Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/gPNlbpk-rWNZZq2ZluykG7NZiuk.roa
File: gPNlbpk-rWNZZq2ZluykG7NZiuk.roa (raw, json)
Hash identifier: Bp0SKQNMrRch7RqtAH31ulIMY44oxzoJ1nCOyI506Hs=
Subject key identifier: 80:F3:65:6E:99:3E:AD:63:59:66:AD:99:96:EC:A4:1B:B3:59:8A:E9
Certificate issuer: /CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
Certificate serial: 018CC9B9C65920F4AE522FFCF4211A7CCCCD
Authority key identifier: 20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/gPNlbpk-rWNZZq2ZluykG7NZiuk.roa
Signing time: Tue 02 Jan 2024 10:30:44 +0000
ROA not before: Tue 02 Jan 2024 10:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47796
IP address blocks: 195.245.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:b9:c6:59:20:f4:ae:52:2f:fc:f4:21:1a:7c:cc:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
Validity
Not Before: Jan 2 10:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80f3656e993ead635966ad9996eca41bb3598ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1a:c3:06:58:3d:a9:42:2d:92:bd:ed:54:9a:
dd:c7:ba:98:2a:6a:06:36:72:91:8e:dc:26:9a:ed:
9f:b3:2a:08:86:35:f5:ad:79:8a:75:c7:0e:09:b9:
8d:50:4b:14:22:3b:48:d8:94:49:7c:0d:47:3c:52:
8d:4e:f9:87:66:49:a6:d2:ae:60:ca:a4:e6:30:2d:
0a:f1:b0:8a:31:e4:90:7f:b3:e5:0f:59:3a:e9:62:
e1:34:99:d3:9d:16:aa:ee:78:9f:fd:11:86:82:52:
00:c5:4c:ba:1e:92:0c:01:88:4c:89:af:d7:76:da:
41:f7:c7:c6:72:0b:8d:13:a2:f3:80:07:99:30:83:
75:23:12:7a:9d:33:ec:0c:28:b1:a7:c2:54:4d:d5:
b0:94:af:73:7f:14:b9:21:b9:af:77:62:10:c6:16:
be:f3:dc:d9:dd:37:a8:e2:60:96:80:c7:ea:84:ce:
f3:f4:aa:13:17:fc:2b:58:bd:16:3f:3f:0c:99:33:
67:21:29:8e:8a:2c:2e:54:17:dd:af:87:f0:66:80:
3b:99:54:b9:a7:ff:29:6d:5d:04:00:94:bc:2c:76:
ca:e0:ae:5c:84:af:97:5d:04:78:c1:34:7a:49:f2:
d6:61:32:1c:b2:16:85:a4:7f:16:d6:2f:c1:41:e3:
24:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F3:65:6E:99:3E:AD:63:59:66:AD:99:96:EC:A4:1B:B3:59:8A:E9
X509v3 Authority Key Identifier:
keyid:20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/gPNlbpk-rWNZZq2ZluykG7NZiuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.70.0/24
Signature Algorithm: sha256WithRSAEncryption
af:85:4d:8c:9d:64:ef:fd:0c:71:32:49:16:76:be:ba:10:ef:
a3:95:e0:d4:fe:83:dd:69:c0:8d:5f:43:ec:5f:6f:80:76:e1:
e5:35:9c:60:15:0a:8a:32:da:99:34:47:22:36:74:7e:dd:26:
30:e6:d1:bd:57:8a:fd:6d:da:37:57:8e:63:af:4d:b7:89:cc:
5c:05:e4:ae:a7:fe:4d:fd:01:ab:68:c2:26:e4:6d:13:b9:09:
c1:4e:4b:07:05:03:c3:52:18:44:ef:f4:ad:6a:87:d2:9d:b8:
e4:c2:7f:54:95:be:f7:f8:4f:d6:62:2a:90:61:fc:d6:fc:d6:
d4:d1:74:b2:32:a2:f5:3b:37:61:99:95:2f:ee:f1:da:a3:0a:
88:4a:ae:4a:e5:8d:dd:07:bb:64:38:c5:9e:8b:e6:52:97:5e:
85:03:6a:19:f6:af:54:fd:b1:60:3d:c5:4b:29:b9:7e:f8:9f:
09:4c:48:12:a3:21:8e:cd:a5:c5:2a:6c:b9:c1:eb:de:41:ee:
ed:19:6d:f2:40:2d:72:9b:a2:a0:9f:13:8a:d7:18:6c:c6:95:
3a:8e:f4:c5:6d:96:27:36:f5:cb:96:fb:66:1e:3e:88:df:ce:
e6:01:bc:9f:a0:4e:51:33:e8:41:0c:9b:22:ad:21:a4:82:97:
80:3f:d5:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJucZZIPSuUi/89CEafMzNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwY2Q1NzQyODRhNjAxOGU1YjAzNjM1ZTlhNWQ2NThmZGY1
NzM0ZjAwHhcNMjQwMTAyMTAzMDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGYzNjU2ZTk5M2VhZDYzNTk2NmFkOTk5NmVjYTQxYmIzNTk4YWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRrDBlg9qUItkr3tVJrdx7qYKmoG
NnKRjtwmmu2fsyoIhjX1rXmKdccOCbmNUEsUIjtI2JRJfA1HPFKNTvmHZkmm0q5g
yqTmMC0K8bCKMeSQf7PlD1k66WLhNJnTnRaq7nif/RGGglIAxUy6HpIMAYhMia/X
dtpB98fGcguNE6LzgAeZMIN1IxJ6nTPsDCixp8JUTdWwlK9zfxS5Ibmvd2IQxha+
89zZ3Teo4mCWgMfqhM7z9KoTF/wrWL0WPz8MmTNnISmOiiwuVBfdr4fwZoA7mVS5
p/8pbV0EAJS8LHbK4K5chK+XXQR4wTR6SfLWYTIcshaFpH8W1i/BQeMkfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIDzZW6ZPq1jWWatmZbspBuzWYrpMB8GA1UdIwQY
MBaAFCDNV0KEpgGOWwNjXppdZY/fVzTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU0xWFFvU21BWTViQTJOZW1sMWxqOTlYTlBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9jMjE2Y2EtYWE5ZC00ZDIxLTg0MWUt
NDliNTY4N2ZlZTZkLzEvZ1BObGJway1yV05aWnEyWmx1eWtHN05aaXVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9jMjE2Y2EtYWE5ZC00ZDIxLTg0MWUtNDliNTY4N2ZlZTZk
LzEvSU0xWFFvU21BWTViQTJOZW1sMWxqOTlYTlBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/VGMA0G
CSqGSIb3DQEBCwUAA4IBAQCvhU2MnWTv/QxxMkkWdr66EO+jleDU/oPdacCNX0Ps
X2+AduHlNZxgFQqKMtqZNEciNnR+3SYw5tG9V4r9bdo3V45jr023icxcBeSup/5N
/QGraMIm5G0TuQnBTksHBQPDUhhE7/StaofSnbjkwn9Ulb73+E/WYiqQYfzW/NbU
0XSyMqL1OzdhmZUv7vHaowqISq5K5Y3dB7tkOMWei+ZSl16FA2oZ9q9U/bFgPcVL
Kbl++J8JTEgSoyGOzaXFKmy5weveQe7tGW3yQC1ym6KgnxOK1xhsxpU6jvTFbZYn
NvXLlvtmHj6I387mAbyfoE5RM+hBDJsirSGkgpeAP9V2
-----END CERTIFICATE-----
Generated at Sat May 25 10:39:18 2024 by rpki-client on console-fra.rpki-client.org