Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/Gt7TjYSx-jE_jLGTaWpaheRm-1A.roa
File: Gt7TjYSx-jE_jLGTaWpaheRm-1A.roa (raw, json)
Hash identifier: YEHwIwBQWTQA4G/Edte52ncLlFJ3fvpgOsnrL9w+qu8=
Subject key identifier: 1A:DE:D3:8D:84:B1:FA:31:3F:8C:B1:93:69:6A:5A:85:E4:66:FB:50
Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial: 018CC8015961D4CB4A042E60B675CD59270F
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/Gt7TjYSx-jE_jLGTaWpaheRm-1A.roa
Signing time: Tue 02 Jan 2024 02:29:40 +0000
ROA not before: Tue 02 Jan 2024 02:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59796
IP address blocks: 160.79.120.0/24 maxlen: 24
160.79.123.0/24 maxlen: 24
160.79.121.0/24 maxlen: 24
160.79.122.0/24 maxlen: 24
5.252.32.0/24 maxlen: 24
5.252.35.0/24 maxlen: 24
5.252.33.0/24 maxlen: 24
5.252.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:59:61:d4:cb:4a:04:2e:60:b6:75:cd:59:27:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Validity
Not Before: Jan 2 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1aded38d84b1fa313f8cb193696a5a85e466fb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:4d:08:4f:f1:22:3a:d8:39:08:77:78:4f:
40:12:8c:ae:ab:b8:46:1f:82:08:9f:ff:b4:09:5d:
70:15:12:92:81:4a:db:7d:90:84:2a:2e:eb:bf:ae:
aa:9c:08:f5:01:ed:1f:47:50:e9:b6:69:cb:32:09:
0b:91:3f:76:16:71:dc:31:10:04:dc:a8:b2:87:5c:
70:3d:b6:c6:cf:33:62:ad:de:3d:ed:27:86:34:8b:
77:0b:4d:04:80:5c:92:1b:5d:76:ef:5e:7f:d9:58:
76:81:72:7b:ed:30:58:f8:23:e5:2f:55:b1:4a:4e:
15:4f:30:8b:92:14:f5:17:c2:5d:d2:72:5f:e2:66:
b4:23:c8:02:0d:e2:9c:8e:bc:7d:ef:b1:aa:90:de:
4c:3b:c5:58:2a:02:50:28:d5:0e:3c:f9:1c:a6:1d:
41:6e:b8:d9:4d:ba:44:2e:72:be:19:cb:1d:65:4d:
79:09:18:47:f9:39:9b:f3:c5:3e:ca:d3:f2:7f:cc:
5f:91:a7:ae:59:e8:92:ea:57:e1:73:7e:4f:ea:2b:
0e:ea:f7:64:10:42:22:13:2f:60:94:b5:f4:b8:94:
60:21:0b:c1:36:cc:15:09:61:4c:5a:29:65:85:45:
67:2c:80:62:03:bb:cb:f8:38:bd:36:a0:14:0d:51:
bd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DE:D3:8D:84:B1:FA:31:3F:8C:B1:93:69:6A:5A:85:E4:66:FB:50
X509v3 Authority Key Identifier:
keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/Gt7TjYSx-jE_jLGTaWpaheRm-1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.32.0/22
160.79.120.0/22
Signature Algorithm: sha256WithRSAEncryption
32:98:d6:89:bf:79:91:5d:8a:92:5a:6e:74:de:75:14:18:9f:
66:be:77:5f:da:a6:68:ab:7f:89:8c:98:f8:64:6f:44:2e:82:
89:11:c9:b3:54:db:68:d0:04:f8:81:8d:a4:7f:d2:36:c5:59:
cc:e3:79:64:d1:a2:b9:2d:76:05:a8:26:20:7e:71:9a:49:9a:
9f:6e:c3:d4:4a:9c:4e:3d:5e:8b:e2:cb:99:29:9f:96:b0:0a:
53:57:56:8d:64:47:ee:57:f3:87:ad:31:b4:b2:58:9a:d8:0b:
13:3c:71:9d:c1:96:62:2c:13:09:14:e4:8c:29:07:a6:3a:38:
13:a2:79:eb:aa:52:b3:ff:5f:fe:1f:b9:77:eb:73:75:e2:d7:
05:28:b5:a7:3d:02:29:9a:0a:a3:75:08:33:ec:21:3a:9d:26:
11:d0:41:56:95:0c:64:52:0f:ab:4e:fc:8e:2d:bc:90:fe:fd:
fc:bc:c6:d5:f4:b1:26:37:fe:ba:95:9e:7c:9a:74:0c:c1:48:
1e:e4:5d:da:c7:16:c2:55:0c:cf:75:25:d9:6e:33:9e:4a:c8:
33:5e:45:76:65:09:49:09:fd:47:03:65:c2:96:7a:dd:ab:a9:
91:b4:b6:90:a2:c1:36:77:9c:1a:7d:24:ab:60:fc:30:80:10:
af:5b:6b:5d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzIAVlh1MtKBC5gtnXNWScPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjZiMWVmNzQxMDA3MmNlOTZlODJkNzU4MWJlNDM2ZTYz
OWE3YzQwHhcNMjQwMTAyMDIyOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWRlZDM4ZDg0YjFmYTMxM2Y4Y2IxOTM2OTZhNWE4NWU0NjZmYjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWZNCE/xIjrYOQh3eE9AEoyuq7hG
H4IIn/+0CV1wFRKSgUrbfZCEKi7rv66qnAj1Ae0fR1DptmnLMgkLkT92FnHcMRAE
3Kiyh1xwPbbGzzNird497SeGNIt3C00EgFySG112715/2Vh2gXJ77TBY+CPlL1Wx
Sk4VTzCLkhT1F8Jd0nJf4ma0I8gCDeKcjrx977GqkN5MO8VYKgJQKNUOPPkcph1B
brjZTbpELnK+GcsdZU15CRhH+Tmb88U+ytPyf8xfkaeuWeiS6lfhc35P6isO6vdk
EEIiEy9glLX0uJRgIQvBNswVCWFMWillhUVnLIBiA7vL+Di9NqAUDVG95wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBre042EsfoxP4yxk2lqWoXkZvtQMB8GA1UdIwQY
MBaAFH4mse90EAcs6W6C11gb5DbmOafEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYt
OGMzMmMzNTFlZTcwLzEvR3Q3VGpZU3gtakVfakxHVGFXcGFoZVJtLTFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYtOGMzMmMzNTFlZTcw
LzEvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCBfwgAwQC
oE94MA0GCSqGSIb3DQEBCwUAA4IBAQAymNaJv3mRXYqSWm503nUUGJ9mvndf2qZo
q3+JjJj4ZG9ELoKJEcmzVNto0AT4gY2kf9I2xVnM43lk0aK5LXYFqCYgfnGaSZqf
bsPUSpxOPV6L4suZKZ+WsApTV1aNZEfuV/OHrTG0slia2AsTPHGdwZZiLBMJFOSM
KQemOjgTonnrqlKz/1/+H7l363N14tcFKLWnPQIpmgqjdQgz7CE6nSYR0EFWlQxk
Ug+rTvyOLbyQ/v38vMbV9LEmN/66lZ58mnQMwUge5F3axxbCVQzPdSXZbjOeSsgz
XkV2ZQlJCf1HA2XClnrdq6mRtLaQosE2d5wafSSrYPwwgBCvW2td
-----END CERTIFICATE-----
Generated at Fri Jun 7 16:33:05 2024 by rpki-client on console-fra.rpki-client.org