Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/GijxWA6tn4oaFU-p7yYRtLYS0qI.roa
File: GijxWA6tn4oaFU-p7yYRtLYS0qI.roa (raw, json)
Hash identifier: ZKFqXH3GoI3lhezJ8ENZsYs4V2VCYI0+2HT7UsgfHo0=
Subject key identifier: 1A:28:F1:58:0E:AD:9F:8A:1A:15:4F:A9:EF:26:11:B4:B6:12:D2:A2
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 018CC3489401305EFCDC9E562382B3382E27
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/GijxWA6tn4oaFU-p7yYRtLYS0qI.roa
Signing time: Mon 01 Jan 2024 04:29:22 +0000
ROA not before: Mon 01 Jan 2024 04:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 45.159.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:94:01:30:5e:fc:dc:9e:56:23:82:b3:38:2e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Jan 1 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a28f1580ead9f8a1a154fa9ef2611b4b612d2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d9:77:eb:87:f3:c8:49:66:c6:b2:cf:4c:84:
ab:8a:ef:28:6f:ae:5c:a8:78:1b:0d:c5:89:1a:9d:
96:99:8a:53:70:22:cb:49:0d:8d:0f:1c:59:b1:4e:
41:ca:8c:fb:58:c7:24:cd:ce:8a:eb:3b:2b:19:21:
91:38:e3:39:ad:95:38:ff:23:87:dd:3b:c1:00:40:
cf:ce:51:d5:4e:37:b2:d6:85:e3:0a:a3:f7:74:30:
c6:14:54:79:f5:cc:8f:23:c5:b8:9a:b5:ea:91:6e:
2a:c0:8c:29:27:2b:4f:fe:14:47:51:6e:92:cf:b4:
4f:8f:d0:e0:ea:f2:9c:a1:d2:83:56:4f:ca:5c:44:
15:97:c9:19:7a:4a:d1:83:a4:c5:d6:a5:06:15:aa:
d6:80:7c:43:03:ed:99:a1:a0:ce:26:22:3d:64:59:
23:56:db:ff:1b:8f:2b:30:0a:36:d1:20:9d:26:0a:
09:53:94:bc:b5:1c:38:69:c5:ec:f8:e2:22:5d:32:
90:85:bd:ee:39:be:2c:11:71:ed:42:d3:6d:0b:c9:
9a:b8:21:8c:30:70:b7:f8:6c:2f:4e:ad:ea:9f:7e:
e3:bd:17:42:95:ed:1c:ba:91:84:86:cf:0a:25:9d:
5e:0f:78:aa:74:67:c6:c6:d7:60:f3:ef:30:e3:98:
70:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:28:F1:58:0E:AD:9F:8A:1A:15:4F:A9:EF:26:11:B4:B6:12:D2:A2
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/GijxWA6tn4oaFU-p7yYRtLYS0qI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.14.0/24
Signature Algorithm: sha256WithRSAEncryption
57:09:86:b9:75:6f:7d:fa:84:24:be:46:40:52:3a:4f:e9:68:
c1:68:22:5b:98:d3:5f:84:09:01:fe:23:28:4b:c4:36:60:b2:
b5:69:e9:21:aa:46:5e:1d:3d:cb:3f:e2:6b:18:68:ae:c3:32:
d3:2a:34:f1:ec:28:fa:a7:28:c6:de:bb:6a:8f:73:38:28:7a:
c2:f8:f6:f7:6a:8f:60:6d:f7:c2:9d:7f:3b:0f:37:3b:1d:15:
67:fb:a0:b5:ff:31:56:d5:0d:de:24:08:49:c8:e6:bd:9c:2a:
d8:57:df:4e:6a:f6:6b:20:e5:6d:9f:b5:3d:3b:30:e9:bb:8c:
c6:45:b9:4d:75:82:50:ca:a0:f6:5e:f8:09:eb:ba:95:7f:40:
10:a9:e8:ff:e4:3f:86:d4:34:4b:b8:67:5b:00:49:3e:85:ff:
0c:71:4f:d5:3b:51:19:0a:ae:3e:68:65:e3:91:78:9e:a6:ee:
06:74:e0:fa:59:16:17:19:f4:29:d3:98:6b:30:87:a5:86:66:
00:f3:c7:d4:d4:bf:79:96:75:5a:d9:50:5b:a3:a6:52:83:6f:
20:c6:87:ff:20:bf:9a:e6:0c:af:08:26:d2:87:1c:41:73:fb:
e4:ef:23:2b:9c:11:e3:f8:e6:43:02:08:20:81:75:7a:0b:cc:
97:60:a1:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSJQBMF783J5WI4KzOC4nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYzM1YmM5YjdmODU1MGJlM2U0NjdjNTRhOWQzYTY2ZTI0
NDNiZDQwHhcNMjQwMTAxMDQyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTI4ZjE1ODBlYWQ5ZjhhMWExNTRmYTllZjI2MTFiNGI2MTJkMmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9l364fzyElmxrLPTISriu8ob65c
qHgbDcWJGp2WmYpTcCLLSQ2NDxxZsU5Byoz7WMckzc6K6zsrGSGROOM5rZU4/yOH
3TvBAEDPzlHVTjey1oXjCqP3dDDGFFR59cyPI8W4mrXqkW4qwIwpJytP/hRHUW6S
z7RPj9Dg6vKcodKDVk/KXEQVl8kZekrRg6TF1qUGFarWgHxDA+2ZoaDOJiI9ZFkj
Vtv/G48rMAo20SCdJgoJU5S8tRw4acXs+OIiXTKQhb3uOb4sEXHtQtNtC8mauCGM
MHC3+GwvTq3qn37jvRdCle0cupGEhs8KJZ1eD3iqdGfGxtdg8+8w45hwKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBoo8VgOrZ+KGhVPqe8mEbS2EtKiMB8GA1UdIwQY
MBaAFNPDW8m3+FUL4+RnxUqdOmbiRDvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTct
Y2RhNWMzNzY2ZjAzLzEvR2lqeFdBNnRuNG9hRlUtcDd5WVJ0TFlTMHFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTctY2RhNWMzNzY2ZjAz
LzEvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ8OMA0G
CSqGSIb3DQEBCwUAA4IBAQBXCYa5dW99+oQkvkZAUjpP6WjBaCJbmNNfhAkB/iMo
S8Q2YLK1aekhqkZeHT3LP+JrGGiuwzLTKjTx7Cj6pyjG3rtqj3M4KHrC+Pb3ao9g
bffCnX87Dzc7HRVn+6C1/zFW1Q3eJAhJyOa9nCrYV99OavZrIOVtn7U9OzDpu4zG
RblNdYJQyqD2XvgJ67qVf0AQqej/5D+G1DRLuGdbAEk+hf8McU/VO1EZCq4+aGXj
kXiepu4GdOD6WRYXGfQp05hrMIelhmYA88fU1L95lnVa2VBbo6ZSg28gxof/IL+a
5gyvCCbShxxBc/vk7yMrnBHj+OZDAggggXV6C8yXYKGP
-----END CERTIFICATE-----
Generated at Sun Apr 28 14:42:05 2024 by rpki-client on console-ams.rpki-client.org