Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/gp1xZbapvGFyvqQakzaUTU1iRLE.roa
File: gp1xZbapvGFyvqQakzaUTU1iRLE.roa (raw, json)
Hash identifier: mxxxDExTEPyuAe5HYPcITpnYfPDo8XiB6X0AGQZCKV4=
Subject key identifier: 82:9D:71:65:B6:A9:BC:61:72:BE:A4:1A:93:36:94:4D:4D:62:44:B1
Certificate issuer: /CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Certificate serial: 018CC7274640AA0C216E7FF7CB08945A53E4
Authority key identifier: 26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/gp1xZbapvGFyvqQakzaUTU1iRLE.roa
Signing time: Mon 01 Jan 2024 22:31:29 +0000
ROA not before: Mon 01 Jan 2024 22:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 10991
IP address blocks: 192.113.68.0/24 maxlen: 24
192.113.67.0/24 maxlen: 24
192.113.66.0/24 maxlen: 24
192.113.65.0/24 maxlen: 24
192.113.71.0/24 maxlen: 24
192.113.70.0/24 maxlen: 24
192.113.69.0/24 maxlen: 24
192.113.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:46:40:aa:0c:21:6e:7f:f7:cb:08:94:5a:53:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Validity
Not Before: Jan 1 22:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=829d7165b6a9bc6172bea41a9336944d4d6244b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:c7:a7:6d:c6:5f:a3:50:37:a0:70:26:75:
ce:9a:b7:16:ef:f3:3b:29:07:aa:e8:76:45:2f:79:
21:06:3e:0a:fa:ed:ca:ef:a4:72:12:87:c9:a0:ef:
e5:f1:92:b8:dd:6b:dc:4d:1a:45:e2:a6:da:be:f9:
8b:ef:0b:2e:f6:bc:f3:39:4a:92:e5:db:0f:2c:4b:
1e:b1:a4:e5:f2:75:2e:2f:f3:0c:31:39:ef:7c:f8:
0b:17:3f:84:3d:1e:3f:9f:59:7d:26:cd:c7:99:8b:
50:07:94:71:dd:e8:be:a9:a7:16:6a:ab:2c:b4:c4:
0e:30:8e:f9:8b:ec:35:ef:73:74:99:39:63:2e:df:
69:55:97:37:7c:2d:26:ba:e6:60:c4:06:2a:57:a1:
41:dc:d9:39:3d:65:f3:9b:06:0f:43:33:13:15:8e:
2b:e9:7c:be:0f:80:95:d4:28:c4:8f:0f:b8:80:14:
06:10:45:1a:25:d7:26:4a:03:66:1f:bf:5b:a7:86:
4c:d9:54:bb:08:37:e1:51:57:19:fd:97:82:f3:4c:
5a:50:9c:75:a6:93:27:5c:27:b5:67:a5:df:b8:1b:
cd:8e:65:08:8b:fd:8d:f4:38:7d:a4:f0:06:87:d3:
1f:b5:1e:1c:b9:e3:26:80:55:0b:39:d5:d1:4b:32:
e8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9D:71:65:B6:A9:BC:61:72:BE:A4:1A:93:36:94:4D:4D:62:44:B1
X509v3 Authority Key Identifier:
keyid:26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/gp1xZbapvGFyvqQakzaUTU1iRLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.113.65.0-192.113.72.255
Signature Algorithm: sha256WithRSAEncryption
c1:22:c5:fc:41:cd:2b:ad:73:39:fc:e2:d5:4a:69:a0:73:69:
55:a0:9c:9a:60:15:d3:56:d8:2e:26:0a:3f:1b:a7:9a:c5:92:
02:bf:1a:94:4d:6d:7c:76:23:94:ed:8d:c9:67:6e:5d:09:a5:
df:a1:30:fc:3e:c6:29:dd:49:9b:c7:11:e6:ce:56:8b:da:61:
5d:35:fe:fc:6d:9c:71:22:3f:df:46:c1:12:b6:1d:5d:c8:9f:
7c:f0:83:ec:09:ce:61:29:64:b7:2a:18:e7:15:11:ec:3c:c3:
58:6a:25:6c:3c:34:09:a4:b7:80:40:74:e3:13:04:d6:ae:a8:
07:bf:e1:fe:06:84:65:ce:e2:15:2d:0e:6f:b2:de:10:56:83:
a2:4c:23:11:0d:1c:57:02:31:c6:8c:22:92:5d:d2:d3:fd:9e:
ae:6e:39:13:b1:47:fc:04:24:ac:31:99:47:9d:80:58:c3:2a:
61:a6:3d:38:c2:5e:7c:04:d8:69:c8:7c:70:b7:6d:05:14:75:
c2:3b:2d:55:59:e0:ab:76:9d:fa:0c:95:ff:8f:f8:29:8e:a5:
a2:ab:64:fe:56:25:1f:76:a4:13:a7:4d:ab:3f:2f:ed:e9:f0:
d5:1a:f8:ac:f9:74:11:12:36:af:c0:e1:a5:2f:02:ce:71:28:
9b:eb:dd:e9
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzHJ0ZAqgwhbn/3ywiUWlPkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YmRlYzk5ZDg5NTY1YTYzNGE3YjJjNTQwMWZlZDdhYzQ3
YmYyMzIwHhcNMjQwMTAxMjIzMTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjlkNzE2NWI2YTliYzYxNzJiZWE0MWE5MzM2OTQ0ZDRkNjI0NGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTDHp23GX6NQN6BwJnXOmrcW7/M7
KQeq6HZFL3khBj4K+u3K76RyEofJoO/l8ZK43WvcTRpF4qbavvmL7wsu9rzzOUqS
5dsPLEsesaTl8nUuL/MMMTnvfPgLFz+EPR4/n1l9Js3HmYtQB5Rx3ei+qacWaqss
tMQOMI75i+w173N0mTljLt9pVZc3fC0muuZgxAYqV6FB3Nk5PWXzmwYPQzMTFY4r
6Xy+D4CV1CjEjw+4gBQGEEUaJdcmSgNmH79bp4ZM2VS7CDfhUVcZ/ZeC80xaUJx1
ppMnXCe1Z6XfuBvNjmUIi/2N9Dh9pPAGh9MftR4cueMmgFULOdXRSzLoAQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIKdcWW2qbxhcr6kGpM2lE1NYkSxMB8GA1UdIwQY
MBaAFCa97JnYlWWmNKeyxUAf7XrEe/IyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnIzc21kaVZaYVkwcDdMRlFCX3Rlc1I3OGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jNTdkYzItY2ZhOS00MmI5LWI5Yzct
N2YyMDEyMTJkODgzLzEvZ3AxeFpiYXB2R0Z5dnFRYWt6YVVUVTFpUkxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9jNTdkYzItY2ZhOS00MmI5LWI5YzctN2YyMDEyMTJkODgz
LzEvSnIzc21kaVZaYVkwcDdMRlFCX3Rlc1I3OGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADAcUED
BADAcUgwDQYJKoZIhvcNAQELBQADggEBAMEixfxBzSutczn84tVKaaBzaVWgnJpg
FdNW2C4mCj8bp5rFkgK/GpRNbXx2I5Ttjclnbl0Jpd+hMPw+xindSZvHEebOVova
YV01/vxtnHEiP99GwRK2HV3In3zwg+wJzmEpZLcqGOcVEew8w1hqJWw8NAmkt4BA
dOMTBNauqAe/4f4GhGXO4hUtDm+y3hBWg6JMIxENHFcCMcaMIpJd0tP9nq5uOROx
R/wEJKwxmUedgFjDKmGmPTjCXnwE2GnIfHC3bQUUdcI7LVVZ4Kt2nfoMlf+P+CmO
paKrZP5WJR92pBOnTas/L+3p8NUa+Kz5dBESNq/A4aUvAs5xKJvr3ek=
-----END CERTIFICATE-----
Generated at Fri Jun 7 19:59:35 2024 by rpki-client on console-fra.rpki-client.org