Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/gGe0nYIlD7jJjayzwKOJVt7klS8.roa
File: gGe0nYIlD7jJjayzwKOJVt7klS8.roa (raw, json)
Hash identifier: BmV0J5rcQhabjfmYGR4QzsetfQFlQxcgd+4BQKeuJ7s=
Subject key identifier: 80:67:B4:9D:82:25:0F:B8:C9:8D:AC:B3:C0:A3:89:56:DE:E4:95:2F
Certificate issuer: /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Certificate serial: 018CC2DB0ABC045EF86D6E124B8756593CAC
Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/gGe0nYIlD7jJjayzwKOJVt7klS8.roa
Signing time: Mon 01 Jan 2024 02:29:44 +0000
ROA not before: Mon 01 Jan 2024 02:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 786
IP address blocks: 137.43.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:0a:bc:04:5e:f8:6d:6e:12:4b:87:56:59:3c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Validity
Not Before: Jan 1 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8067b49d82250fb8c98dacb3c0a38956dee4952f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3a:54:62:23:ca:c0:d5:ec:1b:61:0f:f8:cf:
0f:ed:10:b4:77:50:dc:b2:bc:58:0a:75:0d:05:d2:
cd:70:86:27:9a:4f:75:7e:ab:70:e3:17:aa:c2:60:
bc:58:90:c7:4b:d4:64:0e:02:e4:d1:4b:80:d8:1d:
f2:37:80:45:2b:a1:1d:4d:83:f9:a2:92:1f:2f:54:
c8:02:44:bb:90:be:25:78:ff:b7:3b:77:46:f2:b0:
f3:8c:d3:c9:29:16:f5:5b:f2:40:58:ab:f6:5c:92:
86:b6:1f:f3:1d:cc:70:93:46:a9:52:a0:fa:70:74:
18:3e:56:4b:9f:77:85:b6:67:b9:61:21:c1:7d:4c:
a9:53:8d:26:6a:14:38:16:7f:1b:38:cb:25:75:fc:
2c:ef:1a:f7:e8:fd:f0:3d:aa:ce:28:cd:0f:f1:83:
b6:7a:02:11:9c:94:c6:76:46:49:50:07:10:f9:cd:
fc:b2:2f:5e:d1:01:99:57:c3:07:af:f8:d4:2b:a9:
cb:ed:df:92:39:19:da:37:f0:4e:3c:53:d2:00:fd:
14:93:0a:01:d5:27:ea:bd:fb:ed:24:4a:1b:54:7b:
a7:d9:8e:3e:ff:31:b9:24:c5:0c:bd:20:d1:7d:05:
cd:98:ae:0d:60:b9:e1:93:20:8d:5f:66:5e:62:f2:
94:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:67:B4:9D:82:25:0F:B8:C9:8D:AC:B3:C0:A3:89:56:DE:E4:95:2F
X509v3 Authority Key Identifier:
keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/gGe0nYIlD7jJjayzwKOJVt7klS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c8:cf:c6:12:2a:53:fc:26:36:4f:79:b3:4e:ff:57:90:d2:f8:
3a:d2:66:c8:3e:21:f2:b6:4f:24:8d:24:c0:c9:9f:31:c9:70:
48:58:a5:5d:03:e1:6a:d1:c4:cc:ce:79:60:79:51:32:18:87:
1a:b3:7d:be:8f:8b:ba:60:cd:8e:18:f2:2c:f5:a6:6c:37:be:
78:04:ff:83:0f:68:6f:5b:7f:d2:43:48:f5:97:56:b4:e9:83:
75:13:3f:be:ed:42:9e:8e:61:3e:0d:02:75:ec:7f:42:71:47:
76:12:b5:71:4b:06:92:f7:2a:db:94:09:1c:ac:ef:87:ad:f7:
bb:d2:a6:00:c2:54:fc:95:fb:44:27:04:84:4b:f6:9e:6e:f4:
52:13:5e:56:24:b8:79:9a:98:5d:9f:ad:bd:00:68:37:55:59:
a5:bf:2e:92:2b:9f:e1:71:47:98:22:2a:ac:60:d4:09:2f:97:
6f:65:56:55:aa:cc:e6:69:59:e6:24:2b:31:bd:fc:d6:f4:68:
72:b9:10:b4:4a:89:bd:ca:84:38:d4:b8:2b:6f:3f:ee:c1:af:
f2:ed:5d:2c:8f:1e:15:60:6d:62:b5:03:b9:3e:10:9c:71:8f:
76:c4:1b:0a:b4:ba:96:26:99:ad:60:f5:87:73:2a:8f:e3:90:
2b:9c:13:3e
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYzC2wq8BF74bW4SS4dWWTysMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDQ5MzA3ODgxMmQwOWUxYTFlMGViMmEzODBmYzY1NzQ5
ODNmNWMwHhcNMjQwMTAxMDIyOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDY3YjQ5ZDgyMjUwZmI4Yzk4ZGFjYjNjMGEzODk1NmRlZTQ5NTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzpUYiPKwNXsG2EP+M8P7RC0d1Dc
srxYCnUNBdLNcIYnmk91fqtw4xeqwmC8WJDHS9RkDgLk0UuA2B3yN4BFK6EdTYP5
opIfL1TIAkS7kL4leP+3O3dG8rDzjNPJKRb1W/JAWKv2XJKGth/zHcxwk0apUqD6
cHQYPlZLn3eFtme5YSHBfUypU40mahQ4Fn8bOMsldfws7xr36P3wParOKM0P8YO2
egIRnJTGdkZJUAcQ+c38si9e0QGZV8MHr/jUK6nL7d+SORnaN/BOPFPSAP0UkwoB
1SfqvfvtJEobVHun2Y4+/zG5JMUMvSDRfQXNmK4NYLnhkyCNX2ZeYvKUuwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFIBntJ2CJQ+4yY2ss8CjiVbe5JUvMB8GA1UdIwQY
MBaAFAjUkweIEtCeGh4OsqOA/GV0mD9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lOWEzMWYtMTUzNy00MGMxLWI2MmQt
MzFhZGY2NDM5NjQzLzEvZ0dlMG5ZSWxEN2pKamF5endLT0pWdDdrbFM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lOWEzMWYtMTUzNy00MGMxLWI2MmQtMzFhZGY2NDM5NjQz
LzEvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiSswDQYJ
KoZIhvcNAQELBQADggEBAMjPxhIqU/wmNk95s07/V5DS+DrSZsg+IfK2TySNJMDJ
nzHJcEhYpV0D4WrRxMzOeWB5UTIYhxqzfb6Pi7pgzY4Y8iz1pmw3vngE/4MPaG9b
f9JDSPWXVrTpg3UTP77tQp6OYT4NAnXsf0JxR3YStXFLBpL3KtuUCRys74et97vS
pgDCVPyV+0QnBIRL9p5u9FITXlYkuHmamF2frb0AaDdVWaW/LpIrn+FxR5giKqxg
1Akvl29lVlWqzOZpWeYkKzG9/Nb0aHK5ELRKib3KhDjUuCtvP+7Br/LtXSyPHhVg
bWK1A7k+EJxxj3bEGwq0upYmma1g9YdzKo/jkCucEz4=
-----END CERTIFICATE-----
Generated at Sun May 19 15:13:17 2024 by rpki-client on console-ams.rpki-client.org