Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/gTGnB5qauXN3QlNCwXMaFMUN2Cg.roa
File: gTGnB5qauXN3QlNCwXMaFMUN2Cg.roa (raw, json)
Hash identifier: j4AZQFtmuxCEjS2LMY2xOvVzxsMyGlYBh8A+XSf/hNA=
Subject key identifier: 81:31:A7:07:9A:9A:B9:73:77:42:53:42:C1:73:1A:14:C5:0D:D8:28
Certificate issuer: /CN=ef583686464c533d4152bca2edf3a01b487eea92
Certificate serial: 018CC26CEE77BC119F3EB449E980B444E402
Authority key identifier: EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/gTGnB5qauXN3QlNCwXMaFMUN2Cg.roa
Signing time: Mon 01 Jan 2024 00:29:28 +0000
ROA not before: Mon 01 Jan 2024 00:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205844
IP address blocks: 185.204.128.0/22 maxlen: 24
178.157.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:ee:77:bc:11:9f:3e:b4:49:e9:80:b4:44:e4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef583686464c533d4152bca2edf3a01b487eea92
Validity
Not Before: Jan 1 00:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8131a7079a9ab97377425342c1731a14c50dd828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:87:a4:8a:c9:f9:da:a5:63:20:03:0b:48:d4:
e0:1b:05:6f:68:77:12:3b:30:64:ae:e6:3f:97:28:
32:81:66:35:9b:eb:53:f8:7a:13:c9:5b:85:ef:68:
2a:f3:2c:ae:8a:dc:ec:48:2e:45:d1:25:a0:04:9e:
a8:b7:86:7a:cb:70:a6:0e:fa:0e:51:bb:06:2f:79:
9b:eb:f2:98:d6:50:f3:2a:f4:fb:ea:ca:08:7c:eb:
99:bd:cc:87:5e:eb:ac:28:3e:c8:72:7c:44:74:84:
f0:53:43:0f:fd:93:15:fb:56:85:0c:ab:7d:d3:cc:
25:f9:e4:cf:8c:38:0f:6e:48:38:da:e3:94:da:d6:
9e:ad:8b:b9:c1:4c:9c:5f:84:cd:fd:c1:81:0d:b8:
42:cb:56:5f:f8:2d:37:d9:f8:3e:10:62:fa:8a:68:
b9:5b:e5:f7:8f:35:24:9a:cb:ab:b1:df:a7:05:60:
e9:22:b2:85:24:63:f2:7b:67:77:b4:95:a9:39:54:
f1:13:1e:f7:08:c9:c9:92:19:a4:ce:ad:0d:43:8a:
f8:d0:03:a9:ac:c2:f6:e4:9f:13:90:25:b5:94:78:
6d:7a:23:c4:76:63:a8:10:e1:91:b7:0b:71:fc:8e:
79:ce:de:6d:82:3d:0a:6b:24:f7:9c:c1:3d:f4:e3:
9e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:31:A7:07:9A:9A:B9:73:77:42:53:42:C1:73:1A:14:C5:0D:D8:28
X509v3 Authority Key Identifier:
keyid:EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/gTGnB5qauXN3QlNCwXMaFMUN2Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.157.88.0/23
185.204.128.0/22
Signature Algorithm: sha256WithRSAEncryption
25:f7:02:eb:05:a8:12:6b:52:74:af:50:10:a9:f6:1b:7c:ec:
d3:a6:cc:21:a3:23:f2:e4:0f:7b:a7:2e:95:7a:84:c6:ab:b6:
c5:21:b1:3a:2b:38:60:95:4c:89:a7:77:c2:6b:4f:ca:d5:4b:
83:b3:6e:40:4d:a5:73:e5:26:88:f5:b8:52:83:25:67:c6:40:
90:4f:6f:7a:7e:b1:f7:da:62:5b:04:18:2d:07:2c:52:20:a0:
76:d2:8d:90:a9:8f:23:cb:d0:35:c8:a9:3d:ef:8f:b6:a9:bf:
04:2b:ca:4f:b4:30:41:88:e6:61:06:ae:4e:67:9b:01:8f:ee:
6c:ad:b3:41:c1:a0:ce:b3:22:58:39:eb:76:76:11:d4:5e:9f:
4d:9f:f5:77:89:54:80:47:e1:7a:40:cf:b5:34:6c:20:c8:b7:
fa:84:aa:19:ae:40:34:cd:9c:26:bd:e7:26:e3:ad:cd:8c:09:
9d:a8:2b:4f:5c:cf:2a:95:93:45:28:2d:6f:f3:5e:6c:25:66:
93:71:82:3c:03:12:6c:3b:42:42:83:03:66:e9:dc:bc:6c:69:
bc:13:44:e0:2e:35:38:fb:c8:aa:c6:c4:eb:77:78:4b:01:dc:
86:52:11:a9:4d:bc:fe:c0:de:e6:71:50:49:cf:77:da:87:4b:
ee:4d:43:84
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzCbO53vBGfPrRJ6YC0ROQCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTgzNjg2NDY0YzUzM2Q0MTUyYmNhMmVkZjNhMDFiNDg3
ZWVhOTIwHhcNMjQwMTAxMDAyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTMxYTcwNzlhOWFiOTczNzc0MjUzNDJjMTczMWExNGM1MGRkODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoekisn52qVjIAMLSNTgGwVvaHcS
OzBkruY/lygygWY1m+tT+HoTyVuF72gq8yyuitzsSC5F0SWgBJ6ot4Z6y3CmDvoO
UbsGL3mb6/KY1lDzKvT76soIfOuZvcyHXuusKD7IcnxEdITwU0MP/ZMV+1aFDKt9
08wl+eTPjDgPbkg42uOU2taerYu5wUycX4TN/cGBDbhCy1Zf+C032fg+EGL6imi5
W+X3jzUkmsursd+nBWDpIrKFJGPye2d3tJWpOVTxEx73CMnJkhmkzq0NQ4r40AOp
rML25J8TkCW1lHhteiPEdmOoEOGRtwtx/I55zt5tgj0KayT3nME99OOewwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIExpweamrlzd0JTQsFzGhTFDdgoMB8GA1UdIwQY
MBaAFO9YNoZGTFM9QVK8ou3zoBtIfuqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82YTc1NGUtNThmNi00YzEwLTlkNWUt
ZjQzYWEyNzAwM2M1LzEvZ1RHbkI1cWF1WE4zUWxOQ3dYTWFGTVVOMkNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS82YTc1NGUtNThmNi00YzEwLTlkNWUtZjQzYWEyNzAwM2M1
LzEvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBsp1YAwQC
ucyAMA0GCSqGSIb3DQEBCwUAA4IBAQAl9wLrBagSa1J0r1AQqfYbfOzTpswhoyPy
5A97py6VeoTGq7bFIbE6KzhglUyJp3fCa0/K1UuDs25ATaVz5SaI9bhSgyVnxkCQ
T296frH32mJbBBgtByxSIKB20o2QqY8jy9A1yKk974+2qb8EK8pPtDBBiOZhBq5O
Z5sBj+5srbNBwaDOsyJYOet2dhHUXp9Nn/V3iVSAR+F6QM+1NGwgyLf6hKoZrkA0
zZwmvecm463NjAmdqCtPXM8qlZNFKC1v815sJWaTcYI8AxJsO0JCgwNm6dy8bGm8
E0TgLjU4+8iqxsTrd3hLAdyGUhGpTbz+wN7mcVBJz3fah0vuTUOE
-----END CERTIFICATE-----
Generated at Wed May 29 14:26:02 2024 by rpki-client on console-fra.rpki-client.org