Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/Gl0mBqu_psPLqx5rFHJOWUfc2sY.roa
File: Gl0mBqu_psPLqx5rFHJOWUfc2sY.roa (raw, json)
Hash identifier: AkNOmv7M5fWzmVeNCcjNo+HoBXvIErGP1cHUdSW86wQ=
Subject key identifier: 1A:5D:26:06:AB:BF:A6:C3:CB:AB:1E:6B:14:72:4E:59:47:DC:DA:C6
Certificate issuer: /CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Certificate serial: 018CC649B5F96DAAC4424829C17C2C4F993A
Authority key identifier: EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/Gl0mBqu_psPLqx5rFHJOWUfc2sY.roa
Signing time: Mon 01 Jan 2024 18:29:28 +0000
ROA not before: Mon 01 Jan 2024 18:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42351
IP address blocks: 94.101.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 10:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:b5:f9:6d:aa:c4:42:48:29:c1:7c:2c:4f:99:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Validity
Not Before: Jan 1 18:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a5d2606abbfa6c3cbab1e6b14724e5947dcdac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b1:2d:42:25:06:8a:a4:34:a6:d2:6e:d9:7a:
26:c5:b5:1d:71:ff:30:c0:dc:03:0f:14:56:2d:cf:
7d:8a:36:74:31:fd:9d:f4:67:54:3e:38:02:8e:32:
d0:21:64:78:1d:ea:15:5c:7f:ae:dc:77:33:e5:31:
36:8f:fb:57:4d:5f:ed:e9:ec:f6:c8:03:8e:dc:08:
a1:07:b7:91:f3:03:d9:14:83:a8:b8:50:f0:ae:91:
df:02:c9:d2:4e:0a:c2:17:c5:79:76:6a:89:9d:1a:
be:39:84:ef:5c:c1:0a:81:b1:10:3a:0f:24:ac:ab:
12:a1:b7:83:04:75:28:78:c2:f8:a3:36:30:51:5b:
9c:2d:67:5d:9f:42:14:17:58:4a:f7:bd:14:fd:c0:
1d:df:df:f5:6e:1e:7e:f6:dd:18:32:ab:4a:a3:ed:
a5:01:5f:03:f6:23:4c:4d:82:91:e9:f0:ab:0f:c8:
92:78:3a:48:ee:35:a2:f6:42:21:1c:33:ec:d4:8c:
b7:d7:46:89:ec:b5:ec:d2:83:f2:72:6a:7d:e5:46:
a8:80:c7:f0:db:95:e6:6e:54:de:ad:32:82:a1:6b:
78:16:c7:54:78:aa:71:0b:bd:9e:cf:f0:55:5b:2b:
14:1c:85:19:c6:29:de:ab:7a:9d:0d:33:e0:98:74:
d2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5D:26:06:AB:BF:A6:C3:CB:AB:1E:6B:14:72:4E:59:47:DC:DA:C6
X509v3 Authority Key Identifier:
keyid:EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/Gl0mBqu_psPLqx5rFHJOWUfc2sY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.101.200.0/21
Signature Algorithm: sha256WithRSAEncryption
8b:6d:ba:67:36:79:8b:83:33:9d:cb:f8:6b:21:8c:25:89:c7:
3c:82:fa:57:b7:69:f7:c1:4b:bd:e7:f2:7d:08:8f:d9:d0:66:
75:e2:37:e5:00:0e:6b:c2:4f:d9:b0:2a:d7:8e:b2:ce:7b:65:
4e:87:ab:16:c9:d6:fb:51:04:47:8b:f5:a7:56:ef:01:d3:a6:
fa:84:c2:e5:d3:56:29:e7:66:da:77:a2:57:db:6c:3c:b4:2b:
0a:c9:be:be:2f:4f:da:f6:09:c3:2f:38:67:1d:ba:73:ae:db:
31:b5:3d:e7:77:ba:47:ac:36:00:73:00:92:7a:56:8b:9b:4c:
d6:1d:d9:14:d0:51:82:0e:7d:8b:9e:14:35:bb:fc:52:b0:b9:
44:d3:37:7f:5a:da:1e:c1:6b:9f:dd:ec:86:b0:c9:47:b6:ed:
a4:d4:f5:97:41:9d:49:99:a0:c8:9b:31:01:4b:c2:6d:db:d1:
c5:49:9a:e9:5e:b5:b5:f5:d8:db:ec:ea:28:b4:9e:4e:d9:97:
d0:f5:19:ed:e4:65:4d:2c:b3:02:50:9f:c5:9f:6b:bc:15:10:
19:ca:df:5e:71:0e:0f:fb:d7:c5:d9:67:82:d5:2f:3f:e6:45:
37:40:0b:f9:62:1a:4d:73:b7:06:d3:43:23:83:e6:56:91:ab:
da:1f:c3:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSbX5barEQkgpwXwsT5k6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlY2M0Y2YzNzI0MWNlZDE0NjdjOTE4YWEyNzZkMzg4YjBh
ODJlZDUwHhcNMjQwMTAxMTgyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTVkMjYwNmFiYmZhNmMzY2JhYjFlNmIxNDcyNGU1OTQ3ZGNkYWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLEtQiUGiqQ0ptJu2XomxbUdcf8w
wNwDDxRWLc99ijZ0Mf2d9GdUPjgCjjLQIWR4HeoVXH+u3Hcz5TE2j/tXTV/t6ez2
yAOO3AihB7eR8wPZFIOouFDwrpHfAsnSTgrCF8V5dmqJnRq+OYTvXMEKgbEQOg8k
rKsSobeDBHUoeML4ozYwUVucLWddn0IUF1hK970U/cAd39/1bh5+9t0YMqtKo+2l
AV8D9iNMTYKR6fCrD8iSeDpI7jWi9kIhHDPs1Iy310aJ7LXs0oPycmp95UaogMfw
25XmblTerTKCoWt4FsdUeKpxC72ez/BVWysUHIUZxineq3qdDTPgmHTSBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBpdJgarv6bDy6seaxRyTllH3NrGMB8GA1UdIwQY
MBaAFO7MTPNyQc7RRnyRiqJ204iwqC7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3N4TTgzSkJ6dEZHZkpHS29uYlRpTENvTHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jZjdkOTMtYTA3Ni00OWZmLTliYWYt
NWEzN2FmNDM5MDRjLzEvR2wwbUJxdV9wc1BMcXg1ckZISk9XVWZjMnNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9jZjdkOTMtYTA3Ni00OWZmLTliYWYtNWEzN2FmNDM5MDRj
LzEvN3N4TTgzSkJ6dEZHZkpHS29uYlRpTENvTHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXmXIMA0G
CSqGSIb3DQEBCwUAA4IBAQCLbbpnNnmLgzOdy/hrIYwlicc8gvpXt2n3wUu95/J9
CI/Z0GZ14jflAA5rwk/ZsCrXjrLOe2VOh6sWydb7UQRHi/WnVu8B06b6hMLl01Yp
52bad6JX22w8tCsKyb6+L0/a9gnDLzhnHbpzrtsxtT3nd7pHrDYAcwCSelaLm0zW
HdkU0FGCDn2LnhQ1u/xSsLlE0zd/WtoewWuf3eyGsMlHtu2k1PWXQZ1JmaDImzEB
S8Jt29HFSZrpXrW19djb7OootJ5O2ZfQ9Rnt5GVNLLMCUJ/Fn2u8FRAZyt9ecQ4P
+9fF2WeC1S8/5kU3QAv5YhpNc7cG00Mjg+ZWkavaH8Pr
-----END CERTIFICATE-----
Generated at Mon May 27 16:18:11 2024 by rpki-client on console-fra.rpki-client.org