Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/GcPNs6pJc6W38yIKOJM-iP46JDA.roa
File: GcPNs6pJc6W38yIKOJM-iP46JDA.roa (raw, json)
Hash identifier: BexSvn9EKJeGF6Gx2MQy5a0e1jIfUCvJz+R3ZbS8mr0=
Subject key identifier: 19:C3:CD:B3:AA:49:73:A5:B7:F3:22:0A:38:93:3E:88:FE:3A:24:30
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018CE94FA7CA784586440B306C40D8ADBD60
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/GcPNs6pJc6W38yIKOJM-iP46JDA.roa
Signing time: Mon 08 Jan 2024 13:42:40 +0000
ROA not before: Mon 08 Jan 2024 13:42:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 10753
IP address blocks: 46.173.240.0/21 maxlen: 21
91.233.0.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:4f:a7:ca:78:45:86:44:0b:30:6c:40:d8:ad:bd:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 8 13:42:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19c3cdb3aa4973a5b7f3220a38933e88fe3a2430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:51:2c:19:fd:22:81:39:f0:16:4f:fc:5a:c1:
3c:83:34:68:a0:ac:dd:3a:fb:ac:66:8e:36:b5:72:
60:d5:92:75:3a:ea:11:d8:d3:83:9c:71:63:b3:98:
59:1b:a4:fc:67:cc:eb:09:84:71:fb:d2:0c:99:6e:
fe:80:82:2e:1b:4f:b5:a0:36:07:ab:5b:b8:88:a3:
22:a9:da:d1:8e:47:ad:76:a1:0e:a9:14:3a:c5:1e:
73:c2:6f:ef:3a:96:ee:d5:a0:bf:6c:e9:4f:0e:73:
7c:77:90:8f:c7:c2:a6:a8:40:c8:10:b1:f4:f5:f7:
9c:15:8a:71:68:33:6e:60:37:5e:54:eb:75:9a:f7:
be:f0:f6:26:c9:0d:f4:7e:ce:ae:29:f8:89:7b:10:
72:61:36:5a:95:ce:b4:aa:d9:df:0e:68:09:9d:76:
0a:41:0d:82:72:12:40:cb:57:47:b7:df:60:33:3a:
3d:a9:a9:4d:ea:fe:d2:c6:e1:4c:8d:90:c1:18:ec:
4d:b4:67:0f:89:67:10:0f:99:1e:06:bd:fa:b3:59:
0d:39:27:61:00:43:f7:2c:f9:3d:2a:73:58:b4:13:
d0:7c:df:36:ae:7f:4f:9a:d8:7d:14:5d:5f:9e:cf:
19:f1:cb:cd:35:9c:a7:12:20:97:85:03:7b:79:2d:
4d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C3:CD:B3:AA:49:73:A5:B7:F3:22:0A:38:93:3E:88:FE:3A:24:30
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/GcPNs6pJc6W38yIKOJM-iP46JDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.240.0/21
91.233.0.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:32:f2:4c:f9:9b:40:74:17:58:6e:fe:46:6e:85:c2:7c:b6:
d0:16:28:0d:6c:b0:01:ec:7f:12:cb:5b:4a:1d:70:af:1f:7e:
d3:68:be:cb:b2:3c:1d:79:1f:6c:22:ad:1d:d8:85:3f:50:94:
03:b2:2d:ea:62:87:e3:de:81:58:f1:3c:dc:d4:ff:16:c4:e6:
bb:77:21:0b:f6:65:74:2a:fa:ec:bc:cc:8d:72:87:66:db:7f:
3d:e3:d1:49:c2:3e:62:b3:14:06:e8:1a:9c:78:63:dc:a5:cf:
10:91:33:50:d4:fc:ad:1f:c4:e9:f7:a8:6d:2f:2b:12:b3:ec:
ea:f4:19:94:15:dd:c8:4f:30:15:60:08:b2:c0:a9:95:01:7d:
f1:24:7f:24:35:78:9e:24:2e:a4:cd:fc:37:ab:cb:d9:d3:05:
8c:a4:2b:72:67:b6:2e:f3:41:51:90:73:99:32:2d:f0:63:13:
8b:15:68:9f:12:de:a6:e5:80:97:a9:a6:5c:28:85:ed:ef:f4:
47:53:f8:c8:7d:87:2b:46:98:f0:eb:56:a8:a6:96:d9:f6:99:
db:7e:d8:b9:57:56:e1:11:15:64:70:c8:1b:ae:63:38:8e:a5:
11:6f:67:a5:16:69:5f:63:f1:a5:c8:04:f4:17:58:fd:0c:99:
94:8f:cc:9e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzpT6fKeEWGRAswbEDYrb1gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjQwMTA4MTM0MjQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWMzY2RiM2FhNDk3M2E1YjdmMzIyMGEzODkzM2U4OGZlM2EyNDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1EsGf0igTnwFk/8WsE8gzRooKzd
OvusZo42tXJg1ZJ1OuoR2NODnHFjs5hZG6T8Z8zrCYRx+9IMmW7+gIIuG0+1oDYH
q1u4iKMiqdrRjketdqEOqRQ6xR5zwm/vOpbu1aC/bOlPDnN8d5CPx8KmqEDIELH0
9fecFYpxaDNuYDdeVOt1mve+8PYmyQ30fs6uKfiJexByYTZalc60qtnfDmgJnXYK
QQ2CchJAy1dHt99gMzo9qalN6v7SxuFMjZDBGOxNtGcPiWcQD5keBr36s1kNOSdh
AEP3LPk9KnNYtBPQfN82rn9Pmth9FF1fns8Z8cvNNZynEiCXhQN7eS1NjQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBnDzbOqSXOlt/MiCjiTPoj+OiQwMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvR2NQTnM2cEpjNlczOHlJS09KTS1pUDQ2SkRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLq3wAwQB
W+kAMA0GCSqGSIb3DQEBCwUAA4IBAQCNMvJM+ZtAdBdYbv5GboXCfLbQFigNbLAB
7H8Sy1tKHXCvH37TaL7LsjwdeR9sIq0d2IU/UJQDsi3qYofj3oFY8Tzc1P8WxOa7
dyEL9mV0KvrsvMyNcodm238949FJwj5isxQG6BqceGPcpc8QkTNQ1PytH8Tp96ht
LysSs+zq9BmUFd3ITzAVYAiywKmVAX3xJH8kNXieJC6kzfw3q8vZ0wWMpCtyZ7Yu
80FRkHOZMi3wYxOLFWifEt6m5YCXqaZcKIXt7/RHU/jIfYcrRpjw61aoppbZ9pnb
fti5V1bhERVkcMgbrmM4jqURb2elFmlfY/GlyAT0F1j9DJmUj8ye
-----END CERTIFICATE-----
Generated at Thu May 2 01:17:35 2024 by rpki-client on console-ams.rpki-client.org