Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/G8xVQcrD5QrGP9aVEcad3A8FEZA.roa
File: G8xVQcrD5QrGP9aVEcad3A8FEZA.roa (raw, json)
Hash identifier: z4/eBRl+VkAI6lZTWlfegNoE4PApf0zVoOGYcMJHAY0=
Subject key identifier: 1B:CC:55:41:CA:C3:E5:0A:C6:3F:D6:95:11:C6:9D:DC:0F:05:11:90
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B93C2A74B99157F0833F6B6A373F02
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/G8xVQcrD5QrGP9aVEcad3A8FEZA.roa
Signing time: Mon 01 Jan 2024 20:31:17 +0000
ROA not before: Mon 01 Jan 2024 20:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61112
IP address blocks: 91.229.132.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:3c:2a:74:b9:91:57:f0:83:3f:6b:6a:37:3f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bcc5541cac3e50ac63fd69511c69ddc0f051190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:22:2a:0d:e1:62:1d:67:0b:ea:86:33:98:a5:
c2:12:70:51:72:1d:2c:06:6b:da:fc:c9:b4:88:35:
2c:5f:18:a1:c4:e9:bf:6f:7f:b4:e7:ad:40:47:62:
c8:9d:81:47:c7:c6:be:e7:8f:31:5b:46:45:15:93:
bc:ec:67:87:ba:c7:3c:55:e8:ec:28:1e:29:05:6f:
42:ed:aa:3d:11:68:76:b6:3e:12:16:a9:ac:0b:8f:
d5:c1:2b:1a:80:49:dc:1a:e2:9b:4f:23:12:24:2a:
de:8c:1d:2a:c6:6e:d9:1b:54:c9:c4:bb:9f:34:e4:
03:65:d6:3b:d9:ab:11:a7:e0:f7:c7:45:d5:cc:05:
01:9e:49:91:ab:dd:87:6f:e5:87:9c:c8:d1:72:6b:
40:38:3b:8a:de:9d:82:9a:06:29:b3:da:6b:17:9f:
2a:a8:d3:dc:15:6f:e9:f1:27:a1:13:22:4f:26:21:
5b:18:c6:5c:02:41:86:e7:bf:f3:8a:05:83:d5:88:
b3:71:8a:2d:56:f0:eb:4e:19:bb:83:af:7f:9d:8a:
75:3f:4c:23:02:b2:d6:c6:7c:94:0e:3a:82:f9:c2:
f8:ee:f6:04:a0:59:f9:4a:0e:fe:a1:14:14:56:f6:
6b:75:c6:4a:28:87:9c:a7:b2:35:0d:dc:db:03:a4:
59:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CC:55:41:CA:C3:E5:0A:C6:3F:D6:95:11:C6:9D:DC:0F:05:11:90
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/G8xVQcrD5QrGP9aVEcad3A8FEZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.132.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:30:75:2b:56:31:ef:a7:e7:52:8b:58:33:92:12:bd:f0:d4:
87:79:63:27:6b:2f:20:26:ac:73:81:41:d0:db:8b:82:a9:92:
a3:d2:9d:c5:a9:9b:82:16:9e:62:48:23:16:8b:be:37:44:9a:
eb:a4:ae:8a:fe:f0:4a:ae:2f:2b:6e:de:26:71:78:e3:80:69:
2f:0e:69:86:e0:dc:aa:64:93:dc:a6:ee:e4:76:b0:63:6b:d0:
2c:10:62:f6:dc:c2:ce:c6:c1:d6:7a:b1:f8:e6:ad:9b:ce:25:
90:10:38:4c:49:d8:11:d5:3a:a2:47:bf:7b:c9:2c:79:86:23:
a6:6b:49:48:1f:66:bf:72:f4:cb:d8:ec:86:92:b6:2e:d2:1e:
c2:97:1a:61:2b:8b:9f:0b:d7:d7:9b:ed:b7:e7:2c:fd:93:92:
55:f1:c1:1f:3d:69:14:bb:ae:96:16:2c:77:a9:05:20:f8:e3:
4a:cf:16:22:01:ec:db:16:49:ce:23:12:8e:23:83:8a:81:8a:
61:31:e7:15:ff:d2:3e:3d:63:57:e2:38:63:a4:34:a0:c8:6d:
cc:f7:88:46:93:4b:0a:29:3f:24:3c:33:8d:07:6f:1b:1f:ff:
15:31:61:19:8d:54:fe:4a:43:ed:91:64:d2:4c:6f:ad:09:c3:
e9:93:7c:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuTwqdLmRV/CDP2tqNz8CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjQwMTAxMjAzMTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmNjNTU0MWNhYzNlNTBhYzYzZmQ2OTUxMWM2OWRkYzBmMDUxMTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiIqDeFiHWcL6oYzmKXCEnBRch0s
Bmva/Mm0iDUsXxihxOm/b3+0561AR2LInYFHx8a+548xW0ZFFZO87GeHusc8Vejs
KB4pBW9C7ao9EWh2tj4SFqmsC4/VwSsagEncGuKbTyMSJCrejB0qxm7ZG1TJxLuf
NOQDZdY72asRp+D3x0XVzAUBnkmRq92Hb+WHnMjRcmtAODuK3p2CmgYps9prF58q
qNPcFW/p8SehEyJPJiFbGMZcAkGG57/zigWD1YizcYotVvDrThm7g69/nYp1P0wj
ArLWxnyUDjqC+cL47vYEoFn5Sg7+oRQUVvZrdcZKKIecp7I1DdzbA6RZNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBvMVUHKw+UKxj/WlRHGndwPBRGQMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvRzh4VlFjckQ1UXJHUDlhVkVjYWQzQThGRVpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+WEMA0G
CSqGSIb3DQEBCwUAA4IBAQCPMHUrVjHvp+dSi1gzkhK98NSHeWMnay8gJqxzgUHQ
24uCqZKj0p3FqZuCFp5iSCMWi743RJrrpK6K/vBKri8rbt4mcXjjgGkvDmmG4Nyq
ZJPcpu7kdrBja9AsEGL23MLOxsHWerH45q2bziWQEDhMSdgR1TqiR797ySx5hiOm
a0lIH2a/cvTL2OyGkrYu0h7ClxphK4ufC9fXm+235yz9k5JV8cEfPWkUu66WFix3
qQUg+ONKzxYiAezbFknOIxKOI4OKgYphMecV/9I+PWNX4jhjpDSgyG3M94hGk0sK
KT8kPDONB28bH/8VMWEZjVT+SkPtkWTSTG+tCcPpk3zo
-----END CERTIFICATE-----
Generated at Wed May 29 04:41:44 2024 by rpki-client on console-ams.rpki-client.org