Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/gRhVoQUL2lG0ur91-25EnZnvPrc.roa
File: gRhVoQUL2lG0ur91-25EnZnvPrc.roa (raw, json)
Hash identifier: mEhD5MB3rtovLG98MVUqDRSyGdJurMsUEkV+Nx7qDzg=
Subject key identifier: 81:18:55:A1:05:0B:DA:51:B4:BA:BF:75:FB:6E:44:9D:99:EF:3E:B7
Certificate issuer: /CN=836528e152b6dcba1571241ac55be5bce01118b7
Certificate serial: 018E65993D2387D5E0A8A6B3F1C8181CA32B
Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/gRhVoQUL2lG0ur91-25EnZnvPrc.roa
Signing time: Fri 22 Mar 2024 09:58:45 +0000
ROA not before: Fri 22 Mar 2024 09:58:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29286
IP address blocks: 178.132.56.0/23 maxlen: 24
178.132.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:65:99:3d:23:87:d5:e0:a8:a6:b3:f1:c8:18:1c:a3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7
Validity
Not Before: Mar 22 09:58:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=811855a1050bda51b4babf75fb6e449d99ef3eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:16:5d:6a:74:b6:60:bd:0e:5a:fd:26:0f:
c6:d9:45:af:9f:2e:c4:fd:cf:99:b7:29:ee:4a:da:
2c:ce:f6:0a:e1:ac:91:5e:7d:b1:4e:fa:a4:aa:f3:
b8:23:3b:e9:04:75:d4:25:55:0a:0c:c6:ab:8c:61:
f5:bb:bd:4b:3c:e6:ef:e9:88:62:44:5e:40:05:c6:
5f:b4:01:46:71:7c:c5:25:55:bc:8b:80:46:c5:15:
8a:ab:94:6b:40:b7:56:6d:80:b9:b0:a8:e7:96:84:
22:8b:7c:b1:bf:22:a0:e2:43:b0:6e:b6:2c:25:cc:
91:34:c0:ea:c1:a9:67:37:01:a2:b8:1e:2e:ea:e0:
5e:09:8c:45:86:69:f7:2c:0e:37:13:38:e0:3d:c0:
d8:db:63:b0:70:f9:ec:21:55:f9:4e:43:a2:75:9a:
86:54:26:9a:87:3d:05:93:8a:61:89:8e:a6:72:f6:
f1:12:76:e6:95:b2:78:9f:b9:c6:13:57:52:4e:92:
07:4b:88:00:33:bd:ac:77:f2:11:65:2f:63:15:52:
ff:5f:05:99:6f:5d:79:e2:55:76:8f:ea:13:dc:02:
9d:89:8b:9e:7b:6c:c2:af:4a:23:8d:42:4b:e9:06:
3e:89:e0:33:9c:17:ba:0a:44:02:90:59:db:34:3d:
5d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:18:55:A1:05:0B:DA:51:B4:BA:BF:75:FB:6E:44:9D:99:EF:3E:B7
X509v3 Authority Key Identifier:
keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/gRhVoQUL2lG0ur91-25EnZnvPrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.56.0-178.132.58.255
Signature Algorithm: sha256WithRSAEncryption
51:99:ec:4b:01:87:1f:86:36:9f:6c:cf:e4:4b:cf:69:3a:af:
a4:24:15:fd:90:84:4f:cf:85:59:ec:0c:4c:71:ee:5f:2e:7a:
bf:e0:75:5b:73:8d:ab:17:f6:5b:00:5b:a4:f6:b8:9a:56:fd:
23:63:aa:40:d5:78:77:05:06:38:d6:aa:ec:12:99:8e:d6:d2:
aa:08:1a:26:55:48:e6:13:db:07:e6:3f:30:c2:ab:8c:2f:fd:
72:36:c0:76:86:9d:c7:52:0e:d0:26:8f:90:5f:04:30:94:6b:
3b:6a:ad:ae:78:3c:e5:02:dd:ad:be:64:85:2d:38:f7:d5:0e:
9c:86:97:8c:f0:99:5f:83:8b:85:2a:32:b5:12:25:19:12:21:
86:d6:82:03:69:5f:90:a6:5b:33:87:09:51:13:48:e6:98:9f:
69:ce:49:3a:b5:0b:11:2f:7b:1f:84:be:8a:32:7e:87:b9:43:
2e:d7:c3:7c:20:da:36:5c:c8:30:96:8e:12:ef:ad:ad:bb:00:
a4:b9:84:0f:77:0e:48:ed:33:99:66:51:eb:4d:8c:a5:d8:5f:
70:fb:87:35:da:04:7d:aa:d0:ec:22:a3:d8:1f:c3:df:b4:30:
65:fb:94:19:c0:47:43:ce:29:26:b1:82:59:84:ee:ec:da:31:
35:0b:14:17
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAY5lmT0jh9XgqKaz8cgYHKMrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNjUyOGUxNTJiNmRjYmExNTcxMjQxYWM1NWJlNWJjZTAx
MTE4YjcwHhcNMjQwMzIyMDk1ODQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTE4NTVhMTA1MGJkYTUxYjRiYWJmNzVmYjZlNDQ5ZDk5ZWYzZWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCEWXWp0tmC9Dlr9Jg/G2UWvny7E
/c+ZtynuStoszvYK4ayRXn2xTvqkqvO4IzvpBHXUJVUKDMarjGH1u71LPObv6Yhi
RF5ABcZftAFGcXzFJVW8i4BGxRWKq5RrQLdWbYC5sKjnloQii3yxvyKg4kOwbrYs
JcyRNMDqwalnNwGiuB4u6uBeCYxFhmn3LA43EzjgPcDY22OwcPnsIVX5TkOidZqG
VCaahz0Fk4phiY6mcvbxEnbmlbJ4n7nGE1dSTpIHS4gAM72sd/IRZS9jFVL/XwWZ
b1154lV2j+oT3AKdiYuee2zCr0ojjUJL6QY+ieAznBe6CkQCkFnbND1dxQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIEYVaEFC9pRtLq/dftuRJ2Z7z63MB8GA1UdIwQY
MBaAFINlKOFStty6FXEkGsVb5bzgERi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJVbzRWSzIzTG9WY1NRYXhWdmx2T0FSR0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC83YzcwZjQtNWYzYS00ZmQzLTg4M2Mt
ZWI5NDE1ZWM1NDhhLzEvZ1JoVm9RVUwybEcwdXI5MS0yNUVuWm52UHJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC83YzcwZjQtNWYzYS00ZmQzLTg4M2MtZWI5NDE1ZWM1NDhh
LzEvZzJVbzRWSzIzTG9WY1NRYXhWdmx2T0FSR0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAOyhDgD
BACyhDowDQYJKoZIhvcNAQELBQADggEBAFGZ7EsBhx+GNp9sz+RLz2k6r6QkFf2Q
hE/PhVnsDExx7l8uer/gdVtzjasX9lsAW6T2uJpW/SNjqkDVeHcFBjjWquwSmY7W
0qoIGiZVSOYT2wfmPzDCq4wv/XI2wHaGncdSDtAmj5BfBDCUaztqra54POUC3a2+
ZIUtOPfVDpyGl4zwmV+Di4UqMrUSJRkSIYbWggNpX5CmWzOHCVETSOaYn2nOSTq1
CxEvex+Evooyfoe5Qy7Xw3wg2jZcyDCWjhLvra27AKS5hA93DkjtM5lmUetNjKXY
X3D7hzXaBH2q0Owio9gfw9+0MGX7lBnAR0POKSaxglmE7uzaMTULFBc=
-----END CERTIFICATE-----
Generated at Sat May 4 18:02:58 2024 by rpki-client on console-fra.rpki-client.org