Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/8gg_XmlnFkxsZsB3UfOaxH6A3_s.roa
File: 8gg_XmlnFkxsZsB3UfOaxH6A3_s.roa (raw, json)
Hash identifier: IbSHqeJwvCloJXsFGwAtMAgUPE0mOV89Vil6qy/Mf8g=
Subject key identifier: F2:08:3F:5E:69:67:16:4C:6C:66:C0:77:51:F3:9A:C4:7E:80:DF:FB
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 018CC5DC5019C48BC812B06CF70725C1714B
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/8gg_XmlnFkxsZsB3UfOaxH6A3_s.roa
Signing time: Mon 01 Jan 2024 16:29:59 +0000
ROA not before: Mon 01 Jan 2024 16:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201671
IP address blocks: 195.19.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:50:19:c4:8b:c8:12:b0:6c:f7:07:25:c1:71:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 16:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2083f5e6967164c6c66c07751f39ac47e80dffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f3:fd:bb:64:8c:8c:3c:87:1a:19:fb:2a:90:
30:ed:18:f8:35:f0:1a:bc:a5:65:a3:48:64:9a:36:
75:cc:2a:b1:ea:3a:fd:ad:36:93:2d:8d:de:dc:b9:
30:3e:72:c7:d4:d3:06:60:ef:e3:0c:bd:78:35:08:
db:8c:a9:84:91:57:ba:03:fc:9e:90:e3:eb:05:b8:
37:81:f4:3e:65:d8:1c:5c:ae:14:bd:5e:88:0e:b3:
80:30:5f:f6:88:83:49:18:f0:8c:ee:91:2a:b0:45:
90:c2:18:19:89:76:5c:85:81:39:dd:0d:94:72:11:
1d:5c:04:08:cd:fa:75:5d:40:61:f6:c1:26:81:2e:
04:a9:16:fa:84:f1:a9:e4:08:ae:91:46:0b:47:44:
49:3c:5c:83:fd:b8:d7:25:0d:d2:9f:06:f1:e6:98:
aa:67:e3:5c:78:5a:59:b3:14:a0:8b:66:ab:ac:f7:
03:80:db:cd:52:41:a9:53:f2:05:be:88:c4:89:6e:
45:01:85:cb:83:69:bf:7a:87:c8:6b:e4:67:f7:e0:
8d:e0:da:7c:83:61:85:93:26:7f:a4:74:48:1e:9b:
84:12:a7:ee:89:87:71:e5:f2:78:fd:41:e3:f7:49:
be:2b:27:93:5c:70:63:8d:09:72:68:96:63:17:2f:
1b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:08:3F:5E:69:67:16:4C:6C:66:C0:77:51:F3:9A:C4:7E:80:DF:FB
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/8gg_XmlnFkxsZsB3UfOaxH6A3_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.19.93.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:f4:e8:d8:3c:ba:d7:3a:9f:17:b6:9f:f8:01:c5:fd:1e:22:
b7:e8:4f:c3:b0:26:5a:8c:21:3f:73:84:1d:77:08:13:4e:cd:
ae:58:d2:3b:57:f1:34:0d:46:cd:41:b3:75:73:30:fa:08:59:
46:c7:39:cb:8c:71:58:e6:7e:fd:65:83:1a:4d:52:f0:0c:fd:
3f:5d:25:77:73:6b:c9:34:9d:d2:8c:d7:8e:fe:82:ba:0e:47:
ee:f4:09:93:c7:2d:4d:56:03:9b:80:90:74:23:72:92:c4:8a:
14:b0:e6:16:52:b5:7b:ef:f3:56:e9:5d:11:a5:bf:f2:19:84:
7c:33:1c:f3:00:0e:b2:a9:f6:72:a1:7c:19:80:73:a2:b9:0f:
9e:fd:50:bf:6b:c0:79:2a:6e:14:51:1f:a5:73:77:4b:ec:ce:
d8:e0:1a:e2:07:3b:7f:fc:cc:aa:5a:ad:70:c7:e3:7d:2b:4d:
81:99:77:43:2d:24:02:60:32:c3:fa:e6:85:ec:23:40:5b:68:
12:62:be:76:8b:86:7e:a7:11:58:57:be:5d:b0:8d:f7:1a:33:
d1:94:34:79:3f:4c:dc:0a:b3:52:bd:85:29:a2:a4:47:9c:81:
8c:d2:42:a2:08:57:88:73:3a:c8:de:02:5e:31:66:70:26:3d:
50:3f:6d:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3FAZxIvIErBs9wclwXFLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx
NjQ2NGEwHhcNMjQwMTAxMTYyOTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjA4M2Y1ZTY5NjcxNjRjNmM2NmMwNzc1MWYzOWFjNDdlODBkZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/P9u2SMjDyHGhn7KpAw7Rj4NfAa
vKVlo0hkmjZ1zCqx6jr9rTaTLY3e3LkwPnLH1NMGYO/jDL14NQjbjKmEkVe6A/ye
kOPrBbg3gfQ+ZdgcXK4UvV6IDrOAMF/2iINJGPCM7pEqsEWQwhgZiXZchYE53Q2U
chEdXAQIzfp1XUBh9sEmgS4EqRb6hPGp5AiukUYLR0RJPFyD/bjXJQ3Snwbx5piq
Z+NceFpZsxSgi2arrPcDgNvNUkGpU/IFvojEiW5FAYXLg2m/eofIa+Rn9+CN4Np8
g2GFkyZ/pHRIHpuEEqfuiYdx5fJ4/UHj90m+KyeTXHBjjQlyaJZjFy8bkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPIIP15pZxZMbGbAd1HzmsR+gN/7MB8GA1UdIwQY
MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt
OWU5YTFlMDM3MzhlLzEvOGdnX1htbG5Ga3hzWnNCM1VmT2F4SDZBM19zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl
LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwxNdMA0G
CSqGSIb3DQEBCwUAA4IBAQCN9OjYPLrXOp8Xtp/4AcX9HiK36E/DsCZajCE/c4Qd
dwgTTs2uWNI7V/E0DUbNQbN1czD6CFlGxznLjHFY5n79ZYMaTVLwDP0/XSV3c2vJ
NJ3SjNeO/oK6Dkfu9AmTxy1NVgObgJB0I3KSxIoUsOYWUrV77/NW6V0Rpb/yGYR8
MxzzAA6yqfZyoXwZgHOiuQ+e/VC/a8B5Km4UUR+lc3dL7M7Y4BriBzt//MyqWq1w
x+N9K02BmXdDLSQCYDLD+uaF7CNAW2gSYr52i4Z+pxFYV75dsI33GjPRlDR5P0zc
CrNSvYUpoqRHnIGM0kKiCFeIczrI3gJeMWZwJj1QP23+
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:35:00 2024 by rpki-client on console-ams.rpki-client.org