Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/gBRB-Uj8nmOww5EG-YdbGI5EtZE.roa
File: gBRB-Uj8nmOww5EG-YdbGI5EtZE.roa (raw, json)
Hash identifier: xVIBxnmdFX1+I036jYdeHqIGZYGGF8p3CMikMq64eXE=
Subject key identifier: 80:14:41:F9:48:FC:9E:63:B0:C3:91:06:F9:87:5B:18:8E:44:B5:91
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CC79523B41AEE75F50296BD158589AB36
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/gBRB-Uj8nmOww5EG-YdbGI5EtZE.roa
Signing time: Tue 02 Jan 2024 00:31:29 +0000
ROA not before: Tue 02 Jan 2024 00:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35112
IP address blocks: 193.233.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:23:b4:1a:ee:75:f5:02:96:bd:15:85:89:ab:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 00:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=801441f948fc9e63b0c39106f9875b188e44b591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d9:b5:50:f2:d1:b6:6f:71:36:eb:a8:c8:f1:
f0:fe:3e:46:51:69:30:b7:22:29:9b:9f:16:c1:cb:
e8:c2:65:3a:d4:ff:bd:80:d8:fb:ea:0b:da:51:28:
5a:eb:8d:6c:94:39:61:55:7b:35:43:da:8b:65:79:
f0:b8:2d:13:44:65:35:6c:64:7b:25:60:4a:19:4d:
3a:6e:79:95:ea:13:43:cb:72:82:2d:40:2f:02:8f:
22:e7:bf:dd:73:aa:fa:4c:96:05:31:4c:6c:f4:98:
4c:2f:2f:85:59:67:45:bb:cf:0d:73:ed:5e:83:07:
6e:12:a2:a7:fc:7b:96:13:80:13:e0:67:28:82:97:
bb:1a:62:89:9f:d5:b9:3a:8f:49:4c:74:2e:68:78:
5c:00:c2:23:0c:22:e3:ce:96:5e:71:20:30:89:9f:
51:ad:0f:04:ed:d3:12:cb:5d:45:98:60:f5:d6:d6:
92:75:3e:d1:41:76:95:ef:06:f2:b2:27:9d:d8:67:
c2:e0:9b:84:71:ae:59:81:64:de:94:21:ad:e4:ab:
a2:52:3d:8e:35:93:95:0a:1e:80:80:63:db:aa:6a:
07:d7:d1:8f:bf:88:ed:65:2d:60:ce:f3:cc:2b:d8:
fb:38:8d:ee:c7:98:e1:d2:04:b5:dc:63:4a:8f:f7:
4f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:14:41:F9:48:FC:9E:63:B0:C3:91:06:F9:87:5B:18:8E:44:B5:91
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/gBRB-Uj8nmOww5EG-YdbGI5EtZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.19.0/24
Signature Algorithm: sha256WithRSAEncryption
72:40:a2:80:02:b4:fa:28:5d:b5:3c:0c:89:f5:e3:84:9c:46:
6c:49:8b:6d:ca:d7:27:38:c5:ed:1a:12:26:ab:0c:64:85:3c:
1f:a9:8e:a5:14:a1:43:23:2c:fe:dd:91:ad:03:30:71:bb:f7:
65:9d:ec:78:9b:69:4c:67:7a:22:40:dc:44:bc:44:fa:a6:e7:
c9:0d:59:6d:1b:f4:77:c7:30:76:98:ac:97:c9:de:a6:45:4e:
19:4b:ad:6c:d6:61:9d:9b:35:ab:1c:a3:d6:d6:a3:f7:c0:83:
ac:27:0e:38:c5:50:c8:b9:36:ce:d4:57:46:88:a4:95:4f:57:
c2:84:5d:8f:62:4e:e0:02:90:18:65:3d:bd:1b:a9:77:fb:f6:
4f:3f:6b:7c:a0:4f:db:bc:d7:b2:7d:35:f8:36:f7:dd:8b:ba:
43:ed:a5:d2:8c:2e:e6:0d:2c:78:d7:ff:96:6d:2c:27:2d:1a:
7e:df:c7:8b:8a:a4:64:ef:7d:20:b0:f0:2b:6c:d2:46:8c:c5:
a7:2b:99:74:30:5a:6f:0c:73:76:cf:79:36:f7:cc:5d:da:6b:
2f:b8:7b:92:f3:e4:1f:d4:14:5c:76:d2:f4:f2:f6:b1:89:36:
db:71:cc:a9:d5:94:81:20:05:8b:82:7a:dc:fc:94:ce:c3:24:
40:78:1f:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlSO0Gu519QKWvRWFias2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjQwMTAyMDAzMTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDE0NDFmOTQ4ZmM5ZTYzYjBjMzkxMDZmOTg3NWIxODhlNDRiNTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9m1UPLRtm9xNuuoyPHw/j5GUWkw
tyIpm58WwcvowmU61P+9gNj76gvaUSha641slDlhVXs1Q9qLZXnwuC0TRGU1bGR7
JWBKGU06bnmV6hNDy3KCLUAvAo8i57/dc6r6TJYFMUxs9JhMLy+FWWdFu88Nc+1e
gwduEqKn/HuWE4AT4Gcogpe7GmKJn9W5Oo9JTHQuaHhcAMIjDCLjzpZecSAwiZ9R
rQ8E7dMSy11FmGD11taSdT7RQXaV7wbysied2GfC4JuEca5ZgWTelCGt5KuiUj2O
NZOVCh6AgGPbqmoH19GPv4jtZS1gzvPMK9j7OI3ux5jh0gS13GNKj/dPNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIAUQflI/J5jsMORBvmHWxiORLWRMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvZ0JSQi1VajhubU93dzVFRy1ZZGJHSTVFdFpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwekTMA0G
CSqGSIb3DQEBCwUAA4IBAQByQKKAArT6KF21PAyJ9eOEnEZsSYttytcnOMXtGhIm
qwxkhTwfqY6lFKFDIyz+3ZGtAzBxu/dlnex4m2lMZ3oiQNxEvET6pufJDVltG/R3
xzB2mKyXyd6mRU4ZS61s1mGdmzWrHKPW1qP3wIOsJw44xVDIuTbO1FdGiKSVT1fC
hF2PYk7gApAYZT29G6l3+/ZPP2t8oE/bvNeyfTX4Nvfdi7pD7aXSjC7mDSx41/+W
bSwnLRp+38eLiqRk730gsPArbNJGjMWnK5l0MFpvDHN2z3k298xd2msvuHuS8+Qf
1BRcdtL08vaxiTbbccyp1ZSBIAWLgnrc/JTOwyRAeB/x
-----END CERTIFICATE-----
Generated at Sun May 5 00:15:45 2024 by rpki-client on console-fra.rpki-client.org