Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/gbNaDYS3nAMoSnlGAm1uCYVu57g.roa
File: gbNaDYS3nAMoSnlGAm1uCYVu57g.roa (raw, json)
Hash identifier: 6p4O/YNF3n9y7uOBI9BHm9Dxvaycx5gRQecH53zocwQ=
Subject key identifier: 81:B3:5A:0D:84:B7:9C:03:28:4A:79:46:02:6D:6E:09:85:6E:E7:B8
Certificate issuer: /CN=8f2ae45c509041a796a968953581f51d45bfce55
Certificate serial: 018CC86FAE439B7EA5177E4667E7B57537AB
Authority key identifier: 8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/gbNaDYS3nAMoSnlGAm1uCYVu57g.roa
Signing time: Tue 02 Jan 2024 04:30:11 +0000
ROA not before: Tue 02 Jan 2024 04:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42346
IP address blocks: 77.75.112.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:ae:43:9b:7e:a5:17:7e:46:67:e7:b5:75:37:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f2ae45c509041a796a968953581f51d45bfce55
Validity
Not Before: Jan 2 04:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81b35a0d84b79c03284a7946026d6e09856ee7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ad:7b:e6:bb:22:d4:8f:9a:f2:c5:39:38:e5:
c7:4a:60:9d:ad:ee:eb:fb:49:c3:db:83:f5:b7:ad:
d0:72:a2:bd:54:96:be:f4:2b:9a:bf:2d:2f:b9:47:
14:34:64:d0:09:1c:a4:12:7b:2d:f1:85:d4:9c:7b:
94:c6:54:65:e0:70:19:b7:64:bd:4e:75:79:e0:14:
e0:c7:f9:64:6b:b6:e9:81:5e:13:9b:45:87:e3:e6:
fc:59:e3:55:36:3a:41:65:37:03:5f:db:4a:a2:a3:
dd:9a:a5:73:1b:dc:90:a9:44:96:73:3f:7e:65:7f:
f8:51:0c:47:e1:d7:e5:01:e7:a4:ef:90:6d:d2:3a:
f1:60:a6:18:e4:42:d9:8d:88:77:c1:69:de:a3:ca:
94:37:77:42:41:b0:87:98:71:02:58:f4:d0:a6:c2:
ab:7f:3d:dc:82:24:9b:56:1f:06:cf:b2:b8:e6:04:
7a:75:e1:b0:82:90:7a:a0:22:3a:15:09:8a:f2:fc:
e4:97:19:7e:8f:f5:29:c0:98:09:d9:6c:b6:ff:5c:
c0:a1:49:3b:49:77:fc:92:74:f6:21:72:89:fd:ad:
ac:b9:bc:96:15:a8:0d:33:46:08:25:3d:a6:99:1f:
26:95:50:6f:99:cd:11:9f:a7:d8:25:54:e9:9e:f0:
47:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B3:5A:0D:84:B7:9C:03:28:4A:79:46:02:6D:6E:09:85:6E:E7:B8
X509v3 Authority Key Identifier:
keyid:8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/gbNaDYS3nAMoSnlGAm1uCYVu57g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.112.0/21
Signature Algorithm: sha256WithRSAEncryption
27:2c:60:54:30:be:15:98:14:94:99:2d:5e:24:98:27:db:c5:
91:fc:42:0b:1c:4a:b9:e9:c7:09:c2:bf:12:87:fd:d6:68:04:
56:7b:9e:c5:b1:cd:74:d1:d3:b4:55:39:7a:44:af:41:b3:74:
84:11:3d:40:2b:59:7e:41:5e:26:b3:33:38:1c:4d:4f:16:41:
fc:95:5c:77:96:36:c6:62:c0:af:bd:95:34:c7:d3:7e:a1:7a:
67:1a:5b:20:22:65:42:cf:fd:e4:98:82:04:7d:68:76:68:dc:
0e:2b:e3:e3:09:9d:e5:e9:77:8a:69:1a:41:2a:ab:67:b6:0a:
c0:63:98:d3:ce:c3:e1:af:31:77:dd:c3:fe:11:42:8d:2c:a9:
e2:b0:2b:af:fd:c3:9d:2e:20:92:d4:25:bd:40:f5:e0:c1:d9:
69:6c:80:5b:96:1b:02:22:9f:15:0b:bf:25:d5:ff:41:b7:26:
08:24:49:bc:99:6e:c8:c1:2a:24:e1:54:23:16:c0:10:e7:24:
4b:f2:13:d6:31:6f:73:ae:fc:98:1f:7e:d9:a9:cb:2f:ad:7f:
b8:24:04:20:9f:2e:2d:8b:46:d5:1a:77:6b:30:d4:f3:46:37:
16:79:44:d4:28:86:82:1a:ba:a4:37:2b:c0:a7:aa:5d:66:4b:
f0:51:c1:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb65Dm36lF35GZ+e1dTerMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMmFlNDVjNTA5MDQxYTc5NmE5Njg5NTM1ODFmNTFkNDVi
ZmNlNTUwHhcNMjQwMTAyMDQzMDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWIzNWEwZDg0Yjc5YzAzMjg0YTc5NDYwMjZkNmUwOTg1NmVlN2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq175rsi1I+a8sU5OOXHSmCdre7r
+0nD24P1t63QcqK9VJa+9Cuavy0vuUcUNGTQCRykEnst8YXUnHuUxlRl4HAZt2S9
TnV54BTgx/lka7bpgV4Tm0WH4+b8WeNVNjpBZTcDX9tKoqPdmqVzG9yQqUSWcz9+
ZX/4UQxH4dflAeek75Bt0jrxYKYY5ELZjYh3wWneo8qUN3dCQbCHmHECWPTQpsKr
fz3cgiSbVh8Gz7K45gR6deGwgpB6oCI6FQmK8vzklxl+j/UpwJgJ2Wy2/1zAoUk7
SXf8knT2IXKJ/a2subyWFagNM0YIJT2mmR8mlVBvmc0Rn6fYJVTpnvBH+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIGzWg2Et5wDKEp5RgJtbgmFbue4MB8GA1UdIwQY
MBaAFI8q5FxQkEGnlqlolTWB9R1Fv85VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanlya1hGQ1FRYWVXcVdpVk5ZSDFIVVdfemxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85MzkwMWEtMDQzYi00OWM4LWFkMzct
YWM3ZjIxYjZiNzRkLzEvZ2JOYURZUzNuQU1vU25sR0FtMXVDWVZ1NTdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85MzkwMWEtMDQzYi00OWM4LWFkMzctYWM3ZjIxYjZiNzRk
LzEvanlya1hGQ1FRYWVXcVdpVk5ZSDFIVVdfemxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTUtwMA0G
CSqGSIb3DQEBCwUAA4IBAQAnLGBUML4VmBSUmS1eJJgn28WR/EILHEq56ccJwr8S
h/3WaARWe57Fsc100dO0VTl6RK9Bs3SEET1AK1l+QV4mszM4HE1PFkH8lVx3ljbG
YsCvvZU0x9N+oXpnGlsgImVCz/3kmIIEfWh2aNwOK+PjCZ3l6XeKaRpBKqtntgrA
Y5jTzsPhrzF33cP+EUKNLKnisCuv/cOdLiCS1CW9QPXgwdlpbIBblhsCIp8VC78l
1f9BtyYIJEm8mW7IwSok4VQjFsAQ5yRL8hPWMW9zrvyYH37ZqcsvrX+4JAQgny4t
i0bVGndrMNTzRjcWeUTUKIaCGrqkNyvAp6pdZkvwUcFI
-----END CERTIFICATE-----
Generated at Fri Jun 7 13:23:00 2024 by rpki-client on console-ams.rpki-client.org