Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/gDJWkiL4oI68wgwbV7a4YFt7Urg.roa
File: gDJWkiL4oI68wgwbV7a4YFt7Urg.roa (raw, json)
Hash identifier: YqBWmExJlZoKMRISKRUlh/tvpvRSIbRLV6XCU1HH4V4=
Subject key identifier: 80:32:56:92:22:F8:A0:8E:BC:C2:0C:1B:57:B6:B8:60:5B:7B:52:B8
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 018CC86FDE345E384514C5EE06C1003A5C72
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/gDJWkiL4oI68wgwbV7a4YFt7Urg.roa
Signing time: Tue 02 Jan 2024 04:30:23 +0000
ROA not before: Tue 02 Jan 2024 04:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213073
IP address blocks: 2a03:5840:100::/48 maxlen: 48
2a03:5840:10a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:de:34:5e:38:45:14:c5:ee:06:c1:00:3a:5c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 04:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8032569222f8a08ebcc20c1b57b6b8605b7b52b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9a:c7:8f:b5:1f:7c:78:08:55:c1:8f:65:a6:
de:de:88:43:50:d6:c9:02:fe:0a:d0:36:12:0c:66:
97:71:92:f6:70:38:d7:2a:af:34:a9:d3:4d:27:e4:
02:d1:43:84:c9:2e:7c:2a:f0:f5:3b:79:f1:a4:4f:
00:1b:ff:18:09:a4:0b:64:b3:bd:bd:b3:9f:dc:27:
07:8a:f7:fa:54:4f:72:26:ec:da:d4:15:03:74:79:
c5:1d:12:d4:65:b2:f5:5f:eb:9c:ff:81:a0:d7:dd:
18:b1:d1:f2:4a:aa:77:ec:46:37:29:84:fd:79:d6:
7e:e8:e8:d4:69:77:18:84:72:95:cd:60:70:e4:64:
43:35:c1:8c:7c:60:ef:d1:de:5a:fc:75:ae:10:4e:
d0:7e:9c:37:94:a4:97:dd:1a:1e:ea:96:61:8b:84:
f1:c0:b5:6e:1e:25:cf:61:e4:d9:93:49:4e:a0:e0:
93:83:5d:7c:d5:2f:d5:09:7d:cc:e7:db:c4:90:0b:
4f:1b:32:63:53:b5:32:6f:32:ad:47:90:c9:99:41:
b6:dd:bf:30:3e:d1:61:2e:f5:a6:81:b6:99:e7:e4:
51:1f:8a:1d:7c:73:09:3c:84:86:17:4d:69:d2:c7:
df:95:d0:b7:87:07:c1:8d:05:96:7c:e2:37:f5:a7:
73:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:32:56:92:22:F8:A0:8E:BC:C2:0C:1B:57:B6:B8:60:5B:7B:52:B8
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/gDJWkiL4oI68wgwbV7a4YFt7Urg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:100::/48
2a03:5840:10a::/48
Signature Algorithm: sha256WithRSAEncryption
05:60:a1:77:9f:18:34:8d:93:1c:96:e1:12:34:78:4b:44:c0:
16:8f:51:27:43:50:02:7c:1a:86:25:63:c6:28:25:1c:f9:79:
f7:f0:98:32:fc:db:91:b4:e1:37:83:2d:0b:5a:99:11:e5:9a:
c1:25:f6:6e:49:c1:e9:7b:a4:00:c1:4a:ac:8a:b5:94:6f:1d:
0f:61:0c:94:c2:a8:86:27:3c:7f:9b:f6:94:17:ba:07:34:b3:
4d:77:6d:32:7c:3f:b9:a4:a9:39:a2:c2:69:f7:53:05:71:8b:
7c:84:5d:e1:c3:83:5d:0f:9f:f8:6a:18:6d:99:98:83:68:36:
41:2c:55:3d:39:4d:14:f6:51:00:c0:d5:b5:26:e6:c7:c7:9a:
45:92:20:10:65:00:62:0b:60:53:11:35:9d:df:6f:c1:56:03:
9f:ab:8c:67:d9:e7:b4:11:04:a6:47:9d:95:d0:4e:5a:37:06:
8c:c7:c9:b7:c1:b1:00:42:01:60:f7:cd:7f:fc:fc:6f:6a:e8:
22:bb:96:3b:89:e9:85:43:a5:97:56:02:35:aa:24:f7:09:d3:
62:44:9c:98:2e:a5:da:ef:a2:42:0d:f4:62:8c:72:90:41:58:
1b:f2:f4:ed:a4:52:dc:f4:99:82:5e:3d:b6:a7:90:d6:b3:b0:
da:98:f7:a3
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzIb940XjhFFMXuBsEAOlxyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1
ODYzNWEwHhcNMjQwMTAyMDQzMDIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDMyNTY5MjIyZjhhMDhlYmNjMjBjMWI1N2I2Yjg2MDViN2I1MmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5rHj7UffHgIVcGPZabe3ohDUNbJ
Av4K0DYSDGaXcZL2cDjXKq80qdNNJ+QC0UOEyS58KvD1O3nxpE8AG/8YCaQLZLO9
vbOf3CcHivf6VE9yJuza1BUDdHnFHRLUZbL1X+uc/4Gg190YsdHySqp37EY3KYT9
edZ+6OjUaXcYhHKVzWBw5GRDNcGMfGDv0d5a/HWuEE7Qfpw3lKSX3Roe6pZhi4Tx
wLVuHiXPYeTZk0lOoOCTg1181S/VCX3M59vEkAtPGzJjU7UybzKtR5DJmUG23b8w
PtFhLvWmgbaZ5+RRH4odfHMJPISGF01p0sffldC3hwfBjQWWfOI39adzxQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIAyVpIi+KCOvMIMG1e2uGBbe1K4MB8GA1UdIwQY
MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt
NmNiODk3OTFkN2ZkLzEvZ0RKV2tpTDRvSTY4d2d3YlY3YTRZRnQ3VXJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk
LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgNYQAEA
AwcAKgNYQAEKMA0GCSqGSIb3DQEBCwUAA4IBAQAFYKF3nxg0jZMcluESNHhLRMAW
j1EnQ1ACfBqGJWPGKCUc+Xn38Jgy/NuRtOE3gy0LWpkR5ZrBJfZuScHpe6QAwUqs
irWUbx0PYQyUwqiGJzx/m/aUF7oHNLNNd20yfD+5pKk5osJp91MFcYt8hF3hw4Nd
D5/4ahhtmZiDaDZBLFU9OU0U9lEAwNW1JubHx5pFkiAQZQBiC2BTETWd32/BVgOf
q4xn2ee0EQSmR52V0E5aNwaMx8m3wbEAQgFg981//Pxvaugiu5Y7iemFQ6WXVgI1
qiT3CdNiRJyYLqXa76JCDfRijHKQQVgb8vTtpFLc9JmCXj22p5DWs7DamPej
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:49:24 2024 by rpki-client on console-fra.rpki-client.org