Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/iV_GjJJCcBVfKCR-qV3WPo6JfC8.roa
File: iV_GjJJCcBVfKCR-qV3WPo6JfC8.roa (raw, json)
Hash identifier: fEaCTD91sHLnaq3Vf8VpolAHfK17IX64IhiADU99YbE=
Subject key identifier: 89:5F:C6:8C:92:42:70:15:5F:28:24:7E:A9:5D:D6:3E:8E:89:7C:2F
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 018CC87147C63D868C387DFF0698774C6F3C
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/iV_GjJJCcBVfKCR-qV3WPo6JfC8.roa
Signing time: Tue 02 Jan 2024 04:31:56 +0000
ROA not before: Tue 02 Jan 2024 04:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 146.255.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:47:c6:3d:86:8c:38:7d:ff:06:98:77:4c:6f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jan 2 04:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=895fc68c924270155f28247ea95dd63e8e897c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:bb:5f:b3:4c:e6:6c:81:0b:d2:97:50:65:
a7:d0:31:21:f8:5f:80:c6:dd:71:9e:ff:7c:0d:40:
22:60:34:68:6d:27:4b:1a:7e:fa:7a:7d:02:74:76:
40:eb:82:31:7d:d0:17:45:b7:36:7d:b3:e7:4f:e5:
ce:5a:9e:b5:70:4b:59:bf:23:e9:ac:09:c6:0b:a1:
b0:a1:26:19:6b:32:62:0b:0e:c4:0e:5c:a0:10:ae:
2f:d2:a5:08:c1:f7:73:32:55:ed:ae:3d:c4:b3:3f:
af:e6:be:0f:aa:47:af:7e:a5:ee:87:c4:c1:bb:4f:
86:32:0b:c8:54:f1:3a:cb:d3:e5:ee:78:78:d1:64:
86:63:bf:5b:63:e3:e6:4e:3e:e4:e0:53:6d:3d:12:
fe:05:33:78:0c:50:1c:38:38:46:40:91:1b:41:a7:
b0:c4:72:c5:d9:57:87:53:3f:f7:88:7c:6f:4a:7e:
3f:fa:4b:6f:d4:5a:22:f4:bf:a7:1e:2c:29:86:63:
16:93:d5:48:96:21:70:c2:3f:c6:41:5f:23:61:6b:
39:24:f3:8a:fe:3b:35:3f:21:71:9c:54:2a:61:a4:
6b:4f:7a:1a:39:0a:0e:53:da:3a:a6:0c:15:7a:d8:
17:15:09:a7:bb:44:33:f7:cd:1b:3d:17:d2:48:e6:
62:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5F:C6:8C:92:42:70:15:5F:28:24:7E:A9:5D:D6:3E:8E:89:7C:2F
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/iV_GjJJCcBVfKCR-qV3WPo6JfC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.189.0/24
Signature Algorithm: sha256WithRSAEncryption
95:6a:ea:28:87:6d:3c:59:d9:8c:9e:7c:59:73:cd:9e:7d:3c:
e5:8f:55:aa:f5:c4:b9:db:9f:74:22:f5:5f:4f:27:c2:aa:a8:
ff:6a:6d:29:48:1c:08:db:1a:03:11:3a:d4:0e:e4:fa:5c:7f:
02:b1:b9:ae:43:48:19:c9:a8:99:89:d1:25:b6:87:c0:48:4b:
8e:1e:15:0f:56:03:17:79:b7:21:56:b4:08:b2:67:ff:ae:61:
73:2a:bd:e0:be:77:94:43:b3:e3:00:e2:1e:42:93:b8:93:b3:
d4:4b:c9:06:ce:2e:1c:bf:d2:20:d1:2d:c7:ee:ac:8e:25:25:
a5:a0:5e:b1:4f:f3:39:a4:15:ff:6f:f0:04:d4:ec:3a:8b:ec:
87:44:d4:d1:d9:a1:f1:1f:3a:82:34:99:9a:a0:45:b1:97:c8:
60:f8:0a:e2:2f:b8:55:6a:4c:57:13:1f:4f:3d:04:65:93:02:
c0:41:13:66:68:b1:db:fa:2c:54:cd:d1:94:dd:74:1a:1f:9d:
c3:ef:ae:52:1f:10:a8:0f:a8:b7:03:54:4e:97:c2:28:2f:f8:
01:d2:7b:aa:95:84:9f:54:10:03:f2:21:d9:d2:0f:53:f9:c7:
c0:8b:19:53:82:d8:63:80:79:9c:ab:be:93:02:6e:8b:45:c4:
57:d5:f6:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIcUfGPYaMOH3/Bph3TG88MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjQwMTAyMDQzMTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTVmYzY4YzkyNDI3MDE1NWYyODI0N2VhOTVkZDYzZThlODk3YzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvta7X7NM5myBC9KXUGWn0DEh+F+A
xt1xnv98DUAiYDRobSdLGn76en0CdHZA64IxfdAXRbc2fbPnT+XOWp61cEtZvyPp
rAnGC6GwoSYZazJiCw7EDlygEK4v0qUIwfdzMlXtrj3Esz+v5r4PqkevfqXuh8TB
u0+GMgvIVPE6y9Pl7nh40WSGY79bY+PmTj7k4FNtPRL+BTN4DFAcODhGQJEbQaew
xHLF2VeHUz/3iHxvSn4/+ktv1Foi9L+nHiwphmMWk9VIliFwwj/GQV8jYWs5JPOK
/js1PyFxnFQqYaRrT3oaOQoOU9o6pgwVetgXFQmnu0Qz980bPRfSSOZi1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIlfxoySQnAVXygkfqld1j6OiXwvMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvaVZfR2pKSkNjQlZmS0NSLXFWM1dQbzZKZkM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkv+9MA0G
CSqGSIb3DQEBCwUAA4IBAQCVauooh208WdmMnnxZc82efTzlj1Wq9cS52590IvVf
TyfCqqj/am0pSBwI2xoDETrUDuT6XH8CsbmuQ0gZyaiZidEltofASEuOHhUPVgMX
ebchVrQIsmf/rmFzKr3gvneUQ7PjAOIeQpO4k7PUS8kGzi4cv9Ig0S3H7qyOJSWl
oF6xT/M5pBX/b/AE1Ow6i+yHRNTR2aHxHzqCNJmaoEWxl8hg+AriL7hVakxXEx9P
PQRlkwLAQRNmaLHb+ixUzdGU3XQaH53D765SHxCoD6i3A1ROl8IoL/gB0nuqlYSf
VBAD8iHZ0g9T+cfAixlTgthjgHmcq76TAm6LRcRX1faz
-----END CERTIFICATE-----
Generated at Thu May 9 05:43:11 2024 by rpki-client on console-fra.rpki-client.org