Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/GT5FAJqy8_7FN7j6Ht3x7pBRnio.roa
File: GT5FAJqy8_7FN7j6Ht3x7pBRnio.roa (raw, json)
Hash identifier: gXaquaNkjvKhH4kt2bN52BosUX7DNHqfke7mVu5GyH4=
Subject key identifier: 19:3E:45:00:9A:B2:F3:FE:C5:37:B8:FA:1E:DD:F1:EE:90:51:9E:2A
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018CC86FA96C2B85EB86EFB81674EBA20CB3
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/GT5FAJqy8_7FN7j6Ht3x7pBRnio.roa
Signing time: Tue 02 Jan 2024 04:30:10 +0000
ROA not before: Tue 02 Jan 2024 04:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49321
IP address blocks: 45.149.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:a9:6c:2b:85:eb:86:ef:b8:16:74:eb:a2:0c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 04:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=193e45009ab2f3fec537b8fa1eddf1ee90519e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:39:bb:d7:0e:93:4a:a2:15:04:40:bc:8a:22:
6a:59:f0:ac:d8:5f:59:76:85:46:fd:b0:5c:21:f0:
78:96:98:ea:11:06:08:34:01:81:ee:d8:79:2e:82:
b5:21:36:ae:90:9f:51:8c:75:e5:73:a0:fe:a4:88:
96:99:e7:e6:73:dd:84:b6:39:8c:ce:36:6f:5b:71:
15:49:9d:dd:52:53:fb:27:16:dc:25:73:c6:8f:83:
b1:e7:ad:70:76:14:ee:69:e5:57:ec:70:7a:4b:fe:
c2:a9:33:00:32:67:ef:cc:6d:cd:43:43:29:0f:65:
26:b5:86:0c:78:75:2a:a6:de:2b:b5:4c:d8:93:23:
a7:e2:b3:e5:39:7d:5e:80:de:76:c4:73:be:3c:02:
16:30:e7:09:76:de:b4:df:fb:54:22:10:5c:bf:fe:
e3:b5:96:24:74:05:62:21:e2:f1:4b:c6:09:e5:f7:
e8:5c:da:88:cd:05:f2:c8:79:43:7c:ba:63:1b:ba:
51:50:6f:16:3c:7e:46:52:42:93:7e:9b:b3:ec:7d:
8f:7e:55:de:0a:c2:43:bc:9e:75:35:b1:93:8a:44:
e1:2e:29:1a:ec:19:14:b3:a6:7b:f1:13:90:4b:2b:
1e:0e:bf:34:92:88:83:19:42:e4:49:38:40:47:19:
9c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3E:45:00:9A:B2:F3:FE:C5:37:B8:FA:1E:DD:F1:EE:90:51:9E:2A
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/GT5FAJqy8_7FN7j6Ht3x7pBRnio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.2.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:18:02:53:3d:d3:93:61:cc:2f:ac:df:af:b9:b5:9b:d7:6f:
57:b8:be:ec:07:56:74:00:4a:97:03:ea:76:7c:e7:db:cc:74:
5d:67:a5:c8:22:17:b5:ff:5d:68:79:99:54:cb:38:17:f1:d5:
fd:27:0a:dd:77:31:c2:96:ab:0c:96:4c:b7:8a:05:1b:0c:bb:
d5:b6:72:d7:6f:f1:83:9f:23:b3:a8:e3:3c:c5:bf:2c:74:a5:
38:bf:89:dc:23:2a:93:c2:03:2e:3c:f1:b6:8c:66:34:5f:cd:
73:6b:94:48:54:60:b8:14:4b:38:2a:a9:da:5f:25:96:59:a5:
3f:6b:85:ab:c7:f6:77:18:b9:3b:57:42:90:79:a2:71:cc:ec:
25:56:3c:42:cf:55:03:3b:89:68:0f:1c:f0:c3:63:51:4e:ac:
88:91:57:cb:70:4e:c7:a4:dd:04:bd:74:a7:37:03:af:c3:ba:
b2:25:7d:40:11:3f:2d:e2:a0:d6:35:9c:e8:86:33:b5:0c:00:
62:b7:b1:0a:33:b5:1d:7b:31:18:f0:15:00:7a:0f:55:c5:f7:
01:58:62:49:1e:d0:cd:80:2e:3c:21:7f:61:6b:1c:01:6d:9e:
73:41:cc:a1:e7:7a:6c:f4:cd:29:9a:88:2f:c6:0f:c2:3f:e8:
f5:0d:c6:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb6lsK4Xrhu+4FnTrogyzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjQwMTAyMDQzMDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTNlNDUwMDlhYjJmM2ZlYzUzN2I4ZmExZWRkZjFlZTkwNTE5ZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDm71w6TSqIVBEC8iiJqWfCs2F9Z
doVG/bBcIfB4lpjqEQYINAGB7th5LoK1ITaukJ9RjHXlc6D+pIiWmefmc92EtjmM
zjZvW3EVSZ3dUlP7JxbcJXPGj4Ox561wdhTuaeVX7HB6S/7CqTMAMmfvzG3NQ0Mp
D2UmtYYMeHUqpt4rtUzYkyOn4rPlOX1egN52xHO+PAIWMOcJdt603/tUIhBcv/7j
tZYkdAViIeLxS8YJ5ffoXNqIzQXyyHlDfLpjG7pRUG8WPH5GUkKTfpuz7H2PflXe
CsJDvJ51NbGTikThLika7BkUs6Z78ROQSyseDr80koiDGULkSThARxmcKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBk+RQCasvP+xTe4+h7d8e6QUZ4qMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvR1Q1RkFKcXk4XzdGTjdqNkh0M3g3cEJSbmlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZUCMA0G
CSqGSIb3DQEBCwUAA4IBAQCtGAJTPdOTYcwvrN+vubWb129XuL7sB1Z0AEqXA+p2
fOfbzHRdZ6XIIhe1/11oeZlUyzgX8dX9JwrddzHClqsMlky3igUbDLvVtnLXb/GD
nyOzqOM8xb8sdKU4v4ncIyqTwgMuPPG2jGY0X81za5RIVGC4FEs4KqnaXyWWWaU/
a4Wrx/Z3GLk7V0KQeaJxzOwlVjxCz1UDO4loDxzww2NRTqyIkVfLcE7HpN0EvXSn
NwOvw7qyJX1AET8t4qDWNZzohjO1DABit7EKM7UdezEY8BUAeg9VxfcBWGJJHtDN
gC48IX9haxwBbZ5zQcyh53ps9M0pmogvxg/CP+j1DcZo
-----END CERTIFICATE-----
Generated at Fri May 17 09:04:19 2024 by rpki-client on console-fra.rpki-client.org