Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/GsmXCNsbmv7pFV4tegohlrC1FhA.roa
File: GsmXCNsbmv7pFV4tegohlrC1FhA.roa (raw, json)
Hash identifier: D0oq93A9HDB7U3Se1yjEbCBKUTUJUUqY7JFxo8QOvGU=
Subject key identifier: 1A:C9:97:08:DB:1B:9A:FE:E9:15:5E:2D:7A:0A:21:96:B0:B5:16:10
Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Certificate serial: 018CC26CF3464FB37428DF8C3FF1594ECF0D
Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/GsmXCNsbmv7pFV4tegohlrC1FhA.roa
Signing time: Mon 01 Jan 2024 00:29:29 +0000
ROA not before: Mon 01 Jan 2024 00:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201935
IP address blocks: 81.85.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f3:46:4f:b3:74:28:df:8c:3f:f1:59:4e:cf:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Validity
Not Before: Jan 1 00:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ac99708db1b9afee9155e2d7a0a2196b0b51610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dc:d7:35:7e:34:57:b3:b2:a0:1a:53:73:44:
26:f8:4a:2b:f3:c3:7f:4a:d8:3b:1c:43:c5:7d:69:
95:3f:68:49:4a:14:22:5d:f6:8c:b8:b4:b5:40:30:
94:6b:1a:22:56:a6:29:18:82:8d:ed:3d:b3:60:d9:
ff:51:58:93:26:90:7a:e5:a3:df:9c:55:b2:52:6d:
7a:53:e9:52:f2:bd:19:8e:ac:9c:16:07:14:15:e6:
b9:15:6d:ff:3f:ee:64:99:8d:04:77:67:02:7c:1e:
3a:80:dd:df:58:4d:8f:1b:b9:74:e8:d2:11:4a:48:
8b:f0:6a:58:44:54:ac:fb:f0:d5:d1:79:a1:f7:03:
c1:4c:27:3b:9b:6f:45:12:54:3e:95:ad:d7:51:d8:
ed:00:75:59:4b:45:34:18:74:3f:e8:09:b0:b9:37:
64:25:49:f4:24:d3:9a:81:cb:02:fb:45:dd:2c:da:
86:97:02:b1:30:9a:f8:53:1f:f2:86:ee:75:d2:7d:
9b:71:15:d2:76:ce:be:3b:63:f0:4e:85:1a:db:fd:
08:81:9d:c0:63:0b:ba:5e:0a:a2:27:5a:17:a7:3d:
b4:0f:28:ba:72:ca:dd:1c:5c:72:07:91:9c:9c:dc:
f7:1f:47:ab:da:89:d9:1e:29:57:31:d5:cf:19:41:
73:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C9:97:08:DB:1B:9A:FE:E9:15:5E:2D:7A:0A:21:96:B0:B5:16:10
X509v3 Authority Key Identifier:
keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/GsmXCNsbmv7pFV4tegohlrC1FhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.85.167.0/24
Signature Algorithm: sha256WithRSAEncryption
32:a1:09:db:8b:e3:18:9a:ea:3f:40:96:05:67:b4:ab:32:64:
2a:b8:f1:ec:b8:19:ce:5e:97:ba:c4:89:0e:3b:76:7c:5b:db:
71:83:65:3d:93:bb:07:4e:33:d7:a3:c9:83:89:d1:f7:d2:bc:
3f:cb:71:8e:8d:c4:fb:4a:e4:25:c2:60:cc:ce:f9:b6:46:2d:
e4:fd:09:45:2d:b3:35:00:be:9f:28:4a:11:16:c7:a7:c0:8c:
5c:7d:64:33:33:36:17:05:80:63:98:37:95:f7:14:86:39:1d:
48:79:b8:de:5c:b7:cf:57:00:c4:f2:a2:e6:3b:94:a0:86:13:
27:24:af:b5:fe:e0:ce:bf:0e:47:9b:61:1e:75:d5:33:25:7a:
8e:0d:f8:cf:9e:cb:06:5b:ff:f9:99:ee:0b:22:4a:8a:99:b8:
05:eb:f4:12:5c:29:e6:19:38:9d:93:48:c7:2b:e1:54:d2:08:
8e:cf:44:a6:78:0e:bf:0c:86:4a:eb:60:8a:ff:90:9e:33:de:
1d:02:e1:fc:c8:71:e8:e0:05:6e:20:d7:10:fc:11:15:08:ae:
23:0d:fc:e0:0b:8e:ed:5a:f1:f8:26:8a:4a:7b:a7:39:95:bc:
22:71:1a:26:9b:b7:9f:d7:dd:ea:19:e5:d5:da:86:34:d7:99:
74:76:21:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbPNGT7N0KN+MP/FZTs8NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZjZhMzAwYmY3ZDQwYjdmOGQ2MTgxYzViOGE3ZGJjNzFi
N2QxMjMwHhcNMjQwMTAxMDAyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWM5OTcwOGRiMWI5YWZlZTkxNTVlMmQ3YTBhMjE5NmIwYjUxNjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09zXNX40V7OyoBpTc0Qm+Eor88N/
Stg7HEPFfWmVP2hJShQiXfaMuLS1QDCUaxoiVqYpGIKN7T2zYNn/UViTJpB65aPf
nFWyUm16U+lS8r0ZjqycFgcUFea5FW3/P+5kmY0Ed2cCfB46gN3fWE2PG7l06NIR
SkiL8GpYRFSs+/DV0Xmh9wPBTCc7m29FElQ+la3XUdjtAHVZS0U0GHQ/6AmwuTdk
JUn0JNOagcsC+0XdLNqGlwKxMJr4Ux/yhu510n2bcRXSds6+O2PwToUa2/0IgZ3A
Ywu6XgqiJ1oXpz20Dyi6csrdHFxyB5GcnNz3H0er2onZHilXMdXPGUFz2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBrJlwjbG5r+6RVeLXoKIZawtRYQMB8GA1UdIwQY
MBaAFCn2owC/fUC3+NYYHFuKfbxxt9EjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hYWY0OWMtODNkZC00NmFhLThjZTct
Yjg0YzQxM2RmYWE0LzEvR3NtWENOc2JtdjdwRlY0dGVnb2hsckMxRmhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9hYWY0OWMtODNkZC00NmFhLThjZTctYjg0YzQxM2RmYWE0
LzEvS2ZhakFMOTlRTGY0MWhnY1c0cDl2SEczMFNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUVWnMA0G
CSqGSIb3DQEBCwUAA4IBAQAyoQnbi+MYmuo/QJYFZ7SrMmQquPHsuBnOXpe6xIkO
O3Z8W9txg2U9k7sHTjPXo8mDidH30rw/y3GOjcT7SuQlwmDMzvm2Ri3k/QlFLbM1
AL6fKEoRFsenwIxcfWQzMzYXBYBjmDeV9xSGOR1IebjeXLfPVwDE8qLmO5SghhMn
JK+1/uDOvw5Hm2EeddUzJXqODfjPnssGW//5me4LIkqKmbgF6/QSXCnmGTidk0jH
K+FU0giOz0SmeA6/DIZK62CK/5CeM94dAuH8yHHo4AVuINcQ/BEVCK4jDfzgC47t
WvH4JopKe6c5lbwicRomm7ef193qGeXV2oY015l0diFx
-----END CERTIFICATE-----
Generated at Fri Jun 7 16:48:32 2024 by rpki-client on console-fra.rpki-client.org