Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/GgG7mhsdhXiKLzMaykhJkKr7XQc.roa
File: GgG7mhsdhXiKLzMaykhJkKr7XQc.roa (raw, json)
Hash identifier: ThHO0GR2tTK56Cek+hOZF3ZgwKtV1BPggarDdsG/xTI=
Subject key identifier: 1A:01:BB:9A:1B:1D:85:78:8A:2F:33:1A:CA:48:49:90:AA:FB:5D:07
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 018CC500335BD2075182451BA6272D3E7591
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/GgG7mhsdhXiKLzMaykhJkKr7XQc.roa
Signing time: Mon 01 Jan 2024 12:29:33 +0000
ROA not before: Mon 01 Jan 2024 12:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133861
IP address blocks: 91.208.240.0/24 maxlen: 24
91.208.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 May 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:33:5b:d2:07:51:82:45:1b:a6:27:2d:3e:75:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 1 12:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a01bb9a1b1d85788a2f331aca484990aafb5d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a8:8e:d6:65:47:b4:97:01:33:6c:ff:23:70:
63:4e:e5:d6:64:cc:0f:3b:e3:27:95:ec:2c:b5:db:
c4:b4:e5:1c:80:9b:17:b0:6f:8a:61:64:74:cc:32:
cf:ac:e7:93:7c:1b:75:1b:0c:46:f2:51:2e:43:29:
ce:eb:b8:0a:33:5a:75:5d:fe:64:75:bb:71:4f:de:
bf:5d:d8:60:17:10:38:fb:06:21:e3:c1:a3:a3:46:
36:45:1b:20:68:88:cf:3f:3b:18:48:68:47:b6:5a:
98:db:8a:7a:26:41:33:1e:2a:fd:63:f2:8b:b6:17:
a7:a2:d8:9e:66:4f:71:b8:de:3a:aa:35:b5:11:58:
f8:ee:b2:6a:8f:9c:72:6e:f4:2a:50:26:cc:d1:ed:
49:03:57:8c:73:4a:7e:8c:14:72:1d:d1:a6:bc:cf:
a7:8d:3a:7a:a4:1e:e9:fe:8f:5e:96:59:e5:6b:3e:
30:6a:a6:09:dc:bd:dd:02:f9:86:ac:e4:00:23:58:
1f:85:61:db:b6:56:be:af:82:fe:9b:ed:95:b9:e1:
56:94:f4:31:f4:c1:6a:67:2f:61:5e:c5:eb:04:4f:
3f:b7:40:e8:de:df:9f:04:44:03:e4:d0:f3:dc:bf:
4f:0c:dd:84:43:c9:2a:9f:66:85:c5:c9:2a:57:1a:
05:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:01:BB:9A:1B:1D:85:78:8A:2F:33:1A:CA:48:49:90:AA:FB:5D:07
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/GgG7mhsdhXiKLzMaykhJkKr7XQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.236.0/24
91.208.240.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:96:45:79:ee:d8:66:07:09:62:d8:15:25:13:ae:f1:4a:90:
df:a9:a5:9c:e2:17:43:9e:8c:3c:55:0c:26:b0:30:aa:a8:cc:
5e:dd:33:ad:73:d6:05:e0:a3:2e:28:e1:3c:6c:09:ec:38:4b:
1f:3c:fd:ec:b2:d3:54:ab:c6:81:7a:99:dd:ad:fb:70:78:fc:
f0:00:48:f8:88:23:05:d2:81:65:78:fc:4c:ec:80:54:2c:6e:
ad:8c:02:50:91:ee:ec:83:c3:c9:27:01:81:49:c2:34:7f:82:
75:1f:26:2c:72:ec:57:c3:be:c9:96:7c:96:52:e5:fd:b5:2c:
a9:ca:9e:e4:e2:9a:a4:51:9b:64:5d:b8:9a:af:d6:90:3b:bc:
a0:b4:d7:88:4e:20:64:95:eb:3f:f6:c3:7b:b4:68:d2:d0:e5:
da:36:95:b1:b5:93:72:c7:af:ea:98:be:11:16:ea:b4:d9:be:
ba:f8:70:d0:cc:e7:7b:73:29:f4:31:55:ac:47:17:a7:6d:39:
3d:ca:a5:8a:4a:8a:97:fc:1c:12:25:54:f3:62:c1:87:ce:c9:
5b:77:e2:c2:b1:10:4b:26:71:3a:76:e7:36:01:97:a7:11:3b:
20:5b:0e:01:cd:4b:31:ac:56:0e:18:00:c4:b9:23:c8:1d:e3:
0e:ef:51:5e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzFADNb0gdRgkUbpictPnWRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm
YmM0YTkwHhcNMjQwMTAxMTIyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTAxYmI5YTFiMWQ4NTc4OGEyZjMzMWFjYTQ4NDk5MGFhZmI1ZDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqiO1mVHtJcBM2z/I3BjTuXWZMwP
O+MnlewstdvEtOUcgJsXsG+KYWR0zDLPrOeTfBt1GwxG8lEuQynO67gKM1p1Xf5k
dbtxT96/XdhgFxA4+wYh48Gjo0Y2RRsgaIjPPzsYSGhHtlqY24p6JkEzHir9Y/KL
thenotieZk9xuN46qjW1EVj47rJqj5xybvQqUCbM0e1JA1eMc0p+jBRyHdGmvM+n
jTp6pB7p/o9ellnlaz4waqYJ3L3dAvmGrOQAI1gfhWHbtla+r4L+m+2VueFWlPQx
9MFqZy9hXsXrBE8/t0Do3t+fBEQD5NDz3L9PDN2EQ8kqn2aFxckqVxoFJwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBoBu5obHYV4ii8zGspISZCq+10HMB8GA1UdIwQY
MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt
NmM3ZTU2ODU4OTBjLzEvR2dHN21oc2RoWGlLTHpNYXlraEprS3I3WFFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj
LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9DsAwQA
W9DwMA0GCSqGSIb3DQEBCwUAA4IBAQCclkV57thmBwli2BUlE67xSpDfqaWc4hdD
now8VQwmsDCqqMxe3TOtc9YF4KMuKOE8bAnsOEsfPP3sstNUq8aBepndrftwePzw
AEj4iCMF0oFlePxM7IBULG6tjAJQke7sg8PJJwGBScI0f4J1HyYscuxXw77JlnyW
UuX9tSypyp7k4pqkUZtkXbiar9aQO7ygtNeITiBkles/9sN7tGjS0OXaNpWxtZNy
x6/qmL4RFuq02b66+HDQzOd7cyn0MVWsRxenbTk9yqWKSoqX/BwSJVTzYsGHzslb
d+LCsRBLJnE6duc2AZenETsgWw4BzUsxrFYOGADEuSPIHeMO71Fe
-----END CERTIFICATE-----
Generated at Tue May 14 17:09:07 2024 by rpki-client on console-ams.rpki-client.org