Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/GbNIK8KbjNfXIM_k1_16DZkBiDQ.roa
File: GbNIK8KbjNfXIM_k1_16DZkBiDQ.roa (raw, json)
Hash identifier: bhQ1Ond9uTsWLPhHEPCKrqbxdo9J0XGoFGPdOwUnfm0=
Subject key identifier: 19:B3:48:2B:C2:9B:8C:D7:D7:20:CF:E4:D7:FD:7A:0D:99:01:88:34
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 019421B1D803A1227E9A0CE4F0C0AAABF69A
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/GbNIK8KbjNfXIM_k1_16DZkBiDQ.roa
Signing time: Wed 01 Jan 2025 11:48:10 +0000
ROA not before: Wed 01 Jan 2025 11:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44247
IP address blocks: 84.1.45.0/24 maxlen: 24
84.1.46.0/23 maxlen: 23
84.1.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d8:03:a1:22:7e:9a:0c:e4:f0:c0:aa:ab:f6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 11:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19b3482bc29b8cd7d720cfe4d7fd7a0d99018834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cf:7f:f4:b3:5e:5e:07:3e:f9:a2:6a:73:48:
f7:0d:3a:22:5d:5e:b8:c7:18:83:47:af:a7:3a:f8:
07:c4:a4:0d:61:d7:e8:66:ee:6b:a3:b4:df:29:75:
38:58:1d:8f:43:d5:5e:88:10:a8:df:fa:06:aa:04:
4f:03:7e:0d:db:14:a4:4a:4b:d8:26:24:e9:c0:3a:
3b:98:9f:a4:9e:70:2e:8c:82:d5:ec:57:2f:84:90:
3a:71:40:99:fa:57:1d:5c:70:6d:54:99:b3:68:a6:
36:4f:41:0e:39:0b:b0:a4:47:7a:1c:e3:5e:d6:f1:
96:dc:4b:a3:dd:ee:f1:05:28:e4:bb:0d:52:bb:86:
b6:1f:5f:f0:78:42:25:85:f3:9d:86:5e:4e:9e:f7:
75:d6:e4:3f:2b:11:f5:8b:21:ca:ae:d3:cb:b8:75:
9d:78:91:1a:e6:77:38:d8:c7:6d:c6:2d:be:0e:c6:
7f:26:ee:1d:54:c1:f1:6a:3f:08:91:5e:b2:30:01:
2d:fb:41:85:f5:44:a2:c0:b6:48:cc:c8:94:c4:00:
25:ea:27:81:46:44:0d:d2:e9:c5:be:a4:0d:c4:89:
57:02:87:69:f8:71:8e:c8:09:38:1f:39:4f:c2:77:
5d:ad:d9:b3:e8:f1:6b:4b:cb:da:83:25:0f:a4:8f:
f7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B3:48:2B:C2:9B:8C:D7:D7:20:CF:E4:D7:FD:7A:0D:99:01:88:34
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/GbNIK8KbjNfXIM_k1_16DZkBiDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.1.45.0-84.1.47.255
84.1.247.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:e7:37:4e:4d:5e:ab:aa:0f:b9:fd:f4:8f:0f:77:af:26:4d:
5d:17:b3:ec:2c:4b:57:84:41:eb:a9:b5:b4:22:61:48:8a:fe:
33:81:ac:aa:60:2a:18:3c:c2:ef:96:2e:d4:2e:2b:a3:3a:6a:
88:90:74:6d:47:45:0f:82:4d:2f:fd:5c:44:34:c2:a9:9a:84:
99:17:53:64:cb:ba:02:98:96:76:c4:9b:90:bd:0d:24:d7:c6:
c2:00:87:ae:34:77:8d:ff:5a:f6:db:12:6e:7c:66:99:9a:69:
58:a6:23:07:9a:25:74:72:46:c4:74:90:8f:e2:4d:0f:91:75:
c9:2c:c0:ab:75:3d:45:de:c3:3c:94:fe:9a:36:e2:f7:e1:a0:
7d:88:19:cf:fa:69:bb:25:36:35:27:36:43:55:78:89:2a:96:
f8:f6:75:12:62:c9:11:62:d7:e5:e7:42:90:f3:47:e9:f5:fd:
c3:cf:4c:0d:9c:59:e8:00:02:a2:b0:87:a0:9f:d2:a4:e2:b8:
a3:a4:d1:e6:4e:66:90:ae:6c:67:67:f8:91:13:0b:df:b7:5c:
c8:ea:56:e9:69:1c:bf:67:58:e5:1f:a9:f4:ce:01:26:30:ca:
14:c8:4d:ae:62:47:92:52:9e:a9:78:6a:44:d5:4f:20:84:1c:
25:f3:45:40
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQhsdgDoSJ+mgzk8MCqq/aaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4
YWFlN2IwHhcNMjUwMTAxMTE0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWIzNDgyYmMyOWI4Y2Q3ZDcyMGNmZTRkN2ZkN2EwZDk5MDE4ODM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5s9/9LNeXgc++aJqc0j3DToiXV64
xxiDR6+nOvgHxKQNYdfoZu5ro7TfKXU4WB2PQ9VeiBCo3/oGqgRPA34N2xSkSkvY
JiTpwDo7mJ+knnAujILV7FcvhJA6cUCZ+lcdXHBtVJmzaKY2T0EOOQuwpEd6HONe
1vGW3Euj3e7xBSjkuw1Su4a2H1/weEIlhfOdhl5Onvd11uQ/KxH1iyHKrtPLuHWd
eJEa5nc42Mdtxi2+DsZ/Ju4dVMHxaj8IkV6yMAEt+0GF9USiwLZIzMiUxAAl6ieB
RkQN0unFvqQNxIlXAodp+HGOyAk4HzlPwnddrdmz6PFrS8vagyUPpI/36QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFBmzSCvCm4zX1yDP5Nf9eg2ZAYg0MB8GA1UdIwQY
MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt
MjkyYWU0NmU2MzAyLzEvR2JOSUs4S2JqTmZYSU1fazFfMTZEWmtCaURRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy
LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABUAS0D
BARUASADBABUAfcwDQYJKoZIhvcNAQELBQADggEBACznN05NXquqD7n99I8Pd68m
TV0Xs+wsS1eEQeuptbQiYUiK/jOBrKpgKhg8wu+WLtQuK6M6aoiQdG1HRQ+CTS/9
XEQ0wqmahJkXU2TLugKYlnbEm5C9DSTXxsIAh640d43/WvbbEm58ZpmaaVimIwea
JXRyRsR0kI/iTQ+RdckswKt1PUXewzyU/po24vfhoH2IGc/6abslNjUnNkNVeIkq
lvj2dRJiyRFi1+XnQpDzR+n1/cPPTA2cWegAAqKwh6Cf0qTiuKOk0eZOZpCubGdn
+JETC9+3XMjqVulpHL9nWOUfqfTOASYwyhTITa5iR5JSnql4akTVTyCEHCXzRUA=
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:40:18 2025 by rpki-client