Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/gve5I7jiiP4hciAScoEuohZjnYQ.roa
File: gve5I7jiiP4hciAScoEuohZjnYQ.roa (raw, json)
Hash identifier: 8PYECfdcCLN0VoJvbnHA0HtP3yUTC615+KVIX49AkdQ=
Subject key identifier: 82:F7:B9:23:B8:E2:88:FE:21:72:20:12:72:81:2E:A2:16:63:9D:84
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 01914FE8733F4030638877594EB38AC7BD2A
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/gve5I7jiiP4hciAScoEuohZjnYQ.roa
Signing time: Wed 14 Aug 2024 08:01:59 +0000
ROA not before: Wed 14 Aug 2024 08:01:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14670
IP address blocks: 65.181.111.0/24 maxlen: 24
88.135.73.0/24 maxlen: 24
190.92.168.0/22 maxlen: 24
190.92.172.0/24 maxlen: 24
190.92.173.0/24 maxlen: 24
192.243.110.0/24 maxlen: 24
192.250.225.0/24 maxlen: 24
192.250.231.0/24 maxlen: 24
193.30.117.0/24 maxlen: 24
195.250.24.0/24 maxlen: 24
195.250.26.0/24 maxlen: 24
195.250.29.0/24 maxlen: 24
199.103.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4f:e8:73:3f:40:30:63:88:77:59:4e:b3:8a:c7:bd:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Aug 14 08:01:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82f7b923b8e288fe2172201272812ea216639d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c7:8f:d5:3d:20:d7:2d:21:91:13:38:a5:78:
5f:1b:9c:69:69:c7:4b:52:d3:b0:ce:df:ee:84:0d:
7c:a8:d7:04:8d:f0:19:25:98:d1:d1:7f:74:e4:71:
9b:1c:d4:2a:c7:5b:e8:ab:fa:3f:be:b2:2e:cb:3e:
63:eb:5b:b7:e8:e8:f3:b7:d4:c9:99:ab:54:4f:40:
8c:09:cb:cd:5b:4c:7a:ce:5c:30:cd:f7:2e:01:42:
91:0e:f6:ed:70:15:b0:11:a5:3a:84:2d:d2:61:c9:
2d:cb:44:ea:22:43:61:68:ff:7c:37:88:90:42:6b:
75:fc:df:11:bb:87:f4:75:c9:17:3c:68:58:04:cc:
a3:4b:91:99:1f:81:3a:27:af:a2:e4:31:ee:2d:7d:
3c:ae:96:20:4a:ca:b9:a6:c7:8e:0d:5f:44:82:d0:
22:c3:67:5b:f3:c3:23:b7:60:24:e0:ea:5f:a7:c1:
1e:ca:39:e7:1a:e4:3a:71:6f:50:bc:ef:d1:63:7e:
f4:48:69:64:fd:a4:54:55:21:8c:2a:7d:9b:e2:b4:
c6:71:55:44:78:49:c1:b6:e8:1b:62:91:d6:f8:a9:
2b:50:22:16:90:20:6e:43:e9:91:00:88:d7:60:e3:
55:f7:23:c6:cc:cf:03:e1:b6:4d:4c:4d:49:f8:89:
f6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F7:B9:23:B8:E2:88:FE:21:72:20:12:72:81:2E:A2:16:63:9D:84
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/gve5I7jiiP4hciAScoEuohZjnYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.181.111.0/24
88.135.73.0/24
190.92.168.0-190.92.173.255
192.243.110.0/24
192.250.225.0/24
192.250.231.0/24
193.30.117.0/24
195.250.24.0/24
195.250.26.0/24
195.250.29.0/24
199.103.58.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b8:e5:a1:fd:f5:b9:03:ae:ba:f7:52:d1:75:62:52:ed:39:
23:e7:9e:22:45:de:17:39:2b:6b:5b:b0:59:40:52:d4:9d:4e:
c7:92:e6:70:0e:43:d2:e2:c5:1c:59:9b:ba:2e:32:18:a1:2e:
cf:43:1f:88:45:db:fa:50:81:7d:46:ed:dd:9d:46:7c:20:2f:
1c:f0:8b:cc:87:34:69:09:58:da:33:c1:67:d6:11:cd:09:40:
52:47:38:ff:79:16:d3:a6:bc:8d:f6:17:9e:8a:ce:74:da:e0:
c1:73:25:4a:4f:34:af:a8:b2:0d:71:c6:90:f9:c4:99:7c:a6:
40:da:2a:e0:e1:2c:4e:df:d6:96:d9:01:0f:ed:6a:f6:64:5e:
75:e2:b6:37:52:37:a2:06:84:ce:ff:4a:29:b8:4c:b8:f4:86:
c3:0c:90:0d:2d:6f:8d:01:87:32:a8:b2:d2:e7:f7:90:78:79:
72:0d:cf:55:98:b1:dd:d7:7e:96:e6:e6:6b:53:c0:1a:26:1d:
76:1f:a6:66:5f:08:27:d1:2f:94:65:70:41:77:f3:61:fd:3e:
5a:92:b6:94:82:3e:6f:dc:59:48:df:fe:2d:ed:34:1d:90:c8:
ce:b1:50:ab:62:85:d1:f7:bd:f6:96:1a:c6:9b:52:63:e9:2e:
26:ee:38:be
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAZFP6HM/QDBjiHdZTrOKx70qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy
ZWU4ZGQwHhcNMjQwODE0MDgwMTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmY3YjkyM2I4ZTI4OGZlMjE3MjIwMTI3MjgxMmVhMjE2NjM5ZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ceP1T0g1y0hkRM4pXhfG5xpacdL
UtOwzt/uhA18qNcEjfAZJZjR0X905HGbHNQqx1voq/o/vrIuyz5j61u36Ojzt9TJ
matUT0CMCcvNW0x6zlwwzfcuAUKRDvbtcBWwEaU6hC3SYckty0TqIkNhaP98N4iQ
Qmt1/N8Ru4f0dckXPGhYBMyjS5GZH4E6J6+i5DHuLX08rpYgSsq5pseODV9EgtAi
w2db88Mjt2Ak4Opfp8EeyjnnGuQ6cW9QvO/RY370SGlk/aRUVSGMKn2b4rTGcVVE
eEnBtugbYpHW+KkrUCIWkCBuQ+mRAIjXYONV9yPGzM8D4bZNTE1J+In2hQIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFIL3uSO44oj+IXIgEnKBLqIWY52EMB8GA1UdIwQY
MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt
Y2NhMzc2MDZiZjE4LzEvZ3ZlNUk3amlpUDRoY2lBU2NvRXVvaFpqbllRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4
LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQAQbVvAwQA
WIdJMAwDBAO+XKgDBAG+XKwDBADA824DBADA+uEDBADA+ucDBADBHnUDBADD+hgD
BADD+hoDBADD+h0DBADHZzowDQYJKoZIhvcNAQELBQADggEBAIq45aH99bkDrrr3
UtF1YlLtOSPnniJF3hc5K2tbsFlAUtSdTseS5nAOQ9LixRxZm7ouMhihLs9DH4hF
2/pQgX1G7d2dRnwgLxzwi8yHNGkJWNozwWfWEc0JQFJHOP95FtOmvI32F56KznTa
4MFzJUpPNK+osg1xxpD5xJl8pkDaKuDhLE7f1pbZAQ/tavZkXnXitjdSN6IGhM7/
Sim4TLj0hsMMkA0tb40BhzKostLn95B4eXINz1WYsd3Xfpbm5mtTwBomHXYfpmZf
CCfRL5RlcEF382H9PlqStpSCPm/cWUjf/i3tNB2QyM6xUKtihdH3vfaWGsabUmPp
LibuOL4=
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:17 2024 by rpki-client on console-ams.rpki-client.org