Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/S_8ij1Fv6lrAr9m70ej6aeJ7o_o.roa
File: S_8ij1Fv6lrAr9m70ej6aeJ7o_o.roa (raw, json)
Hash identifier: GgTCwXVNiN26ckxjE++ahQ5bf7TYZJfq0gjVIeXoyjU=
Subject key identifier: 4B:FF:22:8F:51:6F:EA:5A:C0:AF:D9:BB:D1:E8:FA:69:E2:7B:A3:FA
Certificate issuer: /CN=826be1fb71af48d6b318510aa8bdf9a815f33db8
Certificate serial: 018CC64B19FB0BB8D6E398B973426CAB3F64
Authority key identifier: 82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/S_8ij1Fv6lrAr9m70ej6aeJ7o_o.roa
Signing time: Mon 01 Jan 2024 18:30:59 +0000
ROA not before: Mon 01 Jan 2024 18:30:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 192.166.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:19:fb:0b:b8:d6:e3:98:b9:73:42:6c:ab:3f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826be1fb71af48d6b318510aa8bdf9a815f33db8
Validity
Not Before: Jan 1 18:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bff228f516fea5ac0afd9bbd1e8fa69e27ba3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4b:a8:e3:5e:30:08:10:3a:0c:88:42:c9:30:
27:bd:49:87:20:ab:9b:59:45:cd:35:da:66:32:4a:
99:98:ad:3b:40:ef:73:58:07:c8:82:a4:73:33:7a:
3c:d9:dc:9a:ca:7b:cb:24:a4:22:f6:25:54:63:fb:
1a:95:eb:60:7f:62:7b:d3:71:d2:e4:c0:d1:a2:5a:
8d:4c:0a:b3:3d:03:10:23:f9:75:3d:cf:f4:b8:53:
19:22:3c:2f:ea:58:fe:88:7a:22:30:63:b7:2a:b4:
24:92:65:91:1c:ec:c9:45:57:07:ca:38:35:84:57:
00:fb:78:6a:ed:41:8c:c5:f8:a6:ca:01:08:18:ad:
ca:ce:7d:11:1d:97:bd:9c:3e:6a:86:bf:85:03:51:
4c:2e:0d:29:b8:a3:8a:e7:78:24:a0:a1:55:36:19:
b7:18:5c:f4:99:bb:02:58:80:8d:e2:26:61:29:0b:
85:64:0b:ac:ab:92:e0:a8:1a:a9:ae:a7:87:24:86:
2f:ef:6c:ce:6e:02:9a:29:60:30:c9:dc:7f:03:dd:
c9:ca:44:41:27:a7:5a:48:e0:5e:72:a4:a0:a2:fa:
51:6a:28:30:3f:df:10:df:5a:0b:8a:14:2d:95:25:
3f:1d:46:07:23:7d:c7:bf:6c:3d:22:11:3c:ee:30:
20:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FF:22:8F:51:6F:EA:5A:C0:AF:D9:BB:D1:E8:FA:69:E2:7B:A3:FA
X509v3 Authority Key Identifier:
keyid:82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/S_8ij1Fv6lrAr9m70ej6aeJ7o_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.227.0/24
Signature Algorithm: sha256WithRSAEncryption
05:de:b6:3b:bb:d4:88:68:0d:c6:69:cb:99:94:14:7e:b4:ba:
d5:5d:13:60:3f:68:26:4c:90:d1:41:c1:7a:90:99:73:69:9c:
ab:9b:8a:28:08:3b:b7:ac:92:ae:69:e3:d7:a0:7f:25:9c:fd:
6e:21:9a:32:74:fd:48:31:47:76:1c:9b:53:f1:9d:a5:6a:06:
8b:a7:ed:0d:c3:68:bb:bb:f5:01:77:53:85:22:97:6f:85:3f:
05:75:e9:50:bd:43:95:2f:ab:fe:69:4a:2c:6e:6d:68:26:bd:
bb:5d:43:c1:83:95:0d:a0:5a:73:ae:7b:64:02:df:26:2f:c5:
b3:51:f5:9a:e4:f8:b0:19:30:aa:9e:0d:ef:28:fc:ae:a4:b3:
f3:ea:fb:bb:f9:4c:4a:69:6b:58:d8:72:bc:b3:77:0b:1e:1a:
61:9b:7a:93:e2:69:cd:8a:dd:89:07:b0:3e:7b:93:2b:4a:20:
3e:cd:26:83:b8:8b:ef:0b:69:52:46:ec:26:e8:38:57:c9:4a:
68:ab:62:51:5b:93:27:58:f2:b8:33:b5:27:51:9d:f5:34:04:
1f:1f:9f:e5:c4:d5:5f:d4:50:6d:f7:41:3c:33:96:74:fe:47:
29:46:16:4b:e4:10:44:9c:e6:e3:c9:dd:79:59:bb:54:72:e5:
91:be:4e:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSxn7C7jW45i5c0Jsqz9kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNmJlMWZiNzFhZjQ4ZDZiMzE4NTEwYWE4YmRmOWE4MTVm
MzNkYjgwHhcNMjQwMTAxMTgzMDU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmZmMjI4ZjUxNmZlYTVhYzBhZmQ5YmJkMWU4ZmE2OWUyN2JhM2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0uo414wCBA6DIhCyTAnvUmHIKub
WUXNNdpmMkqZmK07QO9zWAfIgqRzM3o82dyaynvLJKQi9iVUY/saletgf2J703HS
5MDRolqNTAqzPQMQI/l1Pc/0uFMZIjwv6lj+iHoiMGO3KrQkkmWRHOzJRVcHyjg1
hFcA+3hq7UGMxfimygEIGK3Kzn0RHZe9nD5qhr+FA1FMLg0puKOK53gkoKFVNhm3
GFz0mbsCWICN4iZhKQuFZAusq5LgqBqprqeHJIYv72zObgKaKWAwydx/A93JykRB
J6daSOBecqSgovpRaigwP98Q31oLihQtlSU/HUYHI33Hv2w9IhE87jAgdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEv/Io9Rb+pawK/Zu9Ho+mnie6P6MB8GA1UdIwQY
MBaAFIJr4ftxr0jWsxhRCqi9+agV8z24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ212aC0zR3ZTTmF6R0ZFS3FMMzVxQlh6UGJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9hYzY4OWItMGUzNi00OWZkLThmOWMt
ZGVkNzIwMTQyNzQ0LzEvU184aWoxRnY2bHJBcjltNzBlajZhZUo3b19vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9hYzY4OWItMGUzNi00OWZkLThmOWMtZGVkNzIwMTQyNzQ0
LzEvZ212aC0zR3ZTTmF6R0ZFS3FMMzVxQlh6UGJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKbjMA0G
CSqGSIb3DQEBCwUAA4IBAQAF3rY7u9SIaA3GacuZlBR+tLrVXRNgP2gmTJDRQcF6
kJlzaZyrm4ooCDu3rJKuaePXoH8lnP1uIZoydP1IMUd2HJtT8Z2lagaLp+0Nw2i7
u/UBd1OFIpdvhT8FdelQvUOVL6v+aUosbm1oJr27XUPBg5UNoFpzrntkAt8mL8Wz
UfWa5PiwGTCqng3vKPyupLPz6vu7+UxKaWtY2HK8s3cLHhphm3qT4mnNit2JB7A+
e5MrSiA+zSaDuIvvC2lSRuwm6DhXyUpoq2JRW5MnWPK4M7UnUZ31NAQfH5/lxNVf
1FBt90E8M5Z0/kcpRhZL5BBEnObjyd15WbtUcuWRvk5i
-----END CERTIFICATE-----
Generated at Fri May 31 23:01:34 2024 by rpki-client on console-fra.rpki-client.org