Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gMNPSiiNWfQEApUMKAj9EBI-sFA.roa
File: gMNPSiiNWfQEApUMKAj9EBI-sFA.roa (raw, json)
Hash identifier: Jf4BVV29FvPy2Xb+UYAcvwYfUIL4LjfbPyIF+tSXMm8=
Subject key identifier: 80:C3:4F:4A:28:8D:59:F4:04:02:95:0C:28:08:FD:10:12:3E:B0:50
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E31799B135E86A0366C3638A006C16C96
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gMNPSiiNWfQEApUMKAj9EBI-sFA.roa
Signing time: Tue 12 Mar 2024 07:03:56 +0000
ROA not before: Tue 12 Mar 2024 07:03:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215561
IP address blocks: 195.178.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:31:79:9b:13:5e:86:a0:36:6c:36:38:a0:06:c1:6c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 12 07:03:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80c34f4a288d59f40402950c2808fd10123eb050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ef:0d:36:8a:3a:b6:76:72:15:1b:43:b1:1b:
19:8b:78:c8:09:06:c5:69:0c:6b:c3:70:b6:20:0a:
c7:a4:69:5e:a2:39:1a:f6:75:7d:2d:c4:18:05:f0:
eb:18:51:f8:a9:c6:f6:d1:38:73:46:20:5f:d3:44:
c2:9c:5e:f2:05:60:ae:e3:75:9f:99:1a:58:26:9f:
5a:73:bd:21:d6:de:40:71:06:a2:54:41:d7:b1:3a:
98:b1:e8:2f:51:43:de:44:e5:1d:e0:bc:4f:f9:f3:
bb:77:01:20:ca:0c:e2:2f:76:73:f8:fb:05:46:31:
06:89:3e:03:38:c7:08:47:82:92:5d:3a:4f:ad:f6:
d9:1d:b2:79:58:ca:25:51:fa:8b:03:06:ff:36:82:
a6:90:03:02:cc:0a:38:dd:5b:21:9d:65:4a:dc:9c:
5b:e5:2b:f0:2c:54:59:83:c3:8d:bc:09:06:71:b5:
29:18:e2:8d:c8:ed:cd:df:0a:ef:48:9f:0c:3f:88:
d3:01:1c:27:b2:a4:83:12:17:1d:10:17:3c:83:5e:
59:86:7f:37:9f:c4:38:e8:f7:b7:ae:f3:36:f9:bd:
0c:72:e4:4e:5b:51:af:6f:1a:2b:42:00:a5:01:9e:
36:f9:1c:4a:3c:1b:5c:0e:83:8d:93:35:5d:1f:bc:
79:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C3:4F:4A:28:8D:59:F4:04:02:95:0C:28:08:FD:10:12:3E:B0:50
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gMNPSiiNWfQEApUMKAj9EBI-sFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.110.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:47:99:aa:99:b4:85:85:97:67:02:1e:7d:ec:e8:6d:00:c5:
cd:f6:97:44:54:3c:ac:ed:22:ec:4b:8d:73:b7:17:84:1d:21:
ad:65:b7:4e:23:bb:6f:7f:df:da:5e:a0:c4:f4:1d:95:b3:44:
ec:7a:8d:a8:30:4b:2c:c9:a6:b8:7a:b2:3d:53:9f:43:f5:7c:
83:bc:b0:12:fa:0c:5b:ab:09:1c:a7:e4:0e:da:0a:e1:48:82:
a1:5a:ea:58:9a:50:5c:52:0f:a3:a7:1c:bb:58:a8:39:1f:2d:
ba:16:7c:4a:a0:8d:23:ca:ca:60:d9:c7:30:63:d0:3f:a1:ab:
06:16:2a:f8:00:f0:a4:a4:a0:66:4e:03:b8:d3:c1:c0:a7:cc:
75:c5:af:2a:ad:23:15:e3:70:a1:e2:39:41:bb:84:be:da:8b:
de:0a:a2:01:87:10:44:6c:ff:db:5a:eb:62:96:85:b7:a9:06:
e0:46:c5:51:ff:e7:4c:a7:bd:56:50:57:a8:21:e7:92:88:7c:
36:db:21:0c:40:99:8b:b0:25:26:1e:25:83:40:a9:c3:17:8e:
7b:f9:f0:8a:b7:ab:98:19:fe:ff:93:b8:31:0c:d6:e6:c1:18:
a1:5b:41:55:6b:81:d3:6e:23:68:29:9c:e3:2f:6b:26:83:d4:
d3:d7:17:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4xeZsTXoagNmw2OKAGwWyWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMzEyMDcwMzU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGMzNGY0YTI4OGQ1OWY0MDQwMjk1MGMyODA4ZmQxMDEyM2ViMDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe8NNoo6tnZyFRtDsRsZi3jICQbF
aQxrw3C2IArHpGleojka9nV9LcQYBfDrGFH4qcb20ThzRiBf00TCnF7yBWCu43Wf
mRpYJp9ac70h1t5AcQaiVEHXsTqYsegvUUPeROUd4LxP+fO7dwEgygziL3Zz+PsF
RjEGiT4DOMcIR4KSXTpPrfbZHbJ5WMolUfqLAwb/NoKmkAMCzAo43VshnWVK3Jxb
5SvwLFRZg8ONvAkGcbUpGOKNyO3N3wrvSJ8MP4jTARwnsqSDEhcdEBc8g15Zhn83
n8Q46Pe3rvM2+b0McuROW1GvbxorQgClAZ42+RxKPBtcDoONkzVdH7x5PQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIDDT0oojVn0BAKVDCgI/RASPrBQMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvZ01OUFNpaU5XZlFFQXBVTUtBajlFQkktc0ZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7JuMA0G
CSqGSIb3DQEBCwUAA4IBAQCoR5mqmbSFhZdnAh597OhtAMXN9pdEVDys7SLsS41z
txeEHSGtZbdOI7tvf9/aXqDE9B2Vs0Tseo2oMEssyaa4erI9U59D9XyDvLAS+gxb
qwkcp+QO2grhSIKhWupYmlBcUg+jpxy7WKg5Hy26FnxKoI0jyspg2ccwY9A/oasG
Fir4APCkpKBmTgO408HAp8x1xa8qrSMV43Ch4jlBu4S+2oveCqIBhxBEbP/bWuti
loW3qQbgRsVR/+dMp71WUFeoIeeSiHw22yEMQJmLsCUmHiWDQKnDF457+fCKt6uY
Gf7/k7gxDNbmwRihW0FVa4HTbiNoKZzjL2smg9TT1xfa
-----END CERTIFICATE-----
Generated at Sun Apr 28 14:36:15 2024 by rpki-client on console-ams.rpki-client.org