Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/GV4fSKyooDL_9GCTRWLnAn4yCpQ.roa
File: GV4fSKyooDL_9GCTRWLnAn4yCpQ.roa (raw, json)
Hash identifier: KgAZb4Hdapd15DDyIgPF+uYjKjMEZqgwb++U70wGsZE=
Subject key identifier: 19:5E:1F:48:AC:A8:A0:32:FF:F4:60:93:45:62:E7:02:7E:32:0A:94
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 018CC7953FBC87F28CB8224150C3404AA394
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/GV4fSKyooDL_9GCTRWLnAn4yCpQ.roa
Signing time: Tue 02 Jan 2024 00:31:36 +0000
ROA not before: Tue 02 Jan 2024 00:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 194.33.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:3f:bc:87:f2:8c:b8:22:41:50:c3:40:4a:a3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Jan 2 00:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=195e1f48aca8a032fff460934562e7027e320a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:99:0e:c9:5e:2f:4c:cf:03:c7:78:10:ad:
1e:7a:4f:25:d1:1d:98:77:fd:cb:da:da:90:4b:11:
1e:2d:11:14:f2:0e:6a:f9:ef:3f:1e:7b:30:84:f4:
73:4a:cb:db:fe:16:1c:36:0b:f6:06:7e:c7:7e:4f:
0d:d9:80:71:09:c0:44:ac:12:89:cb:2d:60:80:13:
67:be:34:6a:7e:04:51:3e:31:e0:23:9e:87:61:8c:
96:d7:cf:77:e3:d9:94:71:09:66:cb:67:80:96:d3:
3a:d1:b3:49:60:45:52:f5:a5:1a:35:e7:e7:15:81:
b7:0a:14:31:79:e5:c6:05:18:89:a2:a8:96:b7:19:
30:e4:35:5a:77:bb:34:56:51:51:77:4a:c8:b1:9d:
7d:2a:ed:18:ad:44:68:33:df:02:f7:cd:07:38:45:
5a:3f:f4:0a:06:0d:4f:04:aa:1d:a7:f9:1a:44:e8:
de:5f:f7:ea:cd:39:3b:1a:1e:1f:db:3a:17:00:c8:
34:42:33:82:d4:6c:c3:1e:f6:38:96:40:cf:c0:b7:
b2:9b:a5:36:44:73:d4:e2:1c:bb:c4:fb:8b:c6:44:
89:f6:c2:d8:b5:db:3f:c3:2d:d1:22:9a:fa:01:60:
d7:2e:0b:68:f1:d5:c4:88:4a:3b:07:35:8a:a3:19:
a5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5E:1F:48:AC:A8:A0:32:FF:F4:60:93:45:62:E7:02:7E:32:0A:94
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/GV4fSKyooDL_9GCTRWLnAn4yCpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.59.0/24
Signature Algorithm: sha256WithRSAEncryption
33:d8:7f:1c:ff:b1:b6:d1:fc:10:69:e8:28:21:a1:61:77:1f:
8a:2d:31:c9:ed:48:81:29:05:fa:03:56:cb:b9:e0:b1:2c:d4:
9c:b8:66:6a:61:12:63:f3:c5:ee:ec:7f:52:72:66:65:0c:24:
b2:1a:7b:93:5f:ab:d0:06:fa:43:46:a4:bb:ac:4a:99:c6:2f:
09:68:b9:7e:9b:a4:4b:7b:2a:52:c3:c8:47:10:06:f3:8c:0c:
95:58:89:1c:92:7b:62:79:2a:f7:21:a8:ed:80:e1:08:70:8d:
85:46:07:87:9b:06:ee:65:ae:2e:4d:f2:05:3a:a5:fc:0b:38:
b0:dd:ef:4c:bd:31:3b:62:13:c3:49:60:39:a5:fa:74:ac:ae:
cf:9b:75:b8:9f:6f:4e:c4:b8:cc:6e:f0:82:00:59:a1:f2:e6:
39:a4:4a:d0:77:6b:33:38:a7:64:c0:f2:07:4c:a6:fd:82:3e:
fc:d9:f6:23:ab:88:c1:12:ec:31:fe:f1:ce:8a:c9:a4:e6:06:
b6:b9:fa:22:26:b8:96:4b:ca:59:8e:cd:3f:88:00:70:e4:c4:
3f:86:18:e5:20:4c:a8:c0:ae:5e:c1:e7:9a:aa:42:42:9a:85:
a9:0d:f8:30:a5:c0:06:ba:a4:78:36:e9:69:86:49:d2:2d:e2:
e5:7b:b4:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlT+8h/KMuCJBUMNASqOUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMGQ0ZTg1OTM3YjdhMGYyNzEwNTRkMjg2MTRmMjkzNGQ0
ZWE1MDAwHhcNMjQwMTAyMDAzMTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTVlMWY0OGFjYThhMDMyZmZmNDYwOTM0NTYyZTcwMjdlMzIwYTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLKZDsleL0zPA8d4EK0eek8l0R2Y
d/3L2tqQSxEeLREU8g5q+e8/HnswhPRzSsvb/hYcNgv2Bn7Hfk8N2YBxCcBErBKJ
yy1ggBNnvjRqfgRRPjHgI56HYYyW189349mUcQlmy2eAltM60bNJYEVS9aUaNefn
FYG3ChQxeeXGBRiJoqiWtxkw5DVad7s0VlFRd0rIsZ19Ku0YrURoM98C980HOEVa
P/QKBg1PBKodp/kaROjeX/fqzTk7Gh4f2zoXAMg0QjOC1GzDHvY4lkDPwLeym6U2
RHPU4hy7xPuLxkSJ9sLYtds/wy3RIpr6AWDXLgto8dXEiEo7BzWKoxmliwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBleH0isqKAy//Rgk0Vi5wJ+MgqUMB8GA1UdIwQY
MBaAFLsNToWTe3oPJxBU0oYU8pNNTqUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYt
OGU5Yjk4YTk5Y2RiLzEvR1Y0ZlNLeW9vRExfOUdDVFJXTG5BbjR5Q3BRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYtOGU5Yjk4YTk5Y2Ri
LzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiE7MA0G
CSqGSIb3DQEBCwUAA4IBAQAz2H8c/7G20fwQaegoIaFhdx+KLTHJ7UiBKQX6A1bL
ueCxLNScuGZqYRJj88Xu7H9ScmZlDCSyGnuTX6vQBvpDRqS7rEqZxi8JaLl+m6RL
eypSw8hHEAbzjAyVWIkckntieSr3IajtgOEIcI2FRgeHmwbuZa4uTfIFOqX8Cziw
3e9MvTE7YhPDSWA5pfp0rK7Pm3W4n29OxLjMbvCCAFmh8uY5pErQd2szOKdkwPIH
TKb9gj782fYjq4jBEuwx/vHOismk5ga2ufoiJriWS8pZjs0/iABw5MQ/hhjlIEyo
wK5eweeaqkJCmoWpDfgwpcAGuqR4NulphknSLeLle7Rn
-----END CERTIFICATE-----
Generated at Thu May 2 18:14:26 2024 by rpki-client on console-fra.rpki-client.org