Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/GFGZNNxYAxseye991PF7XX-tjBs.roa
File: GFGZNNxYAxseye991PF7XX-tjBs.roa (raw, json)
Hash identifier: OIEsEYbn2e7WB7j0N8x+nVcuAWE+2mqDN1wO/mqqvGg=
Subject key identifier: 18:51:99:34:DC:58:03:1B:1E:C9:EF:7D:D4:F1:7B:5D:7F:AD:8C:1B
Certificate issuer: /CN=33bb8fccc6d6ab72ba5294b09985de799ea06348
Certificate serial: 018CC56EF97531CDD3BD6BDBB64CE2C49065
Authority key identifier: 33:BB:8F:CC:C6:D6:AB:72:BA:52:94:B0:99:85:DE:79:9E:A0:63:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/GFGZNNxYAxseye991PF7XX-tjBs.roa
Signing time: Mon 01 Jan 2024 14:30:33 +0000
ROA not before: Mon 01 Jan 2024 14:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15605
IP address blocks: 92.39.149.0/24 maxlen: 24
92.39.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f9:75:31:cd:d3:bd:6b:db:b6:4c:e2:c4:90:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33bb8fccc6d6ab72ba5294b09985de799ea06348
Validity
Not Before: Jan 1 14:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18519934dc58031b1ec9ef7dd4f17b5d7fad8c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0e:fc:39:25:10:65:76:5d:c2:58:80:47:71:
3d:73:53:b5:47:cb:51:55:3c:32:d2:d5:2e:66:eb:
30:1f:8e:39:dd:1e:99:51:ff:9f:c0:1e:69:97:ca:
29:b9:ee:d4:96:d3:29:eb:e0:f6:76:2c:cf:64:63:
49:f1:19:6c:a8:f5:62:56:67:1b:79:b0:f5:7f:90:
4e:2c:58:9a:30:d2:a0:28:8b:99:aa:9e:2a:ba:7b:
58:ca:b4:62:32:77:cf:80:03:8e:41:f3:ef:e1:be:
72:f6:0b:29:ba:df:38:98:93:72:2b:58:e5:b5:a4:
21:a9:f2:dd:79:f7:73:d1:dc:60:37:f2:74:1e:aa:
64:ff:25:77:80:23:68:fe:af:50:90:97:20:c6:08:
af:14:d4:c4:83:3f:b6:26:81:47:a8:de:0c:2a:d3:
9a:72:09:ff:d2:11:25:77:b0:05:22:b2:6e:81:10:
55:c4:ed:31:26:60:6e:f6:56:0e:07:83:de:22:59:
c1:d4:73:0e:85:42:fc:f4:94:77:4c:c8:fe:91:7b:
c1:b5:fc:c7:53:de:ba:55:fb:15:ee:79:28:04:0f:
5a:ff:ff:1b:99:4e:24:99:f6:1e:f6:77:65:ea:e7:
67:8d:57:51:00:a7:35:94:8c:64:8f:23:3c:78:7c:
2f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:51:99:34:DC:58:03:1B:1E:C9:EF:7D:D4:F1:7B:5D:7F:AD:8C:1B
X509v3 Authority Key Identifier:
keyid:33:BB:8F:CC:C6:D6:AB:72:BA:52:94:B0:99:85:DE:79:9E:A0:63:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/GFGZNNxYAxseye991PF7XX-tjBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.39.149.0-92.39.150.255
Signature Algorithm: sha256WithRSAEncryption
58:1e:55:82:16:4c:6f:78:0d:09:7d:c5:63:a4:8a:0c:b0:23:
fa:b5:d2:4a:25:75:d2:f5:4f:ce:6b:81:1a:d5:40:c2:f6:62:
a2:43:8e:32:1f:d7:11:fa:8e:a2:ad:75:ed:b4:69:d4:7f:31:
57:2a:34:4a:d4:ad:dd:09:01:fb:77:c9:70:23:cd:61:bf:b1:
fe:54:4c:57:34:05:d4:ba:2d:96:84:fa:11:58:fd:1d:a7:cb:
0b:d8:06:34:63:13:da:40:38:b8:8a:f6:f7:48:52:e8:01:43:
bf:a4:4c:8a:f1:fc:5a:94:4d:d2:6b:66:26:26:84:6e:42:b7:
78:0a:47:7c:1e:c2:56:98:ec:5a:76:74:86:20:fd:00:9b:f6:
cc:ab:4a:bc:aa:b9:b4:9d:19:bc:24:50:c9:06:a9:ac:a4:93:
73:7c:84:15:77:9b:5d:4e:e8:eb:cf:27:aa:c1:a1:b6:ac:5b:
99:f9:39:13:ba:bc:ca:bc:3a:c8:1f:7b:87:2a:23:ce:95:98:
42:6b:b5:10:04:fe:ff:ba:8f:17:82:ca:53:8d:e0:cf:2b:6e:
34:fb:ac:5a:c7:fe:a3:02:2d:e0:45:b2:43:79:5a:78:e4:ae:
87:e1:25:fe:1f:4e:26:df:db:eb:d7:ac:0e:ac:7d:0b:29:6d:
75:a4:0f:86
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzFbvl1Mc3TvWvbtkzixJBlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYmI4ZmNjYzZkNmFiNzJiYTUyOTRiMDk5ODVkZTc5OWVh
MDYzNDgwHhcNMjQwMTAxMTQzMDMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODUxOTkzNGRjNTgwMzFiMWVjOWVmN2RkNGYxN2I1ZDdmYWQ4YzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6g78OSUQZXZdwliAR3E9c1O1R8tR
VTwy0tUuZuswH4453R6ZUf+fwB5pl8opue7UltMp6+D2dizPZGNJ8RlsqPViVmcb
ebD1f5BOLFiaMNKgKIuZqp4quntYyrRiMnfPgAOOQfPv4b5y9gsput84mJNyK1jl
taQhqfLdefdz0dxgN/J0Hqpk/yV3gCNo/q9QkJcgxgivFNTEgz+2JoFHqN4MKtOa
cgn/0hEld7AFIrJugRBVxO0xJmBu9lYOB4PeIlnB1HMOhUL89JR3TMj+kXvBtfzH
U966VfsV7nkoBA9a//8bmU4kmfYe9ndl6udnjVdRAKc1lIxkjyM8eHwvUwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFBhRmTTcWAMbHsnvfdTxe11/rYwbMB8GA1UdIwQY
MBaAFDO7j8zG1qtyulKUsJmF3nmeoGNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTd1UHpNYldxM0s2VXBTd21ZWGVlWjZnWTBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81NmI4OGMtYmE5NS00N2E3LThhZjgt
MTI5MDdjOTlmYTQ5LzEvR0ZHWk5OeFlBeHNleWU5OTFQRjdYWC10akJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy81NmI4OGMtYmE5NS00N2E3LThhZjgtMTI5MDdjOTlmYTQ5
LzEvTTd1UHpNYldxM0s2VXBTd21ZWGVlWjZnWTBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABcJ5UD
BABcJ5YwDQYJKoZIhvcNAQELBQADggEBAFgeVYIWTG94DQl9xWOkigywI/q10kol
ddL1T85rgRrVQML2YqJDjjIf1xH6jqKtde20adR/MVcqNErUrd0JAft3yXAjzWG/
sf5UTFc0BdS6LZaE+hFY/R2nywvYBjRjE9pAOLiK9vdIUugBQ7+kTIrx/FqUTdJr
ZiYmhG5Ct3gKR3wewlaY7Fp2dIYg/QCb9syrSryqubSdGbwkUMkGqaykk3N8hBV3
m11O6OvPJ6rBobasW5n5ORO6vMq8Osgfe4cqI86VmEJrtRAE/v+6jxeCylON4M8r
bjT7rFrH/qMCLeBFskN5WnjkrofhJf4fTibf2+vXrA6sfQspbXWkD4Y=
-----END CERTIFICATE-----
Generated at Sat Jun 8 05:51:13 2024 by rpki-client on console-fra.rpki-client.org