Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/gp-0y0LHfG8W9AbPAJ0ahbz8GV4.roa
File: gp-0y0LHfG8W9AbPAJ0ahbz8GV4.roa (raw, json)
Hash identifier: nQXK358QCx6IjUSpTWl5EoQJ8rI3oksyZVjiyQYHWl8=
Subject key identifier: 82:9F:B4:CB:42:C7:7C:6F:16:F4:06:CF:00:9D:1A:85:BC:FC:19:5E
Certificate issuer: /CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Certificate serial: 018CC94D3923B70BBCB48D0F54C7B4C86952
Authority key identifier: 67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/gp-0y0LHfG8W9AbPAJ0ahbz8GV4.roa
Signing time: Tue 02 Jan 2024 08:32:10 +0000
ROA not before: Tue 02 Jan 2024 08:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44399
IP address blocks: 185.252.72.0/22 maxlen: 22
2a0c:2340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:39:23:b7:0b:bc:b4:8d:0f:54:c7:b4:c8:69:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Validity
Not Before: Jan 2 08:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=829fb4cb42c77c6f16f406cf009d1a85bcfc195e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1e:5f:e8:eb:c8:4d:e3:a8:59:b8:8c:2e:2c:
db:1a:50:c6:af:2c:49:bc:db:64:0b:c0:f0:e7:3e:
69:77:80:f0:8b:71:75:9e:45:1f:2c:15:87:0b:05:
d9:08:51:dd:2c:91:68:2c:f1:cf:65:24:08:6b:aa:
e0:95:77:ca:c6:7a:af:45:98:a1:68:09:ff:e5:c1:
66:f8:cb:f6:e5:2d:0e:0e:5c:41:b9:44:d8:d1:b2:
4e:7c:d1:8b:02:bd:ae:c2:1e:8f:af:d7:6f:e4:ee:
fc:6b:27:4f:23:fe:d4:6c:7a:9d:98:09:06:f2:88:
12:c3:85:a8:b8:58:95:20:39:5c:29:a7:d8:eb:2a:
cf:65:b6:44:0f:55:df:49:ad:0a:b9:6e:3c:d2:7b:
19:eb:09:f6:26:72:92:cc:fa:c6:77:83:0a:10:fb:
ba:4f:b0:61:e7:23:89:7e:36:03:08:33:cd:31:09:
50:f0:24:71:62:1b:e1:3b:9e:b5:02:fd:88:5d:89:
2b:e4:0c:28:cd:11:e2:fe:05:0d:6c:3a:4e:27:53:
9c:45:da:e1:2f:b1:7e:6b:72:94:b8:4a:b6:24:25:
89:54:9b:bb:45:6c:1e:61:86:45:47:32:2a:f1:2e:
76:15:03:23:cc:0e:70:2c:e2:6d:af:b4:42:e3:04:
ad:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9F:B4:CB:42:C7:7C:6F:16:F4:06:CF:00:9D:1A:85:BC:FC:19:5E
X509v3 Authority Key Identifier:
keyid:67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/gp-0y0LHfG8W9AbPAJ0ahbz8GV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.72.0/22
IPv6:
2a0c:2340::/29
Signature Algorithm: sha256WithRSAEncryption
4f:0d:37:34:ed:ca:c1:00:c6:61:3f:87:1d:c2:76:8e:a7:55:
dd:6f:b8:b2:55:54:01:65:78:71:1f:4e:39:fd:d0:3e:97:6e:
1b:49:b6:18:ee:6b:e2:27:8e:7c:5f:fa:fc:0e:c9:25:5b:b6:
9a:e7:f8:09:1f:bd:da:ba:4d:35:73:bf:7c:0e:42:78:f3:24:
15:9f:3e:73:a1:91:a2:72:b6:1d:f7:bb:f5:d4:a9:12:05:ac:
bb:31:b3:87:e1:d7:26:d7:e5:10:c6:49:9a:64:b7:0f:60:55:
71:22:7e:2e:36:ac:4a:57:50:51:16:61:bd:0d:e0:01:40:dc:
cb:3b:a1:9f:bd:05:83:b7:83:26:5a:53:7f:60:a4:69:98:3c:
41:1e:58:0f:bb:83:ef:8b:d5:9c:91:c9:58:cf:5c:70:e3:63:
5f:ac:ad:4b:4a:45:d0:2d:6b:22:56:36:9b:50:45:84:a5:86:
80:ef:39:38:2d:90:26:04:b4:11:bc:43:b1:a3:12:ff:5e:30:
5f:9f:97:3e:81:10:0b:6a:f0:fe:52:6b:ff:df:e0:95:df:07:
50:fb:ee:54:6a:4d:2a:54:31:22:cb:2f:8a:67:5c:b2:f3:a6:
bc:49:1b:cb:d3:37:b8:07:28:5d:68:f9:0e:10:9e:20:7d:e4:
0b:5e:49:7c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzJTTkjtwu8tI0PVMe0yGlSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZDM0ZmMwMzAwMmVhYTdmMzZiMmU3ZTYzNWVkYThjMzBj
NDgyODQwHhcNMjQwMTAyMDgzMjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjlmYjRjYjQyYzc3YzZmMTZmNDA2Y2YwMDlkMWE4NWJjZmMxOTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx5f6OvITeOoWbiMLizbGlDGryxJ
vNtkC8Dw5z5pd4Dwi3F1nkUfLBWHCwXZCFHdLJFoLPHPZSQIa6rglXfKxnqvRZih
aAn/5cFm+Mv25S0ODlxBuUTY0bJOfNGLAr2uwh6Pr9dv5O78aydPI/7UbHqdmAkG
8ogSw4WouFiVIDlcKafY6yrPZbZED1XfSa0KuW480nsZ6wn2JnKSzPrGd4MKEPu6
T7Bh5yOJfjYDCDPNMQlQ8CRxYhvhO561Av2IXYkr5AwozRHi/gUNbDpOJ1OcRdrh
L7F+a3KUuEq2JCWJVJu7RWweYYZFRzIq8S52FQMjzA5wLOJtr7RC4wStTwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIKftMtCx3xvFvQGzwCdGoW8/BleMB8GA1UdIwQY
MBaAFGfTT8AwAuqn82sufmNe2owwxIKEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjlOUHdEQUM2cWZ6YXk1LVkxN2FqRERFZ29RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yOTlkNjEtNmI5Ni00MDU0LTk4YTMt
ZGM0MmM3NjkzZGY5LzEvZ3AtMHkwTEhmRzhXOUFiUEFKMGFoYno4R1Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8yOTlkNjEtNmI5Ni00MDU0LTk4YTMtZGM0MmM3NjkzZGY5
LzEvWjlOUHdEQUM2cWZ6YXk1LVkxN2FqRERFZ29RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufxIMA0E
AgACMAcDBQMqDCNAMA0GCSqGSIb3DQEBCwUAA4IBAQBPDTc07crBAMZhP4cdwnaO
p1Xdb7iyVVQBZXhxH045/dA+l24bSbYY7mviJ458X/r8DsklW7aa5/gJH73auk01
c798DkJ48yQVnz5zoZGicrYd97v11KkSBay7MbOH4dcm1+UQxkmaZLcPYFVxIn4u
NqxKV1BRFmG9DeABQNzLO6GfvQWDt4MmWlN/YKRpmDxBHlgPu4Pvi9WckclYz1xw
42NfrK1LSkXQLWsiVjabUEWEpYaA7zk4LZAmBLQRvEOxoxL/XjBfn5c+gRALavD+
Umv/3+CV3wdQ++5Uak0qVDEiyy+KZ1yy86a8SRvL0ze4ByhdaPkOEJ4gfeQLXkl8
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:13 2024 by rpki-client on console-fra.rpki-client.org