Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/GRuHNIT6I6KK_3qSZ7kernFawO0.roa
File: GRuHNIT6I6KK_3qSZ7kernFawO0.roa (raw, json)
Hash identifier: ahW3ZzVDWwEqQ7XfupMPgRq7gvcA9V70Q2eCc7KKGH8=
Subject key identifier: 19:1B:87:34:84:FA:23:A2:8A:FF:7A:92:67:B9:1E:AE:71:5A:C0:ED
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 018D64405DF52E0FE6ADDB952B64FE578C6D
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/GRuHNIT6I6KK_3qSZ7kernFawO0.roa
Signing time: Thu 01 Feb 2024 10:39:16 +0000
ROA not before: Thu 01 Feb 2024 10:39:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50167
IP address blocks: 62.233.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:64:40:5d:f5:2e:0f:e6:ad:db:95:2b:64:fe:57:8c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Feb 1 10:39:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=191b873484fa23a28aff7a9267b91eae715ac0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:2c:50:ba:07:72:98:b3:d6:30:03:8d:59:
ba:93:2e:27:06:31:29:9e:41:8d:14:eb:94:80:99:
bf:ef:69:b4:f2:ab:ea:f4:fe:fb:26:63:7d:10:30:
dc:cc:8b:6f:88:9b:5f:5e:fd:46:ce:62:30:bd:e6:
96:44:2b:a0:14:f7:28:ea:7f:3d:e2:bd:77:98:78:
4e:b0:50:05:de:92:67:b3:a1:34:56:1b:b6:95:cb:
04:46:c1:70:5f:20:bf:e6:03:65:bc:0a:52:d4:54:
66:3a:84:89:32:2a:d4:6f:25:4e:fb:67:78:53:a5:
6a:58:b9:1c:42:e6:67:4c:c2:89:d2:76:7d:22:45:
4b:c6:0b:d3:72:68:8a:f1:45:9d:95:bd:65:2b:f3:
10:06:9b:c8:63:59:51:80:d0:18:3d:ea:b8:9d:67:
cc:7d:ca:f9:aa:54:cc:d0:2a:f5:61:30:72:6c:f7:
6a:c0:24:98:d2:fe:07:70:9e:69:f6:cb:8a:f0:8c:
71:06:e4:c2:7a:f2:99:d4:ed:75:77:a2:cf:63:e9:
a0:2c:d7:a9:81:5a:ae:2b:2e:61:4a:a4:68:3f:a4:
93:d2:4f:d1:e7:eb:f6:81:53:81:68:b2:55:c5:94:
18:4b:e7:fc:c4:75:a0:71:50:52:d3:e1:79:e9:07:
c3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1B:87:34:84:FA:23:A2:8A:FF:7A:92:67:B9:1E:AE:71:5A:C0:ED
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/GRuHNIT6I6KK_3qSZ7kernFawO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.59.0/24
Signature Algorithm: sha256WithRSAEncryption
30:64:e4:09:fa:bb:74:4a:08:bc:28:df:0e:98:e5:be:06:18:
0f:df:a0:7d:1c:e6:07:4f:6a:fd:02:6b:f8:db:14:66:60:d5:
ce:43:f2:6d:30:3e:c3:91:bb:5b:01:5c:a2:e6:5f:2b:79:0c:
b1:a0:77:1d:2c:68:12:da:75:c8:9b:fc:66:8d:45:73:da:20:
23:fd:51:ef:45:64:b3:43:af:fe:77:9e:94:c3:90:35:15:a6:
22:4d:82:fa:b3:f3:d9:74:46:5a:a3:3a:14:e2:9d:08:3b:52:
77:f6:d5:7f:85:21:2d:74:ef:db:43:52:ce:4f:80:36:89:35:
37:ff:8e:1a:96:4d:7e:09:0b:40:be:45:d9:16:60:02:19:40:
e7:10:84:30:e0:91:5b:0c:9c:90:94:39:e5:7c:22:51:58:b5:
89:74:5f:64:f0:64:92:85:1d:4e:46:d9:71:82:e4:c0:74:23:
4f:78:df:c9:e5:52:9e:a3:85:03:f3:d0:cf:0b:f5:cf:71:7a:
9a:0b:df:16:4c:30:9f:2e:58:d1:4d:e5:b1:81:e5:c9:23:bc:
7f:94:b0:84:89:e5:6f:11:bb:da:45:7d:d8:ac:06:73:3a:bf:
3f:5e:d5:5f:25:88:3e:5e:4d:0a:60:2f:ea:85:33:ce:ff:b8:
17:c9:18:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1kQF31Lg/mrduVK2T+V4xtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl
NGQxZDcwHhcNMjQwMjAxMTAzOTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTFiODczNDg0ZmEyM2EyOGFmZjdhOTI2N2I5MWVhZTcxNWFjMGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlwsULoHcpiz1jADjVm6ky4nBjEp
nkGNFOuUgJm/72m08qvq9P77JmN9EDDczItviJtfXv1GzmIwveaWRCugFPco6n89
4r13mHhOsFAF3pJns6E0Vhu2lcsERsFwXyC/5gNlvApS1FRmOoSJMirUbyVO+2d4
U6VqWLkcQuZnTMKJ0nZ9IkVLxgvTcmiK8UWdlb1lK/MQBpvIY1lRgNAYPeq4nWfM
fcr5qlTM0Cr1YTBybPdqwCSY0v4HcJ5p9suK8IxxBuTCevKZ1O11d6LPY+mgLNep
gVquKy5hSqRoP6ST0k/R5+v2gVOBaLJVxZQYS+f8xHWgcVBS0+F56QfDawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBkbhzSE+iOiiv96kme5Hq5xWsDtMB8GA1UdIwQY
MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt
ZGRmNTY3ZWRlZDAzLzEvR1J1SE5JVDZJNktLXzNxU1o3a2VybkZhd08wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz
LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPuk7MA0G
CSqGSIb3DQEBCwUAA4IBAQAwZOQJ+rt0Sgi8KN8OmOW+BhgP36B9HOYHT2r9Amv4
2xRmYNXOQ/JtMD7DkbtbAVyi5l8reQyxoHcdLGgS2nXIm/xmjUVz2iAj/VHvRWSz
Q6/+d56Uw5A1FaYiTYL6s/PZdEZaozoU4p0IO1J39tV/hSEtdO/bQ1LOT4A2iTU3
/44alk1+CQtAvkXZFmACGUDnEIQw4JFbDJyQlDnlfCJRWLWJdF9k8GSShR1ORtlx
guTAdCNPeN/J5VKeo4UD89DPC/XPcXqaC98WTDCfLljRTeWxgeXJI7x/lLCEieVv
EbvaRX3YrAZzOr8/XtVfJYg+Xk0KYC/qhTPO/7gXyRie
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:55:51 2024 by rpki-client on console-fra.rpki-client.org