Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/GzylZC_tHN63u1EQcv2JbrCIpLk.roa
File: GzylZC_tHN63u1EQcv2JbrCIpLk.roa (raw, json)
Hash identifier: LJw4axbWP0zy9DqaJc7ue8kzTxOV57gcXDdVcJb0X2I=
Subject key identifier: 1B:3C:A5:64:2F:ED:1C:DE:B7:BB:51:10:72:FD:89:6E:B0:88:A4:B9
Certificate issuer: /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Certificate serial: 018CC79509391458FC40D77B53CAEF658F8A
Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/GzylZC_tHN63u1EQcv2JbrCIpLk.roa
Signing time: Tue 02 Jan 2024 00:31:22 +0000
ROA not before: Tue 02 Jan 2024 00:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34848
IP address blocks: 89.104.192.0/19 maxlen: 19
89.104.206.0/24 maxlen: 24
193.238.186.0/24 maxlen: 24
193.238.184.0/24 maxlen: 24
195.245.210.0/24 maxlen: 24
195.242.120.0/23 maxlen: 23
185.38.182.0/23 maxlen: 23
185.38.181.0/24 maxlen: 24
185.38.180.0/24 maxlen: 24
193.238.187.0/24 maxlen: 24
2a01:77c0:6::/48 maxlen: 48
2a01:77c0:1181::/48 maxlen: 48
2a01:77c0::/36 maxlen: 36
2a01:77c0:1180::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:09:39:14:58:fc:40:d7:7b:53:ca:ef:65:8f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Validity
Not Before: Jan 2 00:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b3ca5642fed1cdeb7bb511072fd896eb088a4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:bc:40:f4:53:8f:6a:72:c7:26:c6:d2:22:
03:b5:69:eb:d7:dd:05:af:cb:cb:be:7b:4a:e0:f8:
0f:4f:fe:c2:96:87:99:63:97:5a:62:62:d6:d9:cd:
e3:7c:1e:ed:51:41:04:df:dd:2d:81:97:74:d0:53:
a4:ad:0d:42:36:07:6c:e3:e1:17:75:33:42:fd:d4:
58:60:76:7b:35:65:ef:6b:5e:a5:71:1d:d3:f1:46:
1b:0e:31:24:ab:4a:9c:a8:c3:ab:c9:7f:7b:be:be:
09:0f:02:b5:de:a6:08:88:f7:64:41:c3:77:67:dd:
02:b7:c3:86:6e:dd:96:0e:73:71:8e:cf:84:82:82:
eb:9a:27:c0:a8:64:50:e6:61:83:3e:61:46:d8:1d:
dc:a2:16:a0:2c:f1:04:7b:91:57:4b:4e:eb:5e:40:
11:0b:e9:d0:28:55:7e:ba:6d:17:bc:4a:77:48:9e:
05:f5:79:a3:1d:d2:f5:a3:d0:2c:1b:e3:ed:95:25:
25:62:b1:04:4b:83:de:26:ac:fa:e2:1e:f3:e9:26:
11:fc:6c:4f:8b:a4:c5:d1:d4:0f:0f:14:19:2e:0e:
0d:09:a4:7a:9a:4b:11:cf:c7:cd:cd:7b:df:1a:bd:
7b:5c:92:0c:2d:2b:e9:cd:c5:ad:1c:f6:ba:0b:f9:
4c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3C:A5:64:2F:ED:1C:DE:B7:BB:51:10:72:FD:89:6E:B0:88:A4:B9
X509v3 Authority Key Identifier:
keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/GzylZC_tHN63u1EQcv2JbrCIpLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.104.192.0/19
185.38.180.0/22
193.238.184.0/24
193.238.186.0/23
195.242.120.0/23
195.245.210.0/24
IPv6:
2a01:77c0::/36
2a01:77c0:1180::/47
Signature Algorithm: sha256WithRSAEncryption
11:34:aa:d4:22:bc:34:8e:66:f1:9f:9f:1a:35:56:7a:3a:07:
bd:90:b4:df:4c:e9:e6:82:a2:66:a0:a3:94:f2:4d:d0:fa:57:
cb:21:87:e5:51:75:5b:69:50:fe:c8:6f:a2:0a:f6:b7:00:64:
4b:af:ca:90:74:93:bd:f3:25:5d:28:0c:4a:fe:ae:17:e1:58:
cf:e0:4d:ea:a3:64:4a:c3:da:fb:3a:7b:99:2b:92:d1:d9:18:
87:c1:aa:16:1c:41:28:95:9b:65:03:29:24:b7:53:fc:38:3d:
26:b9:ef:e9:ae:d3:72:bb:98:6e:e7:c1:d1:c6:d7:24:64:77:
01:7d:ca:99:a5:a7:4d:b5:4d:c8:d1:64:1d:fe:7f:27:04:9a:
f9:e3:b1:ee:44:9f:3f:18:c3:33:07:94:d2:cb:d7:0b:f4:29:
41:17:e5:94:23:15:be:cf:61:dc:7f:c1:5a:27:a8:9d:69:cf:
c4:7e:c3:0c:33:fe:1b:aa:c2:03:84:8d:18:f8:5e:f1:a0:af:
73:6c:48:d9:ac:be:37:05:2d:32:ab:f5:da:70:15:d7:86:1d:
d4:27:45:1b:91:f5:76:1a:ea:39:05:a8:8c:82:66:29:13:bc:
a8:6c:a3:45:75:c6:8f:2d:af:25:da:fd:04:b0:ae:d2:1e:e8:
74:9f:3f:90
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgISAYzHlQk5FFj8QNd7U8rvZY+KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyN2FmMTdmMDQ5OTYyN2U0YjNjOGNjNWMzMzNlYzRiOGU3
NjM1ZTAwHhcNMjQwMTAyMDAzMTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjNjYTU2NDJmZWQxY2RlYjdiYjUxMTA3MmZkODk2ZWIwODhhNGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpW8QPRTj2pyxybG0iIDtWnr190F
r8vLvntK4PgPT/7CloeZY5daYmLW2c3jfB7tUUEE390tgZd00FOkrQ1CNgds4+EX
dTNC/dRYYHZ7NWXva16lcR3T8UYbDjEkq0qcqMOryX97vr4JDwK13qYIiPdkQcN3
Z90Ct8OGbt2WDnNxjs+EgoLrmifAqGRQ5mGDPmFG2B3cohagLPEEe5FXS07rXkAR
C+nQKFV+um0XvEp3SJ4F9XmjHdL1o9AsG+PtlSUlYrEES4PeJqz64h7z6SYR/GxP
i6TF0dQPDxQZLg4NCaR6mksRz8fNzXvfGr17XJIMLSvpzcWtHPa6C/lMMQIDAQAB
o4ICQDCCAjwwHQYDVR0OBBYEFBs8pWQv7Rzet7tREHL9iW6wiKS5MB8GA1UdIwQY
MBaAFIJ68X8EmWJ+SzyMxcMz7EuOdjXgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jMmFlM2QtOThiNC00NDZmLWFiMjgt
NzMxM2M3ZjNjYTNmLzEvR3p5bFpDX3RITjYzdTFFUWN2MkpickNJcExrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jMmFlM2QtOThiNC00NDZmLWFiMjgtNzMxM2M3ZjNjYTNm
LzEvZ25yeGZ3U1pZbjVMUEl6Rnd6UHNTNDUyTmVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTAqBAIAATAkAwQFWWjAAwQC
uSa0AwQAwe64AwQBwe66AwQBw/J4AwQAw/XSMBcEAgACMBEDBgQqAXfAAAMHASoB
d8ARgDANBgkqhkiG9w0BAQsFAAOCAQEAETSq1CK8NI5m8Z+fGjVWejoHvZC030zp
5oKiZqCjlPJN0PpXyyGH5VF1W2lQ/shvogr2twBkS6/KkHSTvfMlXSgMSv6uF+FY
z+BN6qNkSsPa+zp7mSuS0dkYh8GqFhxBKJWbZQMpJLdT/Dg9Jrnv6a7TcruYbufB
0cbXJGR3AX3KmaWnTbVNyNFkHf5/JwSa+eOx7kSfPxjDMweU0svXC/QpQRfllCMV
vs9h3H/BWieonWnPxH7DDDP+G6rCA4SNGPhe8aCvc2xI2ay+NwUtMqv12nAV14Yd
1CdFG5H1dhrqOQWojIJmKRO8qGyjRXXGjy2vJdr9BLCu0h7odJ8/kA==
-----END CERTIFICATE-----
Generated at Mon Jun 17 16:14:06 2024 by rpki-client on console-fra.rpki-client.org