Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/G11vFfXXdEe3Qy-0eI63pXK25bE.roa
File: G11vFfXXdEe3Qy-0eI63pXK25bE.roa (raw, json)
Hash identifier: lYmNaiVmp8tTYUT01ahbjAUCqutS8j85xnSbsOrUkM4=
Subject key identifier: 1B:5D:6F:15:F5:D7:74:47:B7:43:2F:B4:78:8E:B7:A5:72:B6:E5:B1
Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial: 018CC6499D4A977A0FD6CA1525B5A36B048E
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/G11vFfXXdEe3Qy-0eI63pXK25bE.roa
Signing time: Mon 01 Jan 2024 18:29:22 +0000
ROA not before: Mon 01 Jan 2024 18:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210591
IP address blocks: 212.70.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:9d:4a:97:7a:0f:d6:ca:15:25:b5:a3:6b:04:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Validity
Not Before: Jan 1 18:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b5d6f15f5d77447b7432fb4788eb7a572b6e5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fb:6d:08:95:8c:f9:4e:13:31:44:d8:d0:22:
10:63:a1:a2:d5:09:bd:22:df:d8:5f:af:96:42:55:
3e:ad:92:17:18:ea:bb:a5:28:72:99:68:c8:06:21:
74:ed:00:37:7d:34:90:90:ed:04:de:ef:07:46:d7:
38:3d:31:d4:c0:8b:da:50:e4:3f:7b:39:45:64:54:
d6:0b:86:89:9b:20:44:e9:4d:d3:02:6f:bb:ce:ad:
b9:14:6b:c4:86:80:b7:fc:74:83:02:b0:96:10:5d:
52:35:8d:42:56:b4:51:fa:77:b1:62:c4:86:1a:1e:
55:fc:2f:e3:89:38:d0:59:fd:18:5e:9e:5d:c8:2c:
8b:57:37:82:93:f0:8b:ce:9b:09:84:c6:82:e6:84:
e0:a6:f5:9c:b6:74:23:1a:93:fb:e2:8f:5e:9e:e8:
0c:48:a9:6a:ac:d3:5d:df:1d:fe:02:4a:92:29:96:
f2:1f:f8:a8:66:8a:f8:b4:34:0f:59:96:fe:50:49:
2c:e9:86:ad:36:cf:ae:57:d9:a8:a3:42:0b:cf:73:
2e:95:74:a8:4d:04:f8:d7:68:89:5b:29:2d:c3:85:
0a:c5:eb:e1:89:b7:e7:a7:96:24:d3:09:70:94:6d:
70:ca:51:6e:07:c4:61:5f:64:4c:6c:3a:0a:f1:01:
0b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5D:6F:15:F5:D7:74:47:B7:43:2F:B4:78:8E:B7:A5:72:B6:E5:B1
X509v3 Authority Key Identifier:
keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/G11vFfXXdEe3Qy-0eI63pXK25bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.70.181.0/24
Signature Algorithm: sha256WithRSAEncryption
47:13:f7:e9:5a:6e:cf:0b:03:a3:5b:a9:e3:d9:f1:83:20:89:
cb:0a:43:4f:2a:36:3e:67:ff:be:58:4b:e1:26:b6:bd:c0:be:
2f:4e:37:3c:a0:2d:fa:72:d0:54:23:de:bf:18:16:89:26:9b:
cd:11:f4:77:5a:82:d8:cc:0c:64:98:a9:6d:bd:41:c5:75:2a:
0f:9d:84:a8:88:10:88:44:a2:7e:d8:41:1f:b8:f3:d3:52:c9:
95:91:eb:31:c7:93:33:30:a6:3b:77:52:32:30:a0:ba:03:45:
4e:37:89:c5:ec:65:99:d2:52:87:7a:ba:d7:fb:3a:d7:32:ac:
88:f6:5d:a0:66:ce:14:47:b7:25:2e:88:a0:cf:89:1f:58:fe:
e5:e7:61:1b:0f:b0:e3:c9:03:8f:b6:20:0c:b5:65:ba:c9:9c:
f1:df:77:23:b3:ba:60:9c:e4:83:d5:83:cb:95:d4:73:6b:50:
eb:06:fc:8d:ce:c4:00:a9:b1:52:6f:02:96:cb:65:1e:96:69:
0d:82:6c:6b:d4:4f:15:62:03:a0:11:37:bf:63:9f:4a:65:b3:
ed:1b:56:de:7f:c3:c3:bb:b7:7c:75:10:ec:54:39:76:ba:0a:
6b:97:ac:77:25:fa:e2:41:6f:15:2f:77:4f:52:59:6b:75:f5:
58:54:36:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSZ1Kl3oP1soVJbWjawSOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2
NjQxZDkwHhcNMjQwMTAxMTgyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjVkNmYxNWY1ZDc3NDQ3Yjc0MzJmYjQ3ODhlYjdhNTcyYjZlNWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvttCJWM+U4TMUTY0CIQY6Gi1Qm9
It/YX6+WQlU+rZIXGOq7pShymWjIBiF07QA3fTSQkO0E3u8HRtc4PTHUwIvaUOQ/
ezlFZFTWC4aJmyBE6U3TAm+7zq25FGvEhoC3/HSDArCWEF1SNY1CVrRR+nexYsSG
Gh5V/C/jiTjQWf0YXp5dyCyLVzeCk/CLzpsJhMaC5oTgpvWctnQjGpP74o9enugM
SKlqrNNd3x3+AkqSKZbyH/ioZor4tDQPWZb+UEks6YatNs+uV9moo0ILz3MulXSo
TQT412iJWyktw4UKxevhibfnp5Yk0wlwlG1wylFuB8RhX2RMbDoK8QELNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBtdbxX113RHt0MvtHiOt6VytuWxMB8GA1UdIwQY
MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt
NTdjZDY4ZDljYjRlLzEvRzExdkZmWFhkRWUzUXktMGVJNjNwWEsyNWJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl
LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Ea1MA0G
CSqGSIb3DQEBCwUAA4IBAQBHE/fpWm7PCwOjW6nj2fGDIInLCkNPKjY+Z/++WEvh
Jra9wL4vTjc8oC36ctBUI96/GBaJJpvNEfR3WoLYzAxkmKltvUHFdSoPnYSoiBCI
RKJ+2EEfuPPTUsmVkesxx5MzMKY7d1IyMKC6A0VON4nF7GWZ0lKHerrX+zrXMqyI
9l2gZs4UR7clLoigz4kfWP7l52EbD7DjyQOPtiAMtWW6yZzx33cjs7pgnOSD1YPL
ldRza1DrBvyNzsQAqbFSbwKWy2UelmkNgmxr1E8VYgOgETe/Y59KZbPtG1bef8PD
u7d8dRDsVDl2ugprl6x3JfriQW8VL3dPUllrdfVYVDa7
-----END CERTIFICATE-----
Generated at Sat Nov 23 20:40:10 2024 by rpki-client on console-fra.rpki-client.org