Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/gjBrkXqt-M5MYdvgtJBLaFWZbaA.roa
File: gjBrkXqt-M5MYdvgtJBLaFWZbaA.roa (raw, json)
Hash identifier: vNfnHgOaZKGux0a94suXIC6Y3FMoSETfiplXI7zoHLg=
Subject key identifier: 82:30:6B:91:7A:AD:F8:CE:4C:61:DB:E0:B4:90:4B:68:55:99:6D:A0
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018CC3B674A77B11A71B66772BC6C4B01F14
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/gjBrkXqt-M5MYdvgtJBLaFWZbaA.roa
Signing time: Mon 01 Jan 2024 06:29:23 +0000
ROA not before: Mon 01 Jan 2024 06:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 2a0e:e380::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:74:a7:7b:11:a7:1b:66:77:2b:c6:c4:b0:1f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 1 06:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82306b917aadf8ce4c61dbe0b4904b6855996da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:46:0d:fb:f6:a5:7c:75:d7:9c:3d:57:7f:b4:
dc:8a:64:35:95:1e:ef:25:e7:52:c0:5d:fb:a7:9d:
0f:1f:2b:20:43:6c:f4:a5:7d:d8:31:c2:ff:21:86:
89:aa:c4:0b:42:a8:d2:bf:ad:cd:fa:8b:ac:3d:61:
30:76:fe:8b:01:01:94:e6:40:74:64:01:b0:fc:02:
c8:b3:8c:da:1f:a0:4d:c7:0c:5f:1b:b3:54:b7:05:
a7:9a:3c:82:78:da:3e:9a:2b:b1:40:26:e0:e6:b5:
e7:40:ac:57:ff:5e:98:b1:15:b8:76:47:95:1e:33:
9a:a4:ae:ed:59:72:1d:f4:02:c3:3f:2a:e5:59:a4:
8d:c3:d6:40:db:3b:1f:42:c8:e1:68:a4:9a:e5:16:
87:ac:d9:fb:40:f1:6d:9b:66:98:d6:24:75:71:95:
64:e6:e0:14:72:d2:88:af:1e:a7:53:22:98:4c:06:
ad:56:52:66:5e:ac:72:e5:e9:71:41:6a:62:fd:59:
d1:21:83:32:0d:cd:64:c6:9b:8f:8e:fe:56:6f:e5:
45:37:e4:da:c8:f5:57:00:30:85:f5:64:05:2c:19:
78:ef:99:1b:a4:b1:b7:7c:44:74:03:e0:e0:be:22:
54:fe:37:7a:62:84:fd:ca:27:ad:f5:b4:56:b2:13:
be:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:30:6B:91:7A:AD:F8:CE:4C:61:DB:E0:B4:90:4B:68:55:99:6D:A0
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/gjBrkXqt-M5MYdvgtJBLaFWZbaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e380::/29
Signature Algorithm: sha256WithRSAEncryption
a2:6f:e9:61:43:71:bf:eb:37:3b:93:94:a7:d8:fe:78:62:9b:
7d:6c:06:7b:53:53:e8:b8:e7:e1:62:3b:6f:fe:16:16:b9:22:
6b:81:75:49:d3:04:b6:7e:9d:d6:35:da:0f:11:dd:d9:95:1c:
7c:5e:47:36:2f:54:60:0f:b4:fa:d0:73:eb:19:56:bc:b1:30:
8a:5f:f3:a1:62:f1:c0:21:ff:56:f3:8f:f4:c3:be:2d:da:7e:
a0:0d:d5:af:55:15:cb:94:0f:0d:21:41:8a:c4:e5:b6:e3:14:
74:9c:13:1c:b7:60:72:e3:90:e2:7e:2c:1c:b1:33:3e:29:f8:
63:b8:95:a9:d3:e2:59:6f:7b:29:72:e9:b4:63:66:28:fe:11:
93:fa:06:d7:73:98:85:ec:a6:ec:a5:51:09:62:37:19:6f:eb:
7a:26:f5:04:fe:82:5a:57:70:a8:28:11:b4:bf:76:b4:ee:0f:
26:92:c7:e4:3b:9a:b6:cc:61:da:ed:8f:52:10:d7:ca:77:46:
fe:55:08:e6:1f:46:c3:50:97:5c:61:1c:26:2f:a6:7a:0a:c5:
b7:5b:3d:f8:97:4b:6b:de:47:0b:05:19:54:15:ff:a6:5e:46:
06:48:2d:51:50:92:58:70:76:78:9a:43:ec:58:30:30:a5:7d:
e2:32:e3:f2
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzDtnSnexGnG2Z3K8bEsB8UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk
YTEzNzAwHhcNMjQwMTAxMDYyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjMwNmI5MTdhYWRmOGNlNGM2MWRiZTBiNDkwNGI2ODU1OTk2ZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkYN+/alfHXXnD1Xf7TcimQ1lR7v
JedSwF37p50PHysgQ2z0pX3YMcL/IYaJqsQLQqjSv63N+ousPWEwdv6LAQGU5kB0
ZAGw/ALIs4zaH6BNxwxfG7NUtwWnmjyCeNo+miuxQCbg5rXnQKxX/16YsRW4dkeV
HjOapK7tWXId9ALDPyrlWaSNw9ZA2zsfQsjhaKSa5RaHrNn7QPFtm2aY1iR1cZVk
5uAUctKIrx6nUyKYTAatVlJmXqxy5elxQWpi/VnRIYMyDc1kxpuPjv5Wb+VFN+Ta
yPVXADCF9WQFLBl475kbpLG3fER0A+DgviJU/jd6YoT9yiet9bRWshO+OQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFIIwa5F6rfjOTGHb4LSQS2hVmW2gMB8GA1UdIwQY
MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt
NjA4MDk1MmYwZTA0LzEvZ2pCcmtYcXQtTTVNWWR2Z3RKQkxhRldaYmFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0
LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg7jgDAN
BgkqhkiG9w0BAQsFAAOCAQEAom/pYUNxv+s3O5OUp9j+eGKbfWwGe1NT6Ljn4WI7
b/4WFrkia4F1SdMEtn6d1jXaDxHd2ZUcfF5HNi9UYA+0+tBz6xlWvLEwil/zoWLx
wCH/VvOP9MO+Ldp+oA3Vr1UVy5QPDSFBisTltuMUdJwTHLdgcuOQ4n4sHLEzPin4
Y7iVqdPiWW97KXLptGNmKP4Rk/oG13OYheym7KVRCWI3GW/reib1BP6CWldwqCgR
tL92tO4PJpLH5Duatsxh2u2PUhDXyndG/lUI5h9Gw1CXXGEcJi+megrFt1s9+JdL
a95HCwUZVBX/pl5GBkgtUVCSWHB2eJpD7FgwMKV94jLj8g==
-----END CERTIFICATE-----
Generated at Sat May 4 04:46:31 2024 by rpki-client on console-ams.rpki-client.org