Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/GiHq7CoyCY1uiDowR3R7tn6d8pc.roa
File: GiHq7CoyCY1uiDowR3R7tn6d8pc.roa (raw, json)
Hash identifier: 5Jux2bagYrHNN0hEGe9B1DgAF4qxlXmIPW8VMBN2CYI=
Subject key identifier: 1A:21:EA:EC:2A:32:09:8D:6E:88:3A:30:47:74:7B:B6:7E:9D:F2:97
Certificate issuer: /CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Certificate serial: 018CC9BC8E488785B9E1DC9D3224379B9717
Authority key identifier: 6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/GiHq7CoyCY1uiDowR3R7tn6d8pc.roa
Signing time: Tue 02 Jan 2024 10:33:46 +0000
ROA not before: Tue 02 Jan 2024 10:33:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43404
IP address blocks: 77.87.200.0/21 maxlen: 24
89.23.32.0/19 maxlen: 24
2a04:17c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:8e:48:87:85:b9:e1:dc:9d:32:24:37:9b:97:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Validity
Not Before: Jan 2 10:33:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a21eaec2a32098d6e883a3047747bb67e9df297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:4f:1c:0c:c5:0b:6e:5e:7f:d0:2e:6e:81:
1a:b1:c4:70:0e:f7:4d:41:8d:46:dc:b4:31:2d:3f:
57:e5:8a:a6:90:d2:33:97:ef:1d:92:9b:fb:7a:21:
15:b5:6f:d5:71:ba:42:59:5d:cd:b9:09:e1:66:ba:
e9:77:21:b9:e8:7d:fc:d2:1e:0e:a6:98:86:33:cf:
20:66:3e:9f:8e:0b:cd:4a:e7:2b:d8:cd:64:ed:28:
c9:14:e2:e6:0a:cd:ca:03:e4:d1:17:eb:6d:29:bb:
8b:71:c8:ec:ce:1b:fd:0c:7d:35:16:b1:c4:66:36:
96:1a:85:2a:3b:7f:cb:04:da:72:ad:c5:e3:ac:c1:
a2:d6:a0:f8:7f:6b:d6:ee:dd:1b:5d:0d:df:98:27:
5c:4a:a6:80:73:c8:4f:82:8c:a6:69:5a:7f:7f:e7:
71:d8:4a:ad:7a:98:65:32:dc:a9:cb:0e:0a:d6:8b:
ae:51:14:fc:92:55:a0:f9:76:0c:ad:26:87:43:ff:
ec:85:49:08:4e:af:ba:35:03:f6:a9:f9:eb:69:c1:
47:bc:b9:3b:11:12:0d:63:7c:10:1e:38:fa:2f:97:
37:32:e0:47:a8:a7:e2:fb:39:d3:21:2b:15:f1:8e:
9b:74:45:32:cd:e5:c9:bc:2e:17:0b:c7:ea:7d:0d:
52:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:21:EA:EC:2A:32:09:8D:6E:88:3A:30:47:74:7B:B6:7E:9D:F2:97
X509v3 Authority Key Identifier:
keyid:6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/GiHq7CoyCY1uiDowR3R7tn6d8pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.200.0/21
89.23.32.0/19
IPv6:
2a04:17c0::/29
Signature Algorithm: sha256WithRSAEncryption
67:5e:82:a9:43:45:a5:5e:cb:ef:dc:21:b7:a2:ff:91:b3:db:
90:91:cf:ef:c6:3f:58:c5:73:ac:78:2d:a5:dc:43:48:3d:97:
05:4b:00:4d:8d:70:44:0c:8b:13:1e:87:d8:63:58:16:6f:1e:
b4:1d:12:91:69:62:9f:06:27:d0:ff:71:e2:cd:85:a8:bd:9f:
f5:64:03:ff:fa:09:9e:46:9f:03:50:b9:e9:9c:b7:83:67:e1:
63:29:67:a5:1d:70:50:c2:36:55:46:4e:bd:52:df:7f:13:15:
cf:a9:10:46:07:06:32:a4:07:3d:04:46:24:35:dd:fd:84:6c:
17:b4:01:c1:f9:07:99:fd:a8:73:2a:f8:68:e1:7c:48:f2:c5:
b0:6e:11:ff:0c:2b:fd:ca:06:ba:84:95:96:89:73:05:c0:e3:
a5:bb:6f:3e:b3:24:df:7e:98:b9:79:fb:74:58:a4:1e:1c:ae:
fb:3f:75:89:50:ad:92:ba:5a:c4:95:19:66:01:1c:13:ad:b8:
2c:44:d4:b0:d4:41:60:18:86:4e:91:6b:e1:10:7e:63:bb:a6:
4b:2c:68:1f:34:2e:cb:a3:d0:01:00:62:00:fa:66:19:09:06:
7c:be:3a:a3:81:10:31:0a:90:47:c1:7f:7e:49:c6:09:84:c4:
bd:77:0f:b5
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzJvI5Ih4W54dydMiQ3m5cXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZjBmODQ3ZTFhMjE2ZTc1NDNjNzUyYTYzNTBjNmJlMjNj
N2M2ZDUwHhcNMjQwMTAyMTAzMzQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTIxZWFlYzJhMzIwOThkNmU4ODNhMzA0Nzc0N2JiNjdlOWRmMjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8FPHAzFC25ef9AuboEascRwDvdN
QY1G3LQxLT9X5YqmkNIzl+8dkpv7eiEVtW/VcbpCWV3NuQnhZrrpdyG56H380h4O
ppiGM88gZj6fjgvNSucr2M1k7SjJFOLmCs3KA+TRF+ttKbuLccjszhv9DH01FrHE
ZjaWGoUqO3/LBNpyrcXjrMGi1qD4f2vW7t0bXQ3fmCdcSqaAc8hPgoymaVp/f+dx
2EqtephlMtypyw4K1ouuURT8klWg+XYMrSaHQ//shUkITq+6NQP2qfnracFHvLk7
ERINY3wQHjj6L5c3MuBHqKfi+znTISsV8Y6bdEUyzeXJvC4XC8fqfQ1SgQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBoh6uwqMgmNbog6MEd0e7Z+nfKXMB8GA1UdIwQY
MBaAFGvw+EfhohbnVDx1KmNQxr4jx8bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYV9ENFItR2lGdWRVUEhVcVkxREd2aVBIeHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lMGNkNjktZGVmZi00YzIxLWE4MDkt
Njk5OWE5OWRjZjFlLzEvR2lIcTdDb3lDWTF1aURvd1IzUjd0bjZkOHBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9lMGNkNjktZGVmZi00YzIxLWE4MDktNjk5OWE5OWRjZjFl
LzEvYV9ENFItR2lGdWRVUEhVcVkxREd2aVBIeHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDTVfIAwQF
WRcgMA0EAgACMAcDBQMqBBfAMA0GCSqGSIb3DQEBCwUAA4IBAQBnXoKpQ0WlXsvv
3CG3ov+Rs9uQkc/vxj9YxXOseC2l3ENIPZcFSwBNjXBEDIsTHofYY1gWbx60HRKR
aWKfBifQ/3HizYWovZ/1ZAP/+gmeRp8DULnpnLeDZ+FjKWelHXBQwjZVRk69Ut9/
ExXPqRBGBwYypAc9BEYkNd39hGwXtAHB+QeZ/ahzKvho4XxI8sWwbhH/DCv9yga6
hJWWiXMFwOOlu28+syTffpi5eft0WKQeHK77P3WJUK2SulrElRlmARwTrbgsRNSw
1EFgGIZOkWvhEH5ju6ZLLGgfNC7Lo9ABAGIA+mYZCQZ8vjqjgRAxCpBHwX9+ScYJ
hMS9dw+1
-----END CERTIFICATE-----
Generated at Sat Jun 1 21:16:56 2024 by rpki-client on console-ams.rpki-client.org