Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/GhbIi3llRgY4nBiRafy_ayR32zY.roa
File: GhbIi3llRgY4nBiRafy_ayR32zY.roa (raw, json)
Hash identifier: 3huhqSsZbxnlmmGDus7aJfJjspO5AtdIN9UlggGV6zI=
Subject key identifier: 1A:16:C8:8B:79:65:46:06:38:9C:18:91:69:FC:BF:6B:24:77:DB:36
Certificate issuer: /CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Certificate serial: 018CC7951BD79E5405DCBD6BDD38EA65C6F3
Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/GhbIi3llRgY4nBiRafy_ayR32zY.roa
Signing time: Tue 02 Jan 2024 00:31:27 +0000
ROA not before: Tue 02 Jan 2024 00:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 185.213.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:1b:d7:9e:54:05:dc:bd:6b:dd:38:ea:65:c6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Validity
Not Before: Jan 2 00:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a16c88b79654606389c189169fcbf6b2477db36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:91:4b:19:82:39:1a:1b:8d:e9:fa:18:48:79:
8e:07:af:0a:a5:37:be:8e:e4:6e:33:25:84:9d:46:
7d:93:43:95:22:d7:a3:01:d3:cd:47:e4:08:07:0a:
cb:39:7b:28:39:ce:e5:59:55:4f:41:2d:c0:13:9d:
50:32:7e:92:7e:2a:fd:8f:e2:2b:72:12:77:15:56:
96:4e:56:20:c9:a1:36:1c:2f:64:7e:2d:4f:75:2f:
e0:59:c9:f8:76:e8:58:67:8e:db:e8:c4:db:41:61:
74:01:a8:5e:4c:6d:42:6a:27:c2:48:4b:b8:99:ca:
d2:b0:47:97:a6:56:c2:28:a1:bd:96:92:08:17:7a:
0c:1b:10:b2:0b:4a:47:3c:de:d5:26:83:44:70:b0:
5b:22:76:a8:45:7a:0e:25:9b:c1:38:8c:ac:12:79:
b3:7a:f6:24:53:a4:c6:bf:dd:d9:bc:a6:03:f1:88:
69:0a:2f:ca:77:b7:09:ee:99:5d:86:0c:f6:5b:91:
08:20:60:42:e3:97:34:e5:eb:3f:25:a2:06:9a:fc:
cf:76:86:a3:a2:cb:82:73:79:d5:86:5f:ba:44:4f:
df:91:f2:58:7c:dd:99:0d:77:f4:fd:b0:71:cc:fb:
d1:87:cf:8c:6b:a7:9a:8f:0a:f7:77:35:3f:0d:6b:
70:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:16:C8:8B:79:65:46:06:38:9C:18:91:69:FC:BF:6B:24:77:DB:36
X509v3 Authority Key Identifier:
keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/GhbIi3llRgY4nBiRafy_ayR32zY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.47.0/24
Signature Algorithm: sha256WithRSAEncryption
19:99:d8:99:3c:e7:ce:45:23:c2:fe:6b:74:1d:22:36:ad:56:
3a:68:cc:d2:e1:c9:bc:71:45:11:05:8f:85:e5:54:94:73:3e:
5e:62:d2:bc:7c:34:91:82:4a:1b:42:ea:04:41:3a:a1:11:b2:
5a:2b:d5:e1:42:e4:47:af:23:b2:a0:25:92:d8:3d:ab:93:42:
a5:52:52:eb:a3:46:81:95:d9:a4:f1:28:77:23:59:4a:e1:e1:
8a:7c:07:3c:fb:28:c2:fd:6a:a8:40:9a:4c:d9:74:d0:0d:90:
09:91:fa:be:5a:ae:a6:d3:40:e1:74:05:64:17:b6:81:7d:f3:
2d:99:bd:16:47:ea:d8:b9:8a:e4:0b:d7:b7:4d:3c:bf:30:ed:
2a:32:a8:0f:97:b8:df:84:79:6f:55:f5:26:d7:e9:ff:82:36:
ff:31:3c:1a:7c:e9:06:3f:db:14:c4:07:cd:6c:8f:05:0b:b6:
35:f9:ca:a7:43:0c:a7:41:d1:9f:03:f5:3e:42:b6:18:de:15:
7a:8a:49:db:4d:7c:38:d0:06:29:25:a8:4c:d6:c4:c2:a3:6b:
d3:66:fa:e2:e5:2d:5d:fb:4b:d0:ed:9d:1f:22:7e:0a:72:74:
31:8d:b4:01:b1:7b:ec:6b:91:e9:07:a8:30:8d:6a:1e:44:08:
df:82:53:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlRvXnlQF3L1r3TjqZcbzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOGQwOGVkYzQzOTNhODY3MTI5NmY4ZWFjYmJlY2Y5NGQ3
NjU2MmEwHhcNMjQwMTAyMDAzMTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTE2Yzg4Yjc5NjU0NjA2Mzg5YzE4OTE2OWZjYmY2YjI0NzdkYjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5FLGYI5GhuN6foYSHmOB68KpTe+
juRuMyWEnUZ9k0OVItejAdPNR+QIBwrLOXsoOc7lWVVPQS3AE51QMn6Sfir9j+Ir
chJ3FVaWTlYgyaE2HC9kfi1PdS/gWcn4duhYZ47b6MTbQWF0AaheTG1CaifCSEu4
mcrSsEeXplbCKKG9lpIIF3oMGxCyC0pHPN7VJoNEcLBbInaoRXoOJZvBOIysEnmz
evYkU6TGv93ZvKYD8YhpCi/Kd7cJ7pldhgz2W5EIIGBC45c05es/JaIGmvzPdoaj
osuCc3nVhl+6RE/fkfJYfN2ZDXf0/bBxzPvRh8+Ma6eajwr3dzU/DWtwKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBoWyIt5ZUYGOJwYkWn8v2skd9s2MB8GA1UdIwQY
MBaAFNuNCO3EOTqGcSlvjqy77PlNdlYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83ZDU2MDctMGE4YS00NDQ3LTg2NTEt
YzYzNDlkYjk0OTliLzEvR2hiSWkzbGxSZ1k0bkJpUmFmeV9heVIzMnpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83ZDU2MDctMGE4YS00NDQ3LTg2NTEtYzYzNDlkYjk0OTli
LzEvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudUvMA0G
CSqGSIb3DQEBCwUAA4IBAQAZmdiZPOfORSPC/mt0HSI2rVY6aMzS4cm8cUURBY+F
5VSUcz5eYtK8fDSRgkobQuoEQTqhEbJaK9XhQuRHryOyoCWS2D2rk0KlUlLro0aB
ldmk8Sh3I1lK4eGKfAc8+yjC/WqoQJpM2XTQDZAJkfq+Wq6m00DhdAVkF7aBffMt
mb0WR+rYuYrkC9e3TTy/MO0qMqgPl7jfhHlvVfUm1+n/gjb/MTwafOkGP9sUxAfN
bI8FC7Y1+cqnQwynQdGfA/U+QrYY3hV6iknbTXw40AYpJahM1sTCo2vTZvri5S1d
+0vQ7Z0fIn4KcnQxjbQBsXvsa5HpB6gwjWoeRAjfglNc
-----END CERTIFICATE-----
Generated at Fri May 3 01:21:54 2024 by rpki-client on console-ams.rpki-client.org