Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/GLInYtCnjAI6DSibBTTqTCTZc3w.roa
File: GLInYtCnjAI6DSibBTTqTCTZc3w.roa (raw, json)
Hash identifier: Q9SXEsmvl5ysCpP/xB24iNd/jWiaIBn7VfJNY9/C4kk=
Subject key identifier: 18:B2:27:62:D0:A7:8C:02:3A:0D:28:9B:05:34:EA:4C:24:D9:73:7C
Certificate issuer: /CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Certificate serial: 018CC94E33D588F945B3DD00756BC89E021E
Authority key identifier: 0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/GLInYtCnjAI6DSibBTTqTCTZc3w.roa
Signing time: Tue 02 Jan 2024 08:33:14 +0000
ROA not before: Tue 02 Jan 2024 08:33:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30781
IP address blocks: 185.65.141.0/24 maxlen: 24
91.213.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:33:d5:88:f9:45:b3:dd:00:75:6b:c8:9e:02:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Validity
Not Before: Jan 2 08:33:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18b22762d0a78c023a0d289b0534ea4c24d9737c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:36:55:ad:0e:1e:fe:5c:f4:a6:dd:7d:9a:55:
b5:af:29:80:c9:64:d3:0a:b3:41:0e:9d:d9:3d:be:
32:c2:35:48:e1:81:e0:ac:43:28:cf:91:b5:e5:ea:
77:dd:a3:55:5a:01:f1:69:aa:9d:b6:0e:1a:8d:b6:
68:ed:de:7e:14:14:30:d5:5f:4c:5c:22:4c:4e:f0:
50:b7:c6:62:d4:11:02:97:95:5c:54:1d:50:8b:f7:
af:10:8f:e2:53:e9:c8:fb:11:52:f0:22:55:ba:8f:
26:a2:95:a5:39:51:3d:85:e1:96:21:8a:1d:49:e8:
6c:10:15:df:3a:88:1d:43:dc:db:95:2b:63:d6:2f:
86:72:75:bc:a3:b8:2c:4a:b0:76:1a:32:9a:4c:3d:
81:06:70:9f:85:92:0a:9f:0b:d6:2b:2a:77:ed:09:
e1:3c:f1:71:e7:48:a4:57:95:cd:4a:95:b2:50:55:
53:50:3c:64:7d:2a:9f:1f:9e:7f:f9:85:2b:89:6e:
ae:52:2d:9f:6e:59:57:5b:7c:73:65:d6:f5:8f:83:
4a:4c:d5:5d:5c:96:da:cf:21:2b:df:a0:5f:e8:b7:
d8:c0:d5:b4:10:fe:cb:c2:e4:4b:da:3c:9c:9d:7c:
d4:a9:16:d0:db:0a:16:91:13:3d:02:e8:3d:c0:cc:
56:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B2:27:62:D0:A7:8C:02:3A:0D:28:9B:05:34:EA:4C:24:D9:73:7C
X509v3 Authority Key Identifier:
keyid:0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/GLInYtCnjAI6DSibBTTqTCTZc3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.148.0/24
185.65.141.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:63:3e:22:c9:cf:c6:d2:91:69:19:e1:1e:98:89:4b:c8:74:
b7:2b:ed:30:d8:35:dc:d5:b2:42:3e:4d:db:06:6e:07:8a:f5:
e8:b8:54:da:89:f7:7a:68:5a:34:3f:a0:61:97:71:a1:86:93:
f9:60:e9:ad:e1:3c:60:ec:56:0b:37:c9:b9:38:7f:2e:67:10:
d9:be:78:65:89:36:44:a9:c5:1f:52:26:b6:8a:bc:22:1c:5d:
17:05:38:33:b6:33:72:9e:68:e8:80:31:41:14:8c:00:dc:e2:
24:ef:49:5f:40:ea:d0:ec:27:09:bc:07:41:10:c4:ca:b1:60:
51:95:69:4e:5d:81:f3:ac:98:36:fd:e8:8f:da:5e:e9:50:1e:
02:71:72:ce:0a:4e:f5:b1:b0:ed:e6:8d:38:15:ff:35:d3:7a:
a9:f0:8d:a2:17:8b:4f:56:61:4f:55:7d:27:9c:2f:e8:44:1f:
40:a6:f5:27:91:01:b6:66:6d:e7:42:d0:1f:03:88:eb:b5:66:
0f:ff:ed:d8:a4:ea:84:a8:a0:59:05:95:e2:00:09:46:3e:26:
a6:09:db:ae:41:41:a8:e8:85:d6:66:6f:f0:67:a8:09:1b:15:
41:c6:71:b5:20:df:d7:a3:3a:d4:8a:d9:1a:83:28:73:cb:17:
25:3c:57:2d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzJTjPViPlFs90AdWvIngIeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlY2E2ZTA2YzY4MjRiZDFiODExMTgzZTBlMTdmYTE5NDk2
ZDI2MWMwHhcNMjQwMTAyMDgzMzE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGIyMjc2MmQwYTc4YzAyM2EwZDI4OWIwNTM0ZWE0YzI0ZDk3MzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTZVrQ4e/lz0pt19mlW1rymAyWTT
CrNBDp3ZPb4ywjVI4YHgrEMoz5G15ep33aNVWgHxaaqdtg4ajbZo7d5+FBQw1V9M
XCJMTvBQt8Zi1BECl5VcVB1Qi/evEI/iU+nI+xFS8CJVuo8mopWlOVE9heGWIYod
SehsEBXfOogdQ9zblStj1i+GcnW8o7gsSrB2GjKaTD2BBnCfhZIKnwvWKyp37Qnh
PPFx50ikV5XNSpWyUFVTUDxkfSqfH55/+YUriW6uUi2fbllXW3xzZdb1j4NKTNVd
XJbazyEr36Bf6LfYwNW0EP7LwuRL2jycnXzUqRbQ2woWkRM9Aug9wMxWnQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBiyJ2LQp4wCOg0omwU06kwk2XN8MB8GA1UdIwQY
MBaAFA7KbgbGgkvRuBEYPg4X+hlJbSYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHNwdUJzYUNTOUc0RVJnLURoZjZHVWx0Smh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy85MTM3ZmYtMjA2My00Njc1LThkZTct
Y2ZkM2ZmOWZkZjdiLzEvR0xJbll0Q25qQUk2RFNpYkJUVHFUQ1RaYzN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy85MTM3ZmYtMjA2My00Njc1LThkZTctY2ZkM2ZmOWZkZjdi
LzEvRHNwdUJzYUNTOUc0RVJnLURoZjZHVWx0Smh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9WUAwQA
uUGNMA0GCSqGSIb3DQEBCwUAA4IBAQA/Yz4iyc/G0pFpGeEemIlLyHS3K+0w2DXc
1bJCPk3bBm4HivXouFTaifd6aFo0P6Bhl3GhhpP5YOmt4Txg7FYLN8m5OH8uZxDZ
vnhliTZEqcUfUia2irwiHF0XBTgztjNynmjogDFBFIwA3OIk70lfQOrQ7CcJvAdB
EMTKsWBRlWlOXYHzrJg2/eiP2l7pUB4CcXLOCk71sbDt5o04Ff8103qp8I2iF4tP
VmFPVX0nnC/oRB9ApvUnkQG2Zm3nQtAfA4jrtWYP/+3YpOqEqKBZBZXiAAlGPiam
CduuQUGo6IXWZm/wZ6gJGxVBxnG1IN/XozrUitkagyhzyxclPFct
-----END CERTIFICATE-----
Generated at Sun May 19 00:20:53 2024 by rpki-client on console-fra.rpki-client.org