Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/c9WbntF9gR3KJec5hPL6qiZa-58.roa
File: c9WbntF9gR3KJec5hPL6qiZa-58.roa (raw, json)
Hash identifier: w1i0zBWu75nCyIFXQNAISblDEL9Rfvltw3IXIQTa7Ds=
Subject key identifier: 73:D5:9B:9E:D1:7D:81:1D:CA:25:E7:39:84:F2:FA:AA:26:5A:FB:9F
Certificate issuer: /CN=826be1fb71af48d6b318510aa8bdf9a815f33db8
Certificate serial: 018CC64B1CF9453619968D1C36C3C6F969BC
Authority key identifier: 82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/c9WbntF9gR3KJec5hPL6qiZa-58.roa
Signing time: Mon 01 Jan 2024 18:31:00 +0000
ROA not before: Mon 01 Jan 2024 18:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63023
IP address blocks: 192.166.225.0/24 maxlen: 24
192.166.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:03:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:1c:f9:45:36:19:96:8d:1c:36:c3:c6:f9:69:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826be1fb71af48d6b318510aa8bdf9a815f33db8
Validity
Not Before: Jan 1 18:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73d59b9ed17d811dca25e73984f2faaa265afb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:2c:1e:68:db:0b:f7:34:b3:e9:3c:fa:59:
20:64:5d:2c:49:3f:c3:26:3d:b8:52:e4:cc:6d:5d:
57:f6:38:46:be:bd:c3:64:4f:e1:36:78:90:55:1f:
1d:2e:40:04:2f:0b:3c:85:24:d0:62:5b:5e:78:cf:
c6:15:c3:64:57:57:00:ec:a9:f7:30:76:b6:bb:cd:
54:cb:6e:54:97:4b:5f:dc:b3:3d:45:f7:01:5b:07:
59:ac:f7:9a:a9:16:c6:66:6d:f3:6e:77:b1:ec:b0:
bb:f3:f7:ef:5a:b1:98:68:7d:a0:5f:40:64:d1:39:
07:2b:07:0c:e2:d7:7d:16:b6:4b:7b:c7:1a:39:a0:
0f:61:ad:7c:55:4a:0e:69:d0:3f:d9:bd:b8:7e:fc:
a4:e8:c4:91:0d:24:ab:04:24:ce:45:86:36:56:42:
a2:78:5e:e4:7d:09:4e:17:ea:83:06:ab:12:2c:2d:
0e:69:15:02:92:f7:43:f7:5f:2c:7d:10:68:06:7a:
c0:6d:df:4d:87:8c:9d:ad:60:8f:44:cc:60:72:8a:
9b:ed:b8:aa:b0:97:2a:a5:22:67:0e:25:6a:85:b4:
4d:fe:15:47:7b:21:16:35:e6:ad:dc:8b:84:04:73:
45:e6:86:8c:7f:ed:cc:29:e5:c4:b0:fb:88:44:9a:
18:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D5:9B:9E:D1:7D:81:1D:CA:25:E7:39:84:F2:FA:AA:26:5A:FB:9F
X509v3 Authority Key Identifier:
keyid:82:6B:E1:FB:71:AF:48:D6:B3:18:51:0A:A8:BD:F9:A8:15:F3:3D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmvh-3GvSNazGFEKqL35qBXzPbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/c9WbntF9gR3KJec5hPL6qiZa-58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac689b-0e36-49fd-8f9c-ded720142744/1/gmvh-3GvSNazGFEKqL35qBXzPbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.224.0/23
Signature Algorithm: sha256WithRSAEncryption
55:c9:5a:64:17:50:6b:5d:ee:1a:7b:6a:a1:8c:db:c3:ae:9e:
4e:af:7f:9b:b0:c7:af:7e:52:95:fb:d7:0d:60:b3:58:ce:47:
b3:e9:97:49:8c:75:a8:16:b6:8a:d8:5a:c2:e4:13:b1:06:3d:
5e:09:ec:c4:38:01:ba:10:23:3b:a3:47:50:6d:28:10:23:80:
11:27:c4:15:8b:03:94:37:a2:f5:bf:d5:cb:59:e4:14:04:81:
c4:03:a1:c0:36:41:c4:d4:28:79:da:33:21:71:7c:2c:e6:d9:
63:8f:94:c3:58:48:9f:17:25:a3:f8:cd:61:a1:90:d6:f8:d6:
e8:73:3c:91:9e:b5:e5:74:d0:76:d9:3d:69:43:54:63:8e:e8:
af:0e:56:3e:2a:d9:75:a8:19:5f:ee:39:b7:4a:34:e0:57:b3:
7b:1e:87:a7:08:bd:93:5f:94:42:80:4e:63:d8:4d:ed:e4:f7:
ab:39:d2:53:ef:32:5b:cb:3e:4e:53:b9:c7:11:f3:7b:c0:ee:
8a:eb:cb:fe:fe:86:d6:be:71:56:90:3b:85:b0:77:46:d5:2d:
8f:60:9d:20:d4:8d:cd:da:7a:04:a3:15:14:08:de:73:84:7b:
b7:d6:a0:9e:9f:20:6c:8f:47:07:9b:f9:63:bc:cd:d3:f0:83:
5e:1f:7e:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSxz5RTYZlo0cNsPG+Wm8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNmJlMWZiNzFhZjQ4ZDZiMzE4NTEwYWE4YmRmOWE4MTVm
MzNkYjgwHhcNMjQwMTAxMTgzMTAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2Q1OWI5ZWQxN2Q4MTFkY2EyNWU3Mzk4NGYyZmFhYTI2NWFmYjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5QsHmjbC/c0s+k8+lkgZF0sST/D
Jj24UuTMbV1X9jhGvr3DZE/hNniQVR8dLkAELws8hSTQYlteeM/GFcNkV1cA7Kn3
MHa2u81Uy25Ul0tf3LM9RfcBWwdZrPeaqRbGZm3zbnex7LC78/fvWrGYaH2gX0Bk
0TkHKwcM4td9FrZLe8caOaAPYa18VUoOadA/2b24fvyk6MSRDSSrBCTORYY2VkKi
eF7kfQlOF+qDBqsSLC0OaRUCkvdD918sfRBoBnrAbd9Nh4ydrWCPRMxgcoqb7biq
sJcqpSJnDiVqhbRN/hVHeyEWNeat3IuEBHNF5oaMf+3MKeXEsPuIRJoYHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHPVm57RfYEdyiXnOYTy+qomWvufMB8GA1UdIwQY
MBaAFIJr4ftxr0jWsxhRCqi9+agV8z24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ212aC0zR3ZTTmF6R0ZFS3FMMzVxQlh6UGJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9hYzY4OWItMGUzNi00OWZkLThmOWMt
ZGVkNzIwMTQyNzQ0LzEvYzlXYm50RjlnUjNLSmVjNWhQTDZxaVphLTU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9hYzY4OWItMGUzNi00OWZkLThmOWMtZGVkNzIwMTQyNzQ0
LzEvZ212aC0zR3ZTTmF6R0ZFS3FMMzVxQlh6UGJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwKbgMA0G
CSqGSIb3DQEBCwUAA4IBAQBVyVpkF1BrXe4ae2qhjNvDrp5Or3+bsMevflKV+9cN
YLNYzkez6ZdJjHWoFraK2FrC5BOxBj1eCezEOAG6ECM7o0dQbSgQI4ARJ8QViwOU
N6L1v9XLWeQUBIHEA6HANkHE1Ch52jMhcXws5tljj5TDWEifFyWj+M1hoZDW+Nbo
czyRnrXldNB22T1pQ1RjjuivDlY+Ktl1qBlf7jm3SjTgV7N7HoenCL2TX5RCgE5j
2E3t5PerOdJT7zJbyz5OU7nHEfN7wO6K68v+/obWvnFWkDuFsHdG1S2PYJ0g1I3N
2noEoxUUCN5zhHu31qCenyBsj0cHm/ljvM3T8INeH36v
-----END CERTIFICATE-----
Generated at Wed May 8 18:11:16 2024 by rpki-client on console-ams.rpki-client.org