Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/GQlUb_BgFcfIDA2HRTUtrsYpYTo.roa
File: GQlUb_BgFcfIDA2HRTUtrsYpYTo.roa (raw, json)
Hash identifier: vdMnO0PSNkszaK45rB3cLC0w2t6jsf38oHx2nI2UzXU=
Subject key identifier: 19:09:54:6F:F0:60:15:C7:C8:0C:0D:87:45:35:2D:AE:C6:29:61:3A
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018CC794DC7FFACC04CEB71F77AF389533CB
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/GQlUb_BgFcfIDA2HRTUtrsYpYTo.roa
Signing time: Tue 02 Jan 2024 00:31:10 +0000
ROA not before: Tue 02 Jan 2024 00:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399448
IP address blocks: 193.93.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:dc:7f:fa:cc:04:ce:b7:1f:77:af:38:95:33:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 00:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1909546ff06015c7c80c0d8745352daec629613a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:9e:1d:99:2e:25:ae:61:4f:e7:21:02:88:30:
90:ec:d3:bb:cd:49:62:29:40:8e:c7:b2:e8:18:84:
d6:ed:c8:17:b1:37:87:0f:ec:5e:bd:25:28:04:79:
55:f3:4c:dd:0f:1b:79:67:a8:2e:ec:fb:5c:c8:c8:
62:38:f5:dd:45:e6:a2:fb:ab:39:2c:7f:e5:f9:bb:
a3:e5:85:5f:7f:0b:c7:d5:74:b1:7f:5a:d4:3c:69:
7c:88:80:83:a4:93:c5:97:f9:68:61:15:63:02:64:
41:af:f7:b7:e1:ca:f7:48:f8:80:52:e6:fa:10:7f:
6b:26:36:d7:51:9b:ac:71:84:2f:f4:db:39:ee:7d:
de:30:5b:ed:c6:40:66:0b:47:6d:60:e8:5c:b4:0a:
eb:64:53:56:ff:a9:32:3c:a3:f1:f6:70:c2:56:b2:
4c:78:3b:6b:a1:95:5e:6c:82:06:92:32:b3:75:ab:
cc:a4:f0:f6:6d:7f:df:c0:94:4a:15:b5:6c:00:0c:
a5:2d:b8:86:49:f6:b9:14:ed:d3:e7:31:19:60:b8:
3d:d2:c7:88:67:31:ea:0b:08:ec:25:df:bd:dd:3b:
56:c2:64:b7:61:9a:84:4b:11:0e:2a:b1:ae:e0:f9:
89:30:f2:97:af:ce:27:72:ec:5b:56:9d:ef:f0:6e:
19:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:09:54:6F:F0:60:15:C7:C8:0C:0D:87:45:35:2D:AE:C6:29:61:3A
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/GQlUb_BgFcfIDA2HRTUtrsYpYTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.52.0/24
Signature Algorithm: sha256WithRSAEncryption
51:de:81:b1:da:aa:c9:bb:a6:d0:53:9a:f2:de:17:17:2c:dc:
91:ac:ea:ea:57:19:cd:1b:42:24:70:cc:22:cb:bb:4f:3c:8c:
d7:b2:dd:36:49:50:02:db:0b:e4:3e:72:82:04:5c:0a:61:f7:
a6:92:e1:10:c6:70:ea:14:b6:86:1e:fb:08:97:49:e1:e6:e0:
ec:a0:c9:10:7d:34:81:2b:eb:54:eb:55:4f:63:bc:ef:dd:9e:
cc:06:eb:30:46:5c:87:06:9d:de:35:ee:09:e5:02:91:9e:70:
7a:39:42:76:f5:4a:2a:e8:c4:c7:38:15:17:45:ef:27:7d:8f:
e9:a2:dd:ff:25:cd:7a:37:02:19:0d:1b:be:74:f7:00:d1:72:
ff:ae:c6:90:b7:df:c1:a3:ee:39:1a:6c:6a:34:cf:71:e3:dd:
53:64:98:62:3c:08:bb:f9:b0:70:59:37:6f:c9:f9:8a:6e:f0:
2f:2a:fd:29:52:ad:86:09:31:33:19:ae:d4:0b:26:85:13:11:
f8:2d:20:ef:93:c8:97:e0:1f:48:fb:74:b8:d7:e5:0d:8f:e1:
8d:39:1b:fb:ae:30:5f:a4:41:fd:79:ec:6a:6d:d1:ac:46:e6:
d1:33:61:1e:b5:e0:c5:7e:84:42:d4:ee:38:cd:67:48:ec:6b:
87:41:c3:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlNx/+swEzrcfd684lTPLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjQwMTAyMDAzMTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTA5NTQ2ZmYwNjAxNWM3YzgwYzBkODc0NTM1MmRhZWM2Mjk2MTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+54dmS4lrmFP5yECiDCQ7NO7zUli
KUCOx7LoGITW7cgXsTeHD+xevSUoBHlV80zdDxt5Z6gu7PtcyMhiOPXdReai+6s5
LH/l+buj5YVffwvH1XSxf1rUPGl8iICDpJPFl/loYRVjAmRBr/e34cr3SPiAUub6
EH9rJjbXUZuscYQv9Ns57n3eMFvtxkBmC0dtYOhctArrZFNW/6kyPKPx9nDCVrJM
eDtroZVebIIGkjKzdavMpPD2bX/fwJRKFbVsAAylLbiGSfa5FO3T5zEZYLg90seI
ZzHqCwjsJd+93TtWwmS3YZqESxEOKrGu4PmJMPKXr84ncuxbVp3v8G4ZwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBkJVG/wYBXHyAwNh0U1La7GKWE6MB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvR1FsVWJfQmdGY2ZJREEySFJUVXRyc1lwWVRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwV00MA0G
CSqGSIb3DQEBCwUAA4IBAQBR3oGx2qrJu6bQU5ry3hcXLNyRrOrqVxnNG0IkcMwi
y7tPPIzXst02SVAC2wvkPnKCBFwKYfemkuEQxnDqFLaGHvsIl0nh5uDsoMkQfTSB
K+tU61VPY7zv3Z7MBuswRlyHBp3eNe4J5QKRnnB6OUJ29Uoq6MTHOBUXRe8nfY/p
ot3/Jc16NwIZDRu+dPcA0XL/rsaQt9/Bo+45GmxqNM9x491TZJhiPAi7+bBwWTdv
yfmKbvAvKv0pUq2GCTEzGa7UCyaFExH4LSDvk8iX4B9I+3S41+UNj+GNORv7rjBf
pEH9eexqbdGsRubRM2EeteDFfoRC1O44zWdI7GuHQcOg
-----END CERTIFICATE-----
Generated at Thu May 2 15:09:35 2024 by rpki-client on console-fra.rpki-client.org