Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/GOIB72ezfSlZwKpvCUux5Lmo21I.roa
File: GOIB72ezfSlZwKpvCUux5Lmo21I.roa (raw, json)
Hash identifier: 39JJa0QSA9d/0vjDQmceQV/VLaieey+iN0iJ2bE/SBc=
Subject key identifier: 18:E2:01:EF:67:B3:7D:29:59:C0:AA:6F:09:4B:B1:E4:B9:A8:DB:52
Certificate issuer: /CN=3b13bf822592bd1b54b77cc2c1cc42b28ccf1669
Certificate serial: 018DAC039C5165C9BB54AF9DEA8240DF48BA
Authority key identifier: 3B:13:BF:82:25:92:BD:1B:54:B7:7C:C2:C1:CC:42:B2:8C:CF:16:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxO_giWSvRtUt3zCwcxCsozPFmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/GOIB72ezfSlZwKpvCUux5Lmo21I.roa
Signing time: Thu 15 Feb 2024 09:05:34 +0000
ROA not before: Thu 15 Feb 2024 09:05:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30058
IP address blocks: 213.178.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/OxO_giWSvRtUt3zCwcxCsozPFmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/OxO_giWSvRtUt3zCwcxCsozPFmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OxO_giWSvRtUt3zCwcxCsozPFmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ac:03:9c:51:65:c9:bb:54:af:9d:ea:82:40:df:48:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b13bf822592bd1b54b77cc2c1cc42b28ccf1669
Validity
Not Before: Feb 15 09:05:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18e201ef67b37d2959c0aa6f094bb1e4b9a8db52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:ab:bc:f7:50:ad:f6:30:22:63:33:32:7b:
a9:0b:9e:a1:cc:ab:90:72:1e:1a:4d:9a:3c:43:c0:
9c:35:2c:a7:4e:2c:08:c4:90:72:87:dd:5c:35:3c:
80:25:db:fb:80:c4:6f:be:a2:55:0b:c5:40:aa:b1:
3c:d6:3f:34:ef:a0:5f:7a:56:3a:f0:b1:ad:84:c7:
13:e3:b3:5e:da:b2:e4:29:c5:19:e3:57:a0:c4:ad:
aa:26:56:00:4e:21:6a:5c:f5:c3:77:31:f8:61:83:
4b:c9:5e:57:2d:1e:6a:9e:b7:75:e6:02:0d:cc:a5:
93:84:2b:35:48:9c:5a:34:5e:11:5c:1f:96:1c:0f:
e1:12:66:02:a1:75:6f:e3:ef:9a:dd:bc:c2:19:c9:
d9:1e:93:d9:bf:2f:20:31:2c:0b:58:69:68:2c:84:
66:6e:05:22:3e:ed:2b:74:e9:72:d2:74:6a:2d:fd:
5a:58:44:e4:7f:75:8b:90:88:a5:e0:de:9d:90:ec:
a7:84:63:d0:45:c7:af:80:d8:5f:69:ab:8d:c0:a6:
ef:f4:b3:91:13:c9:53:e0:73:ee:2e:86:64:92:b7:
d2:13:e2:1c:a6:53:8c:2b:a7:df:7c:93:eb:6e:4e:
6f:e1:09:6e:96:ae:5b:7e:d3:b5:fb:95:a5:fc:25:
88:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E2:01:EF:67:B3:7D:29:59:C0:AA:6F:09:4B:B1:E4:B9:A8:DB:52
X509v3 Authority Key Identifier:
keyid:3B:13:BF:82:25:92:BD:1B:54:B7:7C:C2:C1:CC:42:B2:8C:CF:16:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxO_giWSvRtUt3zCwcxCsozPFmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/GOIB72ezfSlZwKpvCUux5Lmo21I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/OxO_giWSvRtUt3zCwcxCsozPFmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.178.142.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:54:77:19:1b:e7:c6:eb:77:b9:cf:d9:b6:c2:c1:0d:b7:29:
7b:4c:c3:d0:77:48:d7:3e:c9:28:da:62:77:f7:a3:02:ef:43:
62:af:9d:91:ab:18:63:8d:0f:0f:7a:4f:c2:8e:0b:79:50:df:
59:df:c0:b6:15:70:de:6f:cd:63:1c:54:04:82:3d:21:e1:a9:
7d:8e:02:b7:d3:f8:bf:3a:da:9a:ce:a0:fd:56:be:4f:5a:1d:
90:34:0b:cc:4a:ea:e5:3b:d8:7c:f6:bd:e8:bd:81:37:89:50:
31:b6:f6:72:be:7b:51:be:cf:12:80:4c:f0:6c:d8:12:b7:d2:
df:94:53:0b:3c:58:68:40:b0:15:18:e6:89:7a:ba:74:8c:32:
df:14:99:1f:47:f8:fe:f9:82:9e:1c:37:a5:0a:f4:6f:6d:21:
3d:2b:79:35:57:40:d5:c0:46:b9:ee:fc:50:32:78:40:5e:c5:
cb:e6:75:f5:28:c4:3b:7f:ee:da:57:23:20:35:01:45:8c:f6:
35:33:9d:db:41:9a:34:b2:87:99:d5:0f:49:2e:03:a4:41:9b:
1c:75:4d:d7:61:f7:a5:05:58:f0:1e:4b:86:55:22:0a:bb:8a:
7e:4d:29:00:c3:6b:51:14:e4:eb:bb:30:a6:03:84:b9:4a:0d:
a8:5d:fd:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2sA5xRZcm7VK+d6oJA30i6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMTNiZjgyMjU5MmJkMWI1NGI3N2NjMmMxY2M0MmIyOGNj
ZjE2NjkwHhcNMjQwMjE1MDkwNTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGUyMDFlZjY3YjM3ZDI5NTljMGFhNmYwOTRiYjFlNGI5YThkYjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNCrvPdQrfYwImMzMnupC56hzKuQ
ch4aTZo8Q8CcNSynTiwIxJByh91cNTyAJdv7gMRvvqJVC8VAqrE81j8076BfelY6
8LGthMcT47Ne2rLkKcUZ41egxK2qJlYATiFqXPXDdzH4YYNLyV5XLR5qnrd15gIN
zKWThCs1SJxaNF4RXB+WHA/hEmYCoXVv4++a3bzCGcnZHpPZvy8gMSwLWGloLIRm
bgUiPu0rdOly0nRqLf1aWETkf3WLkIil4N6dkOynhGPQRcevgNhfaauNwKbv9LOR
E8lT4HPuLoZkkrfSE+IcplOMK6fffJPrbk5v4Qlulq5bftO1+5Wl/CWIyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBjiAe9ns30pWcCqbwlLseS5qNtSMB8GA1UdIwQY
MBaAFDsTv4Ilkr0bVLd8wsHMQrKMzxZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3hPX2dpV1N2UnRVdDN6Q3djeENzb3pQRm1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9hNjQwNjEtNTJjOS00M2RjLTllZTAt
NWFmZGUyOTRkMWMyLzEvR09JQjcyZXpmU2xad0twdkNVdXg1TG1vMjFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9hNjQwNjEtNTJjOS00M2RjLTllZTAtNWFmZGUyOTRkMWMy
LzEvT3hPX2dpV1N2UnRVdDN6Q3djeENzb3pQRm1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1bKOMA0G
CSqGSIb3DQEBCwUAA4IBAQDNVHcZG+fG63e5z9m2wsENtyl7TMPQd0jXPsko2mJ3
96MC70Nir52RqxhjjQ8Pek/Cjgt5UN9Z38C2FXDeb81jHFQEgj0h4al9jgK30/i/
OtqazqD9Vr5PWh2QNAvMSurlO9h89r3ovYE3iVAxtvZyvntRvs8SgEzwbNgSt9Lf
lFMLPFhoQLAVGOaJerp0jDLfFJkfR/j++YKeHDelCvRvbSE9K3k1V0DVwEa57vxQ
MnhAXsXL5nX1KMQ7f+7aVyMgNQFFjPY1M53bQZo0soeZ1Q9JLgOkQZscdU3XYfel
BVjwHkuGVSIKu4p+TSkAw2tRFOTruzCmA4S5Sg2oXf1e
-----END CERTIFICATE-----
Generated at Wed May 1 23:18:49 2024 by rpki-client on console-ams.rpki-client.org