Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/gVkoostddTcIbJpGaZSSJy6eoMs.roa
File: gVkoostddTcIbJpGaZSSJy6eoMs.roa (raw, json)
Hash identifier: tLdsv032zwBN3SG+EOm1yO9b3nUVIa+qdYtUAzEB2D0=
Subject key identifier: 81:59:28:A2:CB:5D:75:37:08:6C:9A:46:69:94:92:27:2E:9E:A0:CB
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 018CC26D61C0EDBEE6CBB456BB634FBCB0FA
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/gVkoostddTcIbJpGaZSSJy6eoMs.roa
Signing time: Mon 01 Jan 2024 00:29:57 +0000
ROA not before: Mon 01 Jan 2024 00:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35758
IP address blocks: 147.78.2.0/24 maxlen: 24
2a11:840:30::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:61:c0:ed:be:e6:cb:b4:56:bb:63:4f:bc:b0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Jan 1 00:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=815928a2cb5d7537086c9a46699492272e9ea0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b8:67:de:ff:c6:09:67:4d:ee:7f:ba:d9:ad:
fc:40:7a:f1:09:e6:0c:2a:cc:f9:c1:33:6e:5e:89:
a0:dc:d2:f1:cd:ea:a4:7f:91:5f:68:e4:cc:c0:97:
be:9c:e8:9c:a5:57:73:3e:fd:19:b0:c6:17:30:b9:
13:f5:6c:ff:f3:b0:96:fa:e3:62:41:af:b7:f9:02:
bb:c6:64:79:81:19:d7:a3:30:4f:d2:b6:23:77:ef:
45:50:2a:9c:39:75:c6:01:f2:2e:d4:d6:95:6c:98:
0f:32:be:47:2c:38:da:8b:4b:14:46:ed:c5:b5:dd:
20:6e:19:4c:39:c1:ad:0d:d3:ee:1e:a3:ac:8d:a5:
d7:ff:d7:41:b8:60:54:40:d5:fb:df:30:b7:37:d8:
2b:53:08:87:18:21:f2:54:43:aa:49:f0:44:32:74:
0c:e8:b1:e2:93:b4:82:55:1a:16:e9:90:35:90:13:
0a:15:90:66:54:c7:a7:86:18:a0:87:12:43:44:79:
e3:a3:ba:93:4a:f3:b8:4b:46:a0:00:7d:e9:ad:5f:
90:4a:22:81:54:18:62:8e:e5:71:c2:57:0b:76:2c:
57:7d:fe:a5:f3:12:fe:c1:f8:51:40:da:ac:c9:92:
0b:50:1c:3e:bc:e8:65:80:a5:f0:2a:85:6e:b1:a2:
fb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:59:28:A2:CB:5D:75:37:08:6C:9A:46:69:94:92:27:2E:9E:A0:CB
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/gVkoostddTcIbJpGaZSSJy6eoMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.2.0/24
IPv6:
2a11:840:30::/48
Signature Algorithm: sha256WithRSAEncryption
7d:5f:f6:78:97:1b:90:4b:2b:75:7d:f9:24:02:4f:66:22:68:
7d:06:9d:96:15:98:15:07:ce:d4:53:6e:e9:2b:ba:2b:04:7d:
dd:00:64:8f:e0:2c:4b:f9:21:40:04:ab:4d:00:32:66:5c:90:
92:b3:54:47:a5:a1:51:1a:64:a7:18:d4:f8:42:1c:48:3b:06:
36:cc:b2:26:b2:1f:c1:d8:79:1a:77:46:2e:ce:e6:12:bb:f7:
23:e2:8b:06:2d:c6:ff:bc:d9:b0:28:aa:ae:6a:dc:b8:5f:37:
23:02:02:42:e1:e9:3b:ee:47:65:e5:d1:7b:d9:d9:2f:cb:cd:
7b:ff:e2:f7:d9:03:b3:ef:c1:a8:c7:c8:c2:57:95:65:27:b6:
66:b7:2f:d8:14:f0:37:81:fa:5d:2e:a8:bb:37:59:cc:15:d4:
80:b0:3d:8d:2f:f4:15:bc:bf:fa:7e:06:8c:3e:29:4a:03:0c:
74:9c:6c:ff:51:f9:55:87:72:4a:1c:5d:d9:76:a8:a9:4c:7b:
81:8a:41:40:9a:2b:38:26:6e:ab:35:5d:b0:d7:2a:a0:61:3d:
cb:68:b7:ec:49:c4:34:24:56:ef:ac:aa:19:ad:45:4c:14:1c:
6a:5e:48:4f:4c:6e:49:a4:14:35:54:26:21:bd:55:25:78:2d:
0b:d7:08:39
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzCbWHA7b7my7RWu2NPvLD6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx
NjAwNDUwHhcNMjQwMTAxMDAyOTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTU5MjhhMmNiNWQ3NTM3MDg2YzlhNDY2OTk0OTIyNzJlOWVhMGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLhn3v/GCWdN7n+62a38QHrxCeYM
Ksz5wTNuXomg3NLxzeqkf5FfaOTMwJe+nOicpVdzPv0ZsMYXMLkT9Wz/87CW+uNi
Qa+3+QK7xmR5gRnXozBP0rYjd+9FUCqcOXXGAfIu1NaVbJgPMr5HLDjai0sURu3F
td0gbhlMOcGtDdPuHqOsjaXX/9dBuGBUQNX73zC3N9grUwiHGCHyVEOqSfBEMnQM
6LHik7SCVRoW6ZA1kBMKFZBmVMenhhighxJDRHnjo7qTSvO4S0agAH3prV+QSiKB
VBhijuVxwlcLdixXff6l8xL+wfhRQNqsyZILUBw+vOhlgKXwKoVusaL7lwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIFZKKLLXXU3CGyaRmmUkicunqDLMB8GA1UdIwQY
MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt
NTE5MjAzNzMzNTNjLzEvZ1Zrb29zdGRkVGNJYkpwR2FaU1NKeTZlb01zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj
LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAk04CMA8E
AgACMAkDBwAqEQhAADAwDQYJKoZIhvcNAQELBQADggEBAH1f9niXG5BLK3V9+SQC
T2YiaH0GnZYVmBUHztRTbukruisEfd0AZI/gLEv5IUAEq00AMmZckJKzVEeloVEa
ZKcY1PhCHEg7BjbMsiayH8HYeRp3Ri7O5hK79yPiiwYtxv+82bAoqq5q3LhfNyMC
AkLh6TvuR2Xl0XvZ2S/LzXv/4vfZA7PvwajHyMJXlWUntma3L9gU8DeB+l0uqLs3
WcwV1ICwPY0v9BW8v/p+Bow+KUoDDHScbP9R+VWHckocXdl2qKlMe4GKQUCaKzgm
bqs1XbDXKqBhPctot+xJxDQkVu+sqhmtRUwUHGpeSE9MbkmkFDVUJiG9VSV4LQvX
CDk=
-----END CERTIFICATE-----
Generated at Sat May 18 06:28:59 2024 by rpki-client on console-ams.rpki-client.org