Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/G4ViZ7QcHaevGziZ_SFw1Iwe-Sg.roa
File: G4ViZ7QcHaevGziZ_SFw1Iwe-Sg.roa (raw, json)
Hash identifier: poXtEgXJqflBcy6KTYhHPFWt0CoAEAKT5p3PWFu6t+g=
Subject key identifier: 1B:85:62:67:B4:1C:1D:A7:AF:1B:38:99:FD:21:70:D4:8C:1E:F9:28
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B9357B14B02CC753242EA3D6C457F4
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/G4ViZ7QcHaevGziZ_SFw1Iwe-Sg.roa
Signing time: Mon 01 Jan 2024 20:31:15 +0000
ROA not before: Mon 01 Jan 2024 20:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42049
IP address blocks: 85.187.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:35:7b:14:b0:2c:c7:53:24:2e:a3:d6:c4:57:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b856267b41c1da7af1b3899fd2170d48c1ef928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:b2:ec:55:10:3d:65:65:88:5e:f9:24:a0:
5d:9c:14:1b:ad:99:f2:c6:6a:39:79:78:ac:e1:e1:
55:68:19:93:9a:c6:20:37:2d:f6:52:1d:07:ca:44:
a8:ab:2d:b6:38:f9:37:ca:a6:fa:0e:f5:51:23:9a:
0b:aa:ec:0d:e1:04:b4:92:c0:be:9b:70:10:34:84:
d4:1d:ee:bb:52:93:37:2b:c8:1e:aa:04:f2:f0:8b:
85:b5:dd:43:c1:76:a4:28:4f:21:97:26:9d:f7:ae:
13:a1:7e:cb:f2:cb:d0:f4:16:58:a4:2e:69:fa:c7:
c9:aa:61:85:b5:85:a0:40:37:b4:b7:c4:80:e7:32:
d0:cd:83:3e:2b:c0:f1:fd:8d:62:bb:08:6c:d9:c1:
4b:4f:5c:f2:dc:e6:9e:42:73:71:53:41:35:4b:b9:
35:6e:fa:f9:d2:2f:aa:41:53:46:9e:4f:17:8e:8d:
39:78:00:c6:37:f3:1e:7e:75:66:6c:07:2e:b9:2b:
82:4a:cb:d2:9c:51:9b:94:36:03:0a:67:db:4c:75:
bc:ae:37:20:d5:da:2c:15:69:b6:d9:51:c6:8b:83:
07:18:b0:d9:bd:8b:fb:85:ea:45:3f:1e:03:c4:f5:
53:2a:14:7c:d0:1b:ed:d3:61:51:28:c1:1c:3d:e4:
20:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:85:62:67:B4:1C:1D:A7:AF:1B:38:99:FD:21:70:D4:8C:1E:F9:28
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/G4ViZ7QcHaevGziZ_SFw1Iwe-Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.41.0/24
Signature Algorithm: sha256WithRSAEncryption
29:fa:ef:f5:3a:5c:cc:45:d0:3d:6d:69:89:7b:90:2b:0c:a5:
b6:36:29:c6:b7:89:6d:ac:81:df:0b:a2:e0:ae:23:ee:4c:f9:
d0:44:56:8e:55:78:43:0c:94:5e:35:44:77:58:62:1c:8e:8f:
ec:62:41:79:e7:7b:52:e4:32:6e:28:aa:2a:20:a5:fa:f0:a6:
22:ef:63:a2:6e:dc:7b:eb:c7:36:0a:41:92:d8:a9:b0:9b:37:
fc:54:b1:53:78:1f:28:17:93:25:5b:e7:14:e3:39:db:2c:fe:
97:17:38:a8:f2:b2:75:5e:b5:4b:4c:c3:b6:13:70:9e:c2:30:
74:4e:39:dc:56:94:3b:97:4c:44:d7:ae:18:88:a3:29:98:9c:
60:72:6f:d2:02:51:7e:f2:1c:dc:de:0d:b0:70:a2:73:7d:8c:
1f:f9:f0:44:bd:0d:1e:90:50:92:69:6c:9c:e5:42:cc:df:17:
2c:4d:35:4c:70:90:e7:77:10:1a:c1:90:bf:9f:27:a0:2e:f6:
a9:ec:4e:e6:2e:03:d4:d4:45:80:08:4e:7e:b2:e1:c7:df:1a:
d5:5c:6a:a4:fe:cc:c3:de:54:4c:0f:d3:f0:22:1f:92:0a:df:
2e:75:f3:35:45:b1:06:69:43:9b:d9:79:05:12:0d:96:a7:81:
dc:3c:2c:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuTV7FLAsx1MkLqPWxFf0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjQwMTAxMjAzMTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjg1NjI2N2I0MWMxZGE3YWYxYjM4OTlmZDIxNzBkNDhjMWVmOTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8Ky7FUQPWVliF75JKBdnBQbrZny
xmo5eXis4eFVaBmTmsYgNy32Uh0HykSoqy22OPk3yqb6DvVRI5oLquwN4QS0ksC+
m3AQNITUHe67UpM3K8geqgTy8IuFtd1DwXakKE8hlyad964ToX7L8svQ9BZYpC5p
+sfJqmGFtYWgQDe0t8SA5zLQzYM+K8Dx/Y1iuwhs2cFLT1zy3OaeQnNxU0E1S7k1
bvr50i+qQVNGnk8Xjo05eADGN/MefnVmbAcuuSuCSsvSnFGblDYDCmfbTHW8rjcg
1dosFWm22VHGi4MHGLDZvYv7hepFPx4DxPVTKhR80Bvt02FRKMEcPeQgEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBuFYme0HB2nrxs4mf0hcNSMHvkoMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvRzRWaVo3UWNIYWV2R3ppWl9TRncxSXdlLVNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVbspMA0G
CSqGSIb3DQEBCwUAA4IBAQAp+u/1OlzMRdA9bWmJe5ArDKW2NinGt4ltrIHfC6Lg
riPuTPnQRFaOVXhDDJReNUR3WGIcjo/sYkF553tS5DJuKKoqIKX68KYi72Oibtx7
68c2CkGS2Kmwmzf8VLFTeB8oF5MlW+cU4znbLP6XFzio8rJ1XrVLTMO2E3CewjB0
TjncVpQ7l0xE164YiKMpmJxgcm/SAlF+8hzc3g2wcKJzfYwf+fBEvQ0ekFCSaWyc
5ULM3xcsTTVMcJDndxAawZC/nyegLvap7E7mLgPU1EWACE5+suHH3xrVXGqk/szD
3lRMD9PwIh+SCt8udfM1RbEGaUOb2XkFEg2Wp4HcPCw3
-----END CERTIFICATE-----
Generated at Fri Jun 7 14:15:45 2024 by rpki-client on console-ams.rpki-client.org