Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/GA2yEublRIBxxbyN3Ob_U23dph8.roa
File: GA2yEublRIBxxbyN3Ob_U23dph8.roa (raw, json)
Hash identifier: yN1O+Pn8npsXvCiuX3rVgU/pXnCgGgWZitr0MCaQEpQ=
Subject key identifier: 18:0D:B2:12:E6:E5:44:80:71:C5:BC:8D:DC:E6:FF:53:6D:DD:A6:1F
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018F14EE4FE36CDC87A5507C1B046005AA80
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/GA2yEublRIBxxbyN3Ob_U23dph8.roa
Signing time: Thu 25 Apr 2024 11:05:13 +0000
ROA not before: Thu 25 Apr 2024 11:05:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 5.34.208.0/21 maxlen: 24
82.115.4.0/22 maxlen: 24
89.251.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:14:ee:4f:e3:6c:dc:87:a5:50:7c:1b:04:60:05:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Apr 25 11:05:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=180db212e6e5448071c5bc8ddce6ff536ddda61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:54:b1:b0:6f:57:d0:3c:49:d5:9d:89:e0:76:
e1:3e:10:f0:7b:94:65:6d:4b:73:5a:70:bb:e1:5e:
c2:0b:2b:be:2b:e8:c2:16:e9:91:de:1d:05:ff:05:
d0:81:94:37:61:6b:90:96:8c:5b:02:a5:3f:e7:f8:
51:95:05:96:3e:fd:9f:e9:21:c7:b1:30:b2:8d:91:
35:cf:f5:f1:97:e3:3d:af:44:f6:a8:77:fa:80:13:
c5:f9:bb:5e:6a:d5:d6:30:ab:d2:1e:2c:b5:47:48:
87:4b:36:cb:ed:47:f7:25:99:e3:e9:29:12:a0:76:
ab:ad:df:83:77:c3:87:ad:36:64:7c:08:c1:6f:40:
b9:44:55:00:81:66:88:63:1d:1b:96:e6:3d:bf:df:
b7:2e:fa:0b:97:04:b8:1a:81:08:9d:80:28:a1:2a:
cd:59:20:21:d1:4d:83:4a:6e:01:4f:f1:27:8e:2b:
06:b8:5d:d9:3b:ce:49:c5:80:80:ae:31:07:99:b8:
87:a7:b0:80:25:9a:bf:6f:4b:37:a7:20:27:eb:1e:
5f:ee:df:85:28:4b:11:3f:43:7f:dd:d1:9d:e5:90:
eb:f2:70:e5:99:74:1c:dc:42:05:58:dd:51:45:8f:
1c:66:d4:4f:43:d7:d1:26:a2:ac:a2:74:2a:37:93:
d0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0D:B2:12:E6:E5:44:80:71:C5:BC:8D:DC:E6:FF:53:6D:DD:A6:1F
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/GA2yEublRIBxxbyN3Ob_U23dph8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.208.0/21
82.115.4.0/22
89.251.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:30:be:43:e4:6b:b8:da:a3:44:3a:4e:a0:66:58:f2:67:cf:
8c:ae:20:7f:44:ba:ee:ab:16:22:03:2a:7b:a0:8a:a4:0a:8d:
ed:bb:6f:e9:71:8c:a5:64:1f:9a:5b:cd:6b:c9:3b:9d:e6:e1:
a7:0b:33:c6:e7:d7:bc:77:ed:8c:e7:4c:45:8c:33:ba:25:71:
61:6f:0f:11:2b:9b:70:bc:58:c0:45:3a:b9:bb:c4:06:e8:16:
a9:2b:88:36:ec:2e:39:44:44:1d:ed:50:24:74:99:e8:df:0c:
3e:f3:34:60:af:99:fc:63:be:fa:89:46:1e:5d:47:63:d0:c5:
43:67:3d:2c:09:eb:0f:a4:c7:60:0f:c8:6d:a6:fd:10:f2:ca:
6e:c6:0d:4a:6f:69:bc:58:7f:65:ba:94:06:ae:0a:09:d2:5d:
27:50:e3:bd:0b:cb:bd:e1:e9:5c:27:33:42:f6:8f:cc:7e:96:
d5:1a:07:21:b4:a3:52:41:b3:0f:7c:b5:cf:03:4f:a0:02:81:
e2:2e:58:03:b0:3f:0e:9a:68:f9:cc:da:05:97:fc:d4:1c:d2:
48:41:f1:c8:65:a9:bf:1e:62:35:b4:ad:2d:40:6c:2c:c4:18:
69:8e:de:d0:83:39:3f:0b:09:56:a9:73:9c:bf:84:b2:ac:85:
d0:36:c4:16
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY8U7k/jbNyHpVB8GwRgBaqAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjQwNDI1MTEwNTEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODBkYjIxMmU2ZTU0NDgwNzFjNWJjOGRkY2U2ZmY1MzZkZGRhNjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FSxsG9X0DxJ1Z2J4HbhPhDwe5Rl
bUtzWnC74V7CCyu+K+jCFumR3h0F/wXQgZQ3YWuQloxbAqU/5/hRlQWWPv2f6SHH
sTCyjZE1z/Xxl+M9r0T2qHf6gBPF+bteatXWMKvSHiy1R0iHSzbL7Uf3JZnj6SkS
oHarrd+Dd8OHrTZkfAjBb0C5RFUAgWaIYx0bluY9v9+3LvoLlwS4GoEInYAooSrN
WSAh0U2DSm4BT/EnjisGuF3ZO85JxYCArjEHmbiHp7CAJZq/b0s3pyAn6x5f7t+F
KEsRP0N/3dGd5ZDr8nDlmXQc3EIFWN1RRY8cZtRPQ9fRJqKsonQqN5PQ5QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBgNshLm5USAccW8jdzm/1Nt3aYfMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvR0EyeUV1YmxSSUJ4eGJ5TjNPYl9VMjNkcGg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDBSLQAwQC
UnMEAwQAWfsKMA0GCSqGSIb3DQEBCwUAA4IBAQCjML5D5Gu42qNEOk6gZljyZ8+M
riB/RLruqxYiAyp7oIqkCo3tu2/pcYylZB+aW81ryTud5uGnCzPG59e8d+2M50xF
jDO6JXFhbw8RK5twvFjARTq5u8QG6BapK4g27C45REQd7VAkdJno3ww+8zRgr5n8
Y776iUYeXUdj0MVDZz0sCesPpMdgD8htpv0Q8spuxg1Kb2m8WH9lupQGrgoJ0l0n
UOO9C8u94elcJzNC9o/MfpbVGgchtKNSQbMPfLXPA0+gAoHiLlgDsD8Ommj5zNoF
l/zUHNJIQfHIZam/HmI1tK0tQGwsxBhpjt7Qgzk/CwlWqXOcv4SyrIXQNsQW
-----END CERTIFICATE-----
Generated at Mon May 6 23:13:16 2024 by rpki-client on console-ams.rpki-client.org