Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/GCnOJpvaxEkCr6SlV_H-wYchl1w.roa
File: GCnOJpvaxEkCr6SlV_H-wYchl1w.roa (raw, json)
Hash identifier: LvDo66FVQdVjOaO2MgUgzW0iuPYON7m5c/mhbDnpZfI=
Subject key identifier: 18:29:CE:26:9B:DA:C4:49:02:AF:A4:A5:57:F1:FE:C1:87:21:97:5C
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018CC2DB64165EA4956A71EDFBD8AE8A6312
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/GCnOJpvaxEkCr6SlV_H-wYchl1w.roa
Signing time: Mon 01 Jan 2024 02:30:07 +0000
ROA not before: Mon 01 Jan 2024 02:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48029
IP address blocks: 87.248.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:64:16:5e:a4:95:6a:71:ed:fb:d8:ae:8a:63:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 1 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1829ce269bdac44902afa4a557f1fec18721975c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:51:aa:d4:9b:49:48:2e:af:02:ce:22:e5:3a:
4e:f3:66:6d:a8:14:e0:dc:69:ff:c7:85:65:38:7e:
4e:2c:23:68:88:d6:56:d1:b0:f6:37:ca:34:88:73:
0b:9e:d2:e4:35:85:c2:fd:a9:a6:c3:76:0d:0a:d9:
62:c8:3f:86:61:dc:98:60:c5:51:81:eb:7d:ea:3c:
9f:3d:7e:0f:a0:c4:e7:09:e2:14:9a:e6:f9:e4:f4:
10:eb:22:ab:78:d4:e1:6a:82:e2:84:9f:67:23:04:
15:2f:31:0b:f8:4b:a8:23:3f:fd:03:c5:8e:b9:8e:
40:af:32:e1:1b:50:7b:8b:45:79:fa:2e:84:93:22:
42:34:9f:db:16:95:05:68:a5:da:65:bf:b2:be:37:
61:0d:83:86:2f:49:fa:49:f5:78:12:90:f7:1e:9a:
aa:0e:dc:44:60:f5:97:19:3b:bd:5a:01:90:b4:92:
2c:b2:7f:f9:e6:9e:86:22:2a:35:30:6b:f4:70:8f:
86:05:1b:e4:e9:11:44:3f:c8:24:93:e5:4c:b8:dd:
01:1f:5d:be:38:3b:eb:80:39:bb:ef:68:bf:88:a8:
2c:38:36:6d:3b:31:79:c7:59:b0:89:c8:75:cc:06:
c8:42:a9:50:ba:07:57:94:99:e1:cf:9d:2c:9a:ab:
11:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:29:CE:26:9B:DA:C4:49:02:AF:A4:A5:57:F1:FE:C1:87:21:97:5C
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/GCnOJpvaxEkCr6SlV_H-wYchl1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.159.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e1:e6:e9:08:dd:26:da:d7:32:5d:b5:6f:10:c6:49:6c:a8:
7c:c4:ad:51:b6:34:68:02:50:ff:70:5e:3d:f7:da:83:4c:fc:
a0:65:64:a4:65:0f:8d:d6:d8:e4:83:30:72:bc:5a:fa:ef:db:
ae:97:83:11:62:6c:3d:51:1a:7f:f7:94:87:eb:d5:03:85:cd:
99:7d:b5:42:2c:4e:77:e5:29:77:92:c7:08:f4:37:6a:dd:7e:
f8:2f:a2:6a:e9:61:08:af:f4:cb:92:e7:1b:2e:95:ca:90:54:
9f:92:96:ae:04:1c:0a:68:16:62:fa:15:ea:a0:06:cf:de:98:
66:12:06:b1:ac:34:db:bd:67:a9:56:f8:1f:a6:06:1d:b7:43:
f5:d2:70:aa:fb:cb:cd:4a:3a:90:5c:58:7f:3d:28:1b:f4:55:
82:a1:78:44:34:d9:59:ee:1d:88:24:a1:8e:6c:00:1d:25:ec:
50:ac:72:63:ab:0d:05:5a:d5:36:68:ac:15:8c:ce:a2:8c:80:
2d:1c:d6:09:d7:cc:a1:66:68:24:96:3a:fa:fb:91:f1:73:51:
95:be:1b:78:2a:11:d6:d0:ee:97:df:21:26:c6:59:1c:ab:06:
f7:75:fb:b8:54:38:18:2a:49:87:ab:8a:fd:5d:8b:5f:aa:43:
19:32:2e:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC22QWXqSVanHt+9iuimMSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh
NDY3ODQwHhcNMjQwMTAxMDIzMDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODI5Y2UyNjliZGFjNDQ5MDJhZmE0YTU1N2YxZmVjMTg3MjE5NzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FGq1JtJSC6vAs4i5TpO82ZtqBTg
3Gn/x4VlOH5OLCNoiNZW0bD2N8o0iHMLntLkNYXC/ammw3YNCtliyD+GYdyYYMVR
get96jyfPX4PoMTnCeIUmub55PQQ6yKreNThaoLihJ9nIwQVLzEL+EuoIz/9A8WO
uY5ArzLhG1B7i0V5+i6EkyJCNJ/bFpUFaKXaZb+yvjdhDYOGL0n6SfV4EpD3Hpqq
DtxEYPWXGTu9WgGQtJIssn/55p6GIio1MGv0cI+GBRvk6RFEP8gkk+VMuN0BH12+
ODvrgDm772i/iKgsODZtOzF5x1mwich1zAbIQqlQugdXlJnhz50smqsRyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBgpziab2sRJAq+kpVfx/sGHIZdcMB8GA1UdIwQY
MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt
ZWRjOWQwMmZhZjU0LzEvR0NuT0pwdmF4RWtDcjZTbFZfSC13WWNobDF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0
LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/ifMA0G
CSqGSIb3DQEBCwUAA4IBAQCF4ebpCN0m2tcyXbVvEMZJbKh8xK1RtjRoAlD/cF49
99qDTPygZWSkZQ+N1tjkgzByvFr679uul4MRYmw9URp/95SH69UDhc2ZfbVCLE53
5Sl3kscI9Ddq3X74L6Jq6WEIr/TLkucbLpXKkFSfkpauBBwKaBZi+hXqoAbP3phm
EgaxrDTbvWepVvgfpgYdt0P10nCq+8vNSjqQXFh/PSgb9FWCoXhENNlZ7h2IJKGO
bAAdJexQrHJjqw0FWtU2aKwVjM6ijIAtHNYJ18yhZmgkljr6+5Hxc1GVvht4KhHW
0O6X3yEmxlkcqwb3dfu4VDgYKkmHq4r9XYtfqkMZMi4b
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:54:35 2024 by rpki-client on console-fra.rpki-client.org