Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/gJg2Se-GMCUBSeTfxcdAIMwAO6s.roa
File: gJg2Se-GMCUBSeTfxcdAIMwAO6s.roa (raw, json)
Hash identifier: FTybVhHbVNRLALGCFhTIHZGMnUs1sGSaRrpV+YPR1hs=
Subject key identifier: 80:98:36:49:EF:86:30:25:01:49:E4:DF:C5:C7:40:20:CC:00:3B:AB
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01930128F414981CDC55E125B71514BF4024
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/gJg2Se-GMCUBSeTfxcdAIMwAO6s.roa
Signing time: Wed 06 Nov 2024 11:08:01 +0000
ROA not before: Wed 06 Nov 2024 11:08:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 213.21.231.0/24 maxlen: 24
213.21.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:01:28:f4:14:98:1c:dc:55:e1:25:b7:15:14:bf:40:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Nov 6 11:08:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80983649ef8630250149e4dfc5c74020cc003bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6e:97:be:98:2e:ba:1a:14:6a:37:88:d5:3e:
71:94:5a:ba:5c:01:cc:e7:fc:69:68:e9:43:62:93:
2a:4e:7d:c5:40:90:20:38:8f:7a:8a:5b:39:01:df:
90:80:f1:d2:b8:d2:a0:c6:2b:70:8a:70:c1:f1:1c:
67:40:54:d7:08:16:3d:f5:8b:54:d7:e5:3e:69:33:
3c:b6:4f:66:e4:b8:16:d7:e1:98:86:6b:8f:d8:fe:
bb:b8:95:a7:aa:ad:8e:2e:b3:a3:4a:8b:86:7e:96:
4b:c2:05:98:6b:bb:ea:ed:11:d3:a6:56:2a:bc:94:
69:44:0d:8b:d9:c7:7a:90:59:80:09:1d:9d:fc:7d:
47:cd:0c:e1:92:44:c5:c9:14:e4:bd:c9:14:a9:9d:
16:6a:8f:98:ee:7c:d0:df:be:d3:9c:29:da:24:0a:
ce:b2:e8:17:b3:3e:31:50:89:94:11:ed:13:b1:8b:
a6:03:a3:00:cf:27:e2:47:46:6c:1e:89:6d:b3:c6:
a3:19:4e:8c:ea:d0:2b:aa:fc:10:4e:9b:28:2b:e0:
7a:ae:76:e3:e0:d3:f6:f3:21:d8:39:a1:ae:40:cc:
49:1a:56:52:48:1a:83:98:44:65:be:1c:de:62:1a:
9d:5b:39:ac:b0:18:77:6b:45:fe:44:30:14:7b:4a:
8b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:98:36:49:EF:86:30:25:01:49:E4:DF:C5:C7:40:20:CC:00:3B:AB
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/gJg2Se-GMCUBSeTfxcdAIMwAO6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.231.0/24
213.21.244.0/24
Signature Algorithm: sha256WithRSAEncryption
24:1d:be:e2:91:71:f3:db:88:49:48:f9:5b:48:a9:04:b5:88:
b6:2b:08:62:62:08:74:5b:77:3e:a5:d2:f5:78:ab:25:42:65:
60:38:29:6c:0e:9d:ee:f0:83:99:46:aa:dc:e6:dc:12:dd:a7:
be:06:96:d3:62:a8:0a:e8:60:2c:27:04:fc:53:86:55:38:ec:
a5:54:35:53:f6:02:34:5a:9f:66:9e:f9:f4:f0:94:03:46:a2:
13:95:11:0c:9a:68:18:18:6a:f2:e8:17:b7:99:d6:71:c2:8b:
97:78:07:2c:52:92:7b:fc:62:9d:89:ab:87:8a:3d:b5:5f:f3:
eb:c9:40:a6:03:c3:56:b0:46:7f:1c:13:5f:9e:70:d4:b7:17:
f4:56:7f:17:81:c8:a1:28:9e:24:15:ff:f4:e7:48:5e:29:69:
51:41:06:9e:db:3e:62:6d:37:9e:4c:f1:09:77:be:c9:6f:72:
64:de:2b:17:29:3f:56:9f:94:5d:7e:6a:77:2b:8a:71:5c:1d:
27:67:4b:03:bb:43:97:43:bf:79:da:5a:f4:3a:f2:22:6d:3b:
7e:a0:41:ce:46:42:2e:fd:10:42:33:12:15:99:6e:f0:7f:f2:
f7:44:81:fb:82:b7:fa:04:e5:e2:b3:99:88:fa:ac:74:ad:79:
76:c8:2b:e1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZMBKPQUmBzcVeEltxUUv0AkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw
MmFjZDkwHhcNMjQxMTA2MTEwODAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDk4MzY0OWVmODYzMDI1MDE0OWU0ZGZjNWM3NDAyMGNjMDAzYmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG6XvpguuhoUajeI1T5xlFq6XAHM
5/xpaOlDYpMqTn3FQJAgOI96ils5Ad+QgPHSuNKgxitwinDB8RxnQFTXCBY99YtU
1+U+aTM8tk9m5LgW1+GYhmuP2P67uJWnqq2OLrOjSouGfpZLwgWYa7vq7RHTplYq
vJRpRA2L2cd6kFmACR2d/H1HzQzhkkTFyRTkvckUqZ0Wao+Y7nzQ377TnCnaJArO
sugXsz4xUImUEe0TsYumA6MAzyfiR0ZsHolts8ajGU6M6tArqvwQTpsoK+B6rnbj
4NP28yHYOaGuQMxJGlZSSBqDmERlvhzeYhqdWzmssBh3a0X+RDAUe0qLowIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFICYNknvhjAlAUnk38XHQCDMADurMB8GA1UdIwQY
MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt
MWFmMjQ2NWE4ZWVjLzEvZ0pnMlNlLUdNQ1VCU2VUZnhjZEFJTXdBTzZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj
LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1RXnAwQA
1RX0MA0GCSqGSIb3DQEBCwUAA4IBAQAkHb7ikXHz24hJSPlbSKkEtYi2KwhiYgh0
W3c+pdL1eKslQmVgOClsDp3u8IOZRqrc5twS3ae+BpbTYqgK6GAsJwT8U4ZVOOyl
VDVT9gI0Wp9mnvn08JQDRqITlREMmmgYGGry6Be3mdZxwouXeAcsUpJ7/GKdiauH
ij21X/PryUCmA8NWsEZ/HBNfnnDUtxf0Vn8XgcihKJ4kFf/050heKWlRQQae2z5i
bTeeTPEJd77Jb3Jk3isXKT9Wn5Rdfmp3K4pxXB0nZ0sDu0OXQ7952lr0OvIibTt+
oEHORkIu/RBCMxIVmW7wf/L3RIH7grf6BOXis5mI+qx0rXl2yCvh
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:31:20 2024 by rpki-client on console-ams.rpki-client.org