Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/GL6KKQT9PpOWuWb0yLwPLIc_BDw.roa
File: GL6KKQT9PpOWuWb0yLwPLIc_BDw.roa (raw, json)
Hash identifier: EArqrzpmoa67TAXX1RWvy37zgtOCjYGH9kPPWLJN7O4=
Subject key identifier: 18:BE:8A:29:04:FD:3E:93:96:B9:66:F4:C8:BC:0F:2C:87:3F:04:3C
Certificate issuer: /CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Certificate serial: 018F51DCD03F365297FC92678E83D3360300
Authority key identifier: 4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/GL6KKQT9PpOWuWb0yLwPLIc_BDw.roa
Signing time: Tue 07 May 2024 07:02:56 +0000
ROA not before: Tue 07 May 2024 07:02:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204511
IP address blocks: 185.197.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:51:dc:d0:3f:36:52:97:fc:92:67:8e:83:d3:36:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Validity
Not Before: May 7 07:02:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18be8a2904fd3e9396b966f4c8bc0f2c873f043c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fb:df:8e:be:c6:d6:bc:cb:1f:d4:f1:bc:ce:
3c:bb:54:cf:28:5d:0e:8b:59:92:91:88:6e:c5:db:
a8:5f:49:9f:c5:ef:09:8a:4d:eb:39:54:70:fd:89:
24:77:62:4f:37:40:14:c6:70:59:5b:6b:68:08:e8:
ba:64:c4:9e:f8:83:53:cb:0f:31:16:8b:22:bb:30:
c3:4a:e3:37:ea:89:f5:c4:e3:8e:bc:46:89:af:53:
5c:2d:6e:2b:58:05:50:99:45:7e:0e:b1:a8:cb:cd:
e2:67:8d:dd:67:a1:05:50:b3:d9:7f:d4:80:d1:f8:
29:bb:96:af:57:5a:74:23:1d:80:8b:14:d3:ae:f6:
bd:ba:f7:93:77:16:8d:be:10:f9:1e:55:bc:40:5c:
2f:5d:ae:69:83:12:c3:6f:8b:0c:8f:8e:7f:82:29:
43:10:14:a1:5b:b4:1b:45:16:36:dc:64:d2:4c:91:
83:a1:d5:7b:1c:3f:24:1c:d4:7f:1e:23:17:50:af:
4b:07:d9:8c:0b:91:55:dd:53:a0:2d:75:3d:36:84:
c6:49:a1:50:1e:ff:f5:c8:8a:18:ed:61:4c:28:0f:
39:61:34:77:6a:3d:bf:0f:99:26:60:e0:7c:a0:be:
8a:37:c9:1a:43:f5:14:34:e1:fd:3c:67:ba:d1:44:
b3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BE:8A:29:04:FD:3E:93:96:B9:66:F4:C8:BC:0F:2C:87:3F:04:3C
X509v3 Authority Key Identifier:
keyid:4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/GL6KKQT9PpOWuWb0yLwPLIc_BDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.116.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:c8:0e:b3:95:71:bc:ed:5e:5b:5e:c8:76:12:89:0b:bf:17:
b0:9d:36:06:37:01:4a:f7:93:bd:b8:07:7c:bb:be:fd:74:66:
24:2d:b2:7d:f7:cd:bd:1a:95:5d:43:63:40:c1:b4:be:d4:50:
f4:96:92:c6:c6:b2:ba:af:19:3d:a8:0f:fb:09:f4:df:fe:cf:
86:c7:4f:ed:93:92:fb:f2:83:2a:23:df:9a:b4:24:3c:9a:e0:
5d:5e:b8:1c:84:ab:42:07:8c:a5:2e:54:76:bd:53:57:51:9d:
2f:be:ef:ca:f8:c4:2d:cf:7e:e8:88:67:a9:4d:ed:75:f5:83:
06:16:3c:4a:e9:0b:8d:60:56:dd:46:16:8c:4e:00:d0:96:5d:
dc:fb:4b:27:2a:b4:3e:98:3a:ef:1b:d5:e7:93:b3:55:38:75:
15:5e:91:fc:2d:94:d9:70:0d:81:dd:52:b1:bd:e9:34:c2:91:
ab:44:4b:b2:eb:a0:ea:82:9c:d2:1d:57:7b:a7:e9:f0:c2:24:
5a:8c:47:2a:9d:44:da:ef:ad:57:b5:61:cc:d6:56:83:84:2f:
53:c1:f6:3e:19:50:3a:54:1b:e9:73:1c:44:01:8a:5c:f0:a7:
8e:1c:4c:97:b0:ca:57:8f:cd:8d:48:92:10:6d:09:55:c1:d5:
89:41:d7:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY9R3NA/NlKX/JJnjoPTNgMAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOWM1ZTU2YWFjZDAxZmZiMjgyNWE5MzFlZDVlZGU0MWMz
ZjkyZTYwHhcNMjQwNTA3MDcwMjU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGJlOGEyOTA0ZmQzZTkzOTZiOTY2ZjRjOGJjMGYyYzg3M2YwNDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fvfjr7G1rzLH9TxvM48u1TPKF0O
i1mSkYhuxduoX0mfxe8Jik3rOVRw/Ykkd2JPN0AUxnBZW2toCOi6ZMSe+INTyw8x
FosiuzDDSuM36on1xOOOvEaJr1NcLW4rWAVQmUV+DrGoy83iZ43dZ6EFULPZf9SA
0fgpu5avV1p0Ix2AixTTrva9uveTdxaNvhD5HlW8QFwvXa5pgxLDb4sMj45/gilD
EBShW7QbRRY23GTSTJGDodV7HD8kHNR/HiMXUK9LB9mMC5FV3VOgLXU9NoTGSaFQ
Hv/1yIoY7WFMKA85YTR3aj2/D5kmYOB8oL6KN8kaQ/UUNOH9PGe60USzLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBi+iikE/T6Tlrlm9Mi8DyyHPwQ8MB8GA1UdIwQY
MBaAFEqcXlaqzQH/soJakx7V7eQcP5LmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3B4ZVZxck5BZi15Z2xxVEh0WHQ1Qndfa3VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jMDEwZGMtMDkxMC00MzQxLThiMzMt
MmU2OTRiMzM5OTMzLzEvR0w2S0tRVDlQcE9XdVdiMHlMd1BMSWNfQkR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jMDEwZGMtMDkxMC00MzQxLThiMzMtMmU2OTRiMzM5OTMz
LzEvU3B4ZVZxck5BZi15Z2xxVEh0WHQ1Qndfa3VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucV0MA0G
CSqGSIb3DQEBCwUAA4IBAQA9yA6zlXG87V5bXsh2EokLvxewnTYGNwFK95O9uAd8
u779dGYkLbJ99829GpVdQ2NAwbS+1FD0lpLGxrK6rxk9qA/7CfTf/s+Gx0/tk5L7
8oMqI9+atCQ8muBdXrgchKtCB4ylLlR2vVNXUZ0vvu/K+MQtz37oiGepTe119YMG
FjxK6QuNYFbdRhaMTgDQll3c+0snKrQ+mDrvG9Xnk7NVOHUVXpH8LZTZcA2B3VKx
vek0wpGrREuy66DqgpzSHVd7p+nwwiRajEcqnUTa761XtWHM1laDhC9TwfY+GVA6
VBvpcxxEAYpc8KeOHEyXsMpXj82NSJIQbQlVwdWJQdcK
-----END CERTIFICATE-----
Generated at Mon Jul 1 15:52:16 2024 by rpki-client on console-ams.rpki-client.org