Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/GiKL1IE_mUkkfOyepajyr3t4SN0.roa
File: GiKL1IE_mUkkfOyepajyr3t4SN0.roa (raw, json)
Hash identifier: QtPIMjDDUb1CO2pdZnn64xAaHg8IZiwD9eqbZd0AaEo=
Subject key identifier: 1A:22:8B:D4:81:3F:99:49:24:7C:EC:9E:A5:A8:F2:AF:7B:78:48:DD
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 018CC9BBD782F8050052753544C30ADF0602
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/GiKL1IE_mUkkfOyepajyr3t4SN0.roa
Signing time: Tue 02 Jan 2024 10:32:59 +0000
ROA not before: Tue 02 Jan 2024 10:32:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 217.30.89.0/24 maxlen: 24
2a10:eec0:80::/41 maxlen: 41
2a10:eec0:40::/42 maxlen: 42
2a10:eec0:400::/38 maxlen: 38
2a10:eec0:2000::/35 maxlen: 35
2a10:eec0:1000::/36 maxlen: 36
2a10:eec0:8000::/33 maxlen: 33
2a10:eec0:4000::/34 maxlen: 34
2a10:eec0:200::/39 maxlen: 39
2a10:eec0:100::/40 maxlen: 40
2a10:eec0:800::/37 maxlen: 37
2a10:eec0:e::/47 maxlen: 47
2a10:eec0:20::/43 maxlen: 43
2a10:eec0:d::/48 maxlen: 48
2a10:eec0:10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:d7:82:f8:05:00:52:75:35:44:c3:0a:df:06:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 2 10:32:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a228bd4813f9949247cec9ea5a8f2af7b7848dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:78:a4:3c:2c:3c:d6:0f:80:95:b7:ab:39:45:
e9:e8:20:e9:e7:bc:60:38:57:a9:30:44:12:52:93:
86:b1:c1:2b:ce:7a:31:15:a7:08:9f:21:fb:b2:7b:
85:83:ed:4e:c9:d5:e5:f3:f4:c2:d2:34:c3:ba:da:
62:29:04:70:4a:8d:20:fb:f1:34:62:b6:ca:46:3f:
f5:47:c2:45:03:be:f2:b3:82:d7:fd:bd:16:59:38:
e0:1c:81:81:cc:fb:31:ec:e2:a1:ec:8d:93:a4:df:
be:2e:69:57:9a:98:32:7a:d6:76:4a:c0:46:e9:22:
7e:8a:17:e5:7b:7f:b9:89:9c:a7:bf:bd:74:e5:55:
32:98:53:09:c8:b7:a0:6a:64:33:37:c8:7f:6f:f0:
80:c3:06:4a:73:0e:fb:25:fc:83:23:57:36:14:ae:
38:df:2b:9e:4a:30:f7:df:e1:31:63:fa:7f:60:56:
bb:5b:4e:a9:cf:0b:12:d3:31:3e:fe:c5:d0:f0:21:
4b:2c:8a:f0:81:cd:49:31:84:ab:89:c6:a5:38:f5:
79:a0:6a:0a:fc:23:af:80:7a:06:38:e7:2c:55:72:
79:ea:79:44:be:6b:be:47:e5:2a:da:8a:9f:8f:d9:
05:dd:97:53:bf:52:00:15:40:54:20:e8:3d:3e:a0:
6f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:22:8B:D4:81:3F:99:49:24:7C:EC:9E:A5:A8:F2:AF:7B:78:48:DD
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/GiKL1IE_mUkkfOyepajyr3t4SN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.30.89.0/24
IPv6:
2a10:eec0:d::-2a10:eec0:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ad:62:13:56:ad:ca:5c:7e:41:78:24:73:dc:f2:cd:0f:3a:50:
75:50:9d:4c:fa:63:29:ba:bd:e3:ba:90:fd:4c:59:97:4c:08:
f1:17:92:ce:f8:9d:2a:98:3a:98:77:cb:a0:1f:d0:d8:a5:bc:
f2:48:45:4d:e8:a5:22:c5:98:ed:97:2d:4c:bc:d4:45:60:fd:
45:e5:f4:74:6c:1d:18:63:f0:3e:ea:a0:6a:70:0a:14:8e:55:
2b:14:9d:25:09:ce:a3:88:d9:7d:b7:4d:d9:c3:1b:15:53:62:
bf:6d:b4:36:24:04:b9:a3:c7:7a:3f:31:e9:99:c5:f8:c2:b9:
42:d2:ee:09:85:aa:f8:83:ac:a1:f1:f7:40:d5:c2:c8:48:0d:
5c:60:38:fb:9e:f4:b3:12:0c:e7:28:2b:f1:7d:8b:01:e2:90:
3e:32:1f:eb:b7:47:bc:7f:e7:80:7c:d1:87:93:28:ed:83:ad:
d0:10:f1:d6:34:63:35:bb:5c:85:89:ca:62:c9:23:6b:2a:85:
95:4f:1e:65:26:3c:c8:b5:1e:2b:77:78:e2:cf:49:8b:c2:ff:
15:6b:17:91:3c:9f:1b:36:32:13:09:85:4b:78:e5:fc:49:73:
60:2e:27:ab:00:03:58:52:9c:2a:bf:54:b1:09:d2:a4:07:a6:
63:d6:56:f5
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYzJu9eC+AUAUnU1RMMK3wYCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQwMTAyMTAzMjU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTIyOGJkNDgxM2Y5OTQ5MjQ3Y2VjOWVhNWE4ZjJhZjdiNzg0OGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXikPCw81g+AlberOUXp6CDp57xg
OFepMEQSUpOGscErznoxFacInyH7snuFg+1OydXl8/TC0jTDutpiKQRwSo0g+/E0
YrbKRj/1R8JFA77ys4LX/b0WWTjgHIGBzPsx7OKh7I2TpN++LmlXmpgyetZ2SsBG
6SJ+ihfle3+5iZynv7105VUymFMJyLegamQzN8h/b/CAwwZKcw77JfyDI1c2FK44
3yueSjD33+ExY/p/YFa7W06pzwsS0zE+/sXQ8CFLLIrwgc1JMYSricalOPV5oGoK
/COvgHoGOOcsVXJ56nlEvmu+R+Uq2oqfj9kF3ZdTv1IAFUBUIOg9PqBv/wIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFBoii9SBP5lJJHzsnqWo8q97eEjdMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvR2lLTDFJRV9tVWtrZk95ZXBhanlyM3Q0U04wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQA2R5ZMBgE
AgACMBIwEAMHACoQ7sAADQMFACoQ7sAwDQYJKoZIhvcNAQELBQADggEBAK1iE1at
ylx+QXgkc9zyzQ86UHVQnUz6Yym6veO6kP1MWZdMCPEXks74nSqYOph3y6Af0Nil
vPJIRU3opSLFmO2XLUy81EVg/UXl9HRsHRhj8D7qoGpwChSOVSsUnSUJzqOI2X23
TdnDGxVTYr9ttDYkBLmjx3o/MemZxfjCuULS7gmFqviDrKHx90DVwshIDVxgOPue
9LMSDOcoK/F9iwHikD4yH+u3R7x/54B80YeTKO2DrdAQ8dY0YzW7XIWJymLJI2sq
hZVPHmUmPMi1Hit3eOLPSYvC/xVrF5E8nxs2MhMJhUt45fxJc2AuJ6sAA1hSnCq/
VLEJ0qQHpmPWVvU=
-----END CERTIFICATE-----
Generated at Thu Apr 25 23:51:34 2024 by rpki-client on console-fra.rpki-client.org