Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/gl6TdjA4lPFJDhY6CXCWJ1C4h9A.roa
File: gl6TdjA4lPFJDhY6CXCWJ1C4h9A.roa (raw, json)
Hash identifier: 51nD+UBoWMkEYWGsszafYq2tjUP/ICunqUjbrzMJTIM=
Subject key identifier: 82:5E:93:76:30:38:94:F1:49:0E:16:3A:09:70:96:27:50:B8:87:D0
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018EC297021BCBB5BDE5B0FB4CE0CA857D00
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/gl6TdjA4lPFJDhY6CXCWJ1C4h9A.roa
Signing time: Tue 09 Apr 2024 11:21:00 +0000
ROA not before: Tue 09 Apr 2024 11:21:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209889
IP address blocks: 194.56.152.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:97:02:1b:cb:b5:bd:e5:b0:fb:4c:e0:ca:85:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Apr 9 11:21:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=825e9376303894f1490e163a0970962750b887d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a0:38:f5:40:ac:91:39:da:64:96:fd:27:42:
9f:d0:aa:8a:9e:90:54:d4:0e:14:4c:29:04:98:1d:
34:20:f7:d1:d8:c9:bb:e8:f0:3d:6a:3c:e6:de:2a:
ec:f8:f0:f0:05:59:2f:09:ec:35:b6:9c:15:c7:59:
dd:cb:df:11:ae:05:cf:22:14:3b:65:fd:75:87:89:
7c:b4:99:b9:01:fd:b4:c5:f8:a2:16:d5:ad:fc:4c:
1c:32:e9:4f:8d:ad:8e:24:2d:07:8f:59:37:c0:99:
19:54:fb:44:17:34:5d:e7:57:ff:46:5c:c1:58:3e:
3c:0f:e0:cd:99:9e:87:29:20:46:36:b8:2d:89:45:
d5:86:b9:de:b8:8f:bf:ed:be:61:64:44:65:b6:f0:
52:7d:8e:ab:3d:4f:2c:aa:a9:8c:72:e8:ce:53:94:
9e:4e:47:6f:a7:8c:68:3d:04:47:41:ab:86:c6:61:
dd:cd:6b:81:cb:17:c8:d6:c9:a0:5d:44:fc:7a:0f:
c6:9b:16:9a:02:90:0f:46:b2:27:9e:41:cb:43:5b:
c5:6e:c1:1f:5d:96:37:b6:9a:27:b6:72:56:2f:a9:
43:c0:bd:d5:3a:60:e6:0d:4d:5f:47:39:e7:77:a3:
ad:e6:6b:4a:db:24:54:8c:e9:ec:39:89:cc:80:79:
4c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5E:93:76:30:38:94:F1:49:0E:16:3A:09:70:96:27:50:B8:87:D0
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/gl6TdjA4lPFJDhY6CXCWJ1C4h9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.152.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:38:be:da:12:d1:cd:f1:99:60:86:ce:33:96:de:cb:d3:dd:
da:4c:5b:2d:4d:2c:57:24:18:49:4e:35:6b:69:44:39:a9:72:
8f:7c:65:f0:25:a4:a5:0d:fa:0a:ac:a1:ae:f4:7d:17:d5:d9:
e0:aa:fb:26:2f:b6:1b:d9:91:b3:6c:aa:d0:85:5d:13:d1:9a:
a9:1b:96:9b:af:c2:14:af:12:6d:4f:e1:52:fe:6c:40:23:be:
25:a7:e4:ec:68:2e:26:51:83:0c:20:54:77:d2:b0:df:11:3d:
6b:52:87:4a:c2:f8:2a:f4:86:44:d3:8d:21:12:49:94:af:68:
c2:e2:92:94:27:91:d2:6b:47:ba:c1:cc:e4:81:7a:9c:6d:0d:
22:d6:e1:fc:b5:22:24:fd:8a:1b:3d:80:f4:0c:4d:be:04:85:
9b:32:2c:1d:ba:b7:72:46:16:24:49:9a:50:d4:81:70:40:96:
04:05:0a:36:77:80:5b:54:9f:ba:19:46:10:07:60:6a:44:85:
5a:6c:01:4a:b0:5a:ce:e5:28:3e:9c:21:41:39:9b:e7:e2:32:
4b:8c:07:26:03:4d:cf:97:ec:25:fa:4f:8b:dc:ca:f4:4e:5f:
22:57:32:44:0e:30:12:37:99:05:47:cf:31:68:80:49:5e:6c:
7e:fa:09:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY7ClwIby7W95bD7TODKhX0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjQwNDA5MTEyMTAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjVlOTM3NjMwMzg5NGYxNDkwZTE2M2EwOTcwOTYyNzUwYjg4N2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqA49UCskTnaZJb9J0Kf0KqKnpBU
1A4UTCkEmB00IPfR2Mm76PA9ajzm3irs+PDwBVkvCew1tpwVx1ndy98RrgXPIhQ7
Zf11h4l8tJm5Af20xfiiFtWt/EwcMulPja2OJC0Hj1k3wJkZVPtEFzRd51f/RlzB
WD48D+DNmZ6HKSBGNrgtiUXVhrneuI+/7b5hZERltvBSfY6rPU8sqqmMcujOU5Se
Tkdvp4xoPQRHQauGxmHdzWuByxfI1smgXUT8eg/GmxaaApAPRrInnkHLQ1vFbsEf
XZY3tpontnJWL6lDwL3VOmDmDU1fRznnd6Ot5mtK2yRUjOnsOYnMgHlMAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIJek3YwOJTxSQ4WOglwlidQuIfQMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvZ2w2VGRqQTRsUEZKRGhZNkNYQ1dKMUM0aDlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwjiYMA0G
CSqGSIb3DQEBCwUAA4IBAQBaOL7aEtHN8Zlghs4zlt7L093aTFstTSxXJBhJTjVr
aUQ5qXKPfGXwJaSlDfoKrKGu9H0X1dngqvsmL7Yb2ZGzbKrQhV0T0ZqpG5abr8IU
rxJtT+FS/mxAI74lp+TsaC4mUYMMIFR30rDfET1rUodKwvgq9IZE040hEkmUr2jC
4pKUJ5HSa0e6wczkgXqcbQ0i1uH8tSIk/YobPYD0DE2+BIWbMiwdurdyRhYkSZpQ
1IFwQJYEBQo2d4BbVJ+6GUYQB2BqRIVabAFKsFrO5Sg+nCFBOZvn4jJLjAcmA03P
l+wl+k+L3Mr0Tl8iVzJEDjASN5kFR88xaIBJXmx++gk/
-----END CERTIFICATE-----
Generated at Sat May 4 08:46:23 2024 by rpki-client on console-fra.rpki-client.org