM0O/be5SFhDOhfTbv
opu5SiNYARAFNPpSgUDGGeoX3D3Li6tS2tjHfjvkV5kh2TjD7SRqQZzmwfZuA17c
h0uSuKcTuWBjRhRWjEPP+UKTqZBOyoQDIj4FLxUVqmQGiAC8AKajtA3LEzQGOVeV
bemg9/+D9opKU9Ar53jejVSmnMrQyhxwybk0tteiF5eIQPe8N/iuzMLtKo3D
-----END CERTIFICATE-----
Generated at Fri May 17 17:55:13 2024 by rpki-client on console-ams.rpki-client.org