Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GsrefdulRV65aasQvpQVB_eSfb8.roa
File: GsrefdulRV65aasQvpQVB_eSfb8.roa (raw, json)
Hash identifier: x+bhOCo+RVTE+uh2rTvagTzkeAVp2YTKFmu3sk4Harg=
Subject key identifier: 1A:CA:DE:7D:DB:A5:45:5E:B9:69:AB:10:BE:94:15:07:F7:92:7D:BF
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018DA84EF0C3E96926C27F3587155A70955E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GsrefdulRV65aasQvpQVB_eSfb8.roa
Signing time: Wed 14 Feb 2024 15:49:22 +0000
ROA not before: Wed 14 Feb 2024 15:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215490
IP address blocks: 95.46.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a8:4e:f0:c3:e9:69:26:c2:7f:35:87:15:5a:70:95:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Feb 14 15:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1acade7ddba5455eb969ab10be941507f7927dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e5:9c:ef:a9:2b:64:9a:33:82:66:ea:1e:55:
9c:35:84:29:f7:42:45:e5:9d:34:0c:05:ea:fd:4c:
0b:46:cf:49:5c:d5:4c:58:3c:47:4a:d1:cf:d9:bd:
af:21:80:f2:ec:a7:f2:2f:d6:0c:8f:20:71:bb:86:
6e:8c:4c:70:8f:d4:ed:a7:a0:3c:86:0f:ac:d6:69:
b9:b8:99:02:f0:2c:fe:59:25:83:82:30:ff:5a:2e:
99:f4:89:6b:6c:ea:cf:7a:b2:29:d7:52:10:42:24:
ee:b6:99:80:71:d0:e8:4e:3b:99:39:5c:89:fa:12:
fc:f2:cd:69:14:82:21:0a:d3:89:11:44:31:f1:2b:
93:cd:2b:27:67:01:d7:66:ea:9e:1d:da:1f:ef:ef:
22:07:33:4a:12:d4:f8:1f:35:5a:15:9e:56:52:8a:
15:a0:60:17:dc:31:11:28:07:fd:ac:83:5d:bb:20:
c5:fe:15:c5:2a:16:3e:c2:43:ac:aa:55:58:b4:8f:
04:35:9f:66:4b:23:43:7a:23:f0:e2:20:e0:29:c5:
d3:96:ca:82:2a:34:6f:e5:20:79:2f:b1:31:4e:eb:
4f:6f:eb:10:99:4f:1e:a3:f1:70:e0:ae:8b:29:d0:
1f:27:44:69:73:1a:7a:2a:e8:84:ac:3e:dd:c9:f7:
2c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CA:DE:7D:DB:A5:45:5E:B9:69:AB:10:BE:94:15:07:F7:92:7D:BF
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/GsrefdulRV65aasQvpQVB_eSfb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.146.0/23
Signature Algorithm: sha256WithRSAEncryption
27:7d:e7:1d:46:09:20:e6:8d:47:fa:48:e0:14:1a:ea:26:db:
71:d8:4f:66:85:bf:d8:0b:5a:d2:4c:30:05:32:bc:59:51:76:
56:b1:ab:bf:d0:56:40:0b:92:c9:6e:9b:c6:ba:7d:01:75:20:
8c:91:68:60:08:5b:90:43:20:32:95:6b:f0:4c:d4:52:12:54:
21:81:25:4c:ca:9c:45:6b:60:87:75:86:6f:db:af:7b:08:45:
39:37:c6:d6:b7:e5:fe:08:b9:d0:3c:63:c7:bf:80:54:8c:c9:
e3:c6:18:5a:aa:eb:1d:6d:a7:09:03:9e:d6:32:a2:49:d6:88:
a7:0e:66:36:18:63:f3:df:33:20:19:05:b5:7e:5d:17:5f:b0:
54:c4:21:6f:f9:5b:3e:18:65:96:58:d8:a0:8a:87:b5:08:b3:
6d:c0:19:54:9e:eb:d9:25:ba:13:fd:c7:e7:2e:1b:d6:40:24:
38:8f:2e:57:47:72:26:18:8c:59:e8:b2:5f:e1:1b:33:b7:dd:
4a:55:a9:66:dd:c0:04:68:bb:79:5c:b0:d1:60:d7:8f:6e:66:
08:af:de:12:23:37:23:ee:26:b4:69:21:a5:1e:3c:38:0d:d2:
7d:da:5a:18:c3:4e:71:97:23:ac:df:f9:47:9f:94:9a:66:ac:
c6:c2:34:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2oTvDD6Wkmwn81hxVacJVeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMjE0MTU0OTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWNhZGU3ZGRiYTU0NTVlYjk2OWFiMTBiZTk0MTUwN2Y3OTI3ZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuWc76krZJozgmbqHlWcNYQp90JF
5Z00DAXq/UwLRs9JXNVMWDxHStHP2b2vIYDy7KfyL9YMjyBxu4ZujExwj9Ttp6A8
hg+s1mm5uJkC8Cz+WSWDgjD/Wi6Z9IlrbOrPerIp11IQQiTutpmAcdDoTjuZOVyJ
+hL88s1pFIIhCtOJEUQx8SuTzSsnZwHXZuqeHdof7+8iBzNKEtT4HzVaFZ5WUooV
oGAX3DERKAf9rINduyDF/hXFKhY+wkOsqlVYtI8ENZ9mSyNDeiPw4iDgKcXTlsqC
KjRv5SB5L7ExTutPb+sQmU8eo/Fw4K6LKdAfJ0Rpcxp6KuiErD7dyfcsEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBrK3n3bpUVeuWmrEL6UFQf3kn2/MB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvR3NyZWZkdWxSVjY1YWFzUXZwUVZCX2VTZmI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXy6SMA0G
CSqGSIb3DQEBCwUAA4IBAQAnfecdRgkg5o1H+kjgFBrqJttx2E9mhb/YC1rSTDAF
MrxZUXZWsau/0FZAC5LJbpvGun0BdSCMkWhgCFuQQyAylWvwTNRSElQhgSVMypxF
a2CHdYZv2697CEU5N8bWt+X+CLnQPGPHv4BUjMnjxhhaqusdbacJA57WMqJJ1oin
DmY2GGPz3zMgGQW1fl0XX7BUxCFv+Vs+GGWWWNigioe1CLNtwBlUnuvZJboT/cfn
LhvWQCQ4jy5XR3ImGIxZ6LJf4Rszt91KValm3cAEaLt5XLDRYNePbmYIr94SIzcj
7ia0aSGlHjw4DdJ92loYw05xlyOs3/lHn5SaZqzGwjR4
-----END CERTIFICATE-----
Generated at Mon Jun 10 19:46:47 2024 by rpki-client on console-ams.rpki-client.org