Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/cGlW5nHeTV10R78Ry-cvh8igr4o.roa
File: cGlW5nHeTV10R78Ry-cvh8igr4o.roa (raw, json)
Hash identifier: mxdOh5PV9LNV5zqw+wXdbziXrb7ysIMxs0ztmw7k+d0=
Subject key identifier: 70:69:56:E6:71:DE:4D:5D:74:47:BF:11:CB:E7:2F:87:C8:A0:AF:8A
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 018EA787E6511D723BC17C26DE0FF89815EC
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/cGlW5nHeTV10R78Ry-cvh8igr4o.roa
Signing time: Thu 04 Apr 2024 05:14:45 +0000
ROA not before: Thu 04 Apr 2024 05:14:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 194.165.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a7:87:e6:51:1d:72:3b:c1:7c:26:de:0f:f8:98:15:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: Apr 4 05:14:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=706956e671de4d5d7447bf11cbe72f87c8a0af8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:b4:19:a6:10:8b:44:74:f8:bc:a5:59:7d:
e6:be:2d:86:a2:81:98:53:69:68:50:09:19:0f:80:
58:6e:12:bf:6a:0e:14:fe:67:96:48:8b:58:3e:74:
a5:1d:f4:73:ca:f0:6c:be:43:67:e4:49:8b:60:00:
91:c4:e7:14:6f:9c:fd:9d:c8:f6:ed:00:72:a8:50:
4b:5e:f1:03:91:79:48:c1:1b:d9:70:7a:94:ef:b3:
34:28:cf:f7:9e:e5:40:8b:d7:2f:e0:bf:34:5b:49:
48:c5:8c:99:f2:17:38:19:0b:b7:9a:72:38:92:9d:
9a:88:d8:1b:56:20:84:fd:a2:73:41:25:58:c3:06:
b7:a6:f4:b6:12:ea:30:b2:41:2b:81:34:67:d0:f4:
5b:d2:68:11:4c:90:e6:58:27:d5:a8:83:8a:dc:ae:
aa:31:e0:d5:2e:b2:2f:3e:de:f5:91:9c:5b:2b:48:
89:59:99:49:5d:00:a1:08:eb:25:2a:f9:1b:7f:b0:
ad:ef:00:47:1b:39:21:01:a1:ff:02:4c:14:4e:08:
b9:9e:18:4c:1b:31:f8:cb:00:26:5b:d7:67:a3:db:
24:93:62:b2:a0:8f:9e:c5:c9:44:3e:e3:76:2c:7d:
cc:8d:83:3c:69:52:f8:cb:9b:bd:af:db:d7:57:17:
06:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:69:56:E6:71:DE:4D:5D:74:47:BF:11:CB:E7:2F:87:C8:A0:AF:8A
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/cGlW5nHeTV10R78Ry-cvh8igr4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.37.0/24
Signature Algorithm: sha256WithRSAEncryption
82:91:e6:8a:74:66:62:9c:52:52:6f:6e:cc:84:b0:19:7e:45:
78:bb:db:ae:11:c0:3a:4d:86:32:53:0e:b2:cf:dd:95:0b:ae:
79:d3:19:aa:65:af:8f:68:37:4e:f4:03:f1:64:53:80:01:bd:
a8:07:25:a9:4d:6f:46:04:c4:93:e4:11:44:3f:f9:c1:38:4a:
f9:27:74:ea:e3:2e:35:88:01:29:ef:e9:de:ce:99:22:de:a2:
d6:28:71:7a:9f:5c:87:da:26:f4:c4:27:02:65:65:58:15:c0:
ce:d7:db:e1:63:cd:3a:a3:fd:9d:3e:54:d3:2c:cc:3e:14:ed:
00:81:6d:0b:29:6e:60:e6:c2:b6:0e:1b:8c:47:f5:e2:94:f5:
a2:8c:e2:5e:13:43:2a:24:e9:3e:15:88:26:7a:58:b7:b9:6f:
e2:a1:b1:95:e4:7c:0e:2f:f0:ca:ab:f1:dc:9c:6d:a1:2e:8f:
1c:de:b4:99:30:71:13:77:8d:32:8f:60:80:c3:b9:c3:49:8e:
fd:b3:3f:bd:35:11:9c:5f:75:aa:30:ef:95:68:34:41:b1:aa:
bd:b0:17:f2:ad:b4:aa:61:4b:68:40:cc:24:69:36:12:70:ab:
e8:7f:35:51:93:aa:f8:3d:f7:f6:c3:68:42:89:50:f7:35:36:
e3:f5:fc:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY6nh+ZRHXI7wXwm3g/4mBXsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NjQzOGU5ODg5Mzg5ODI5ZmE1ZjUxYjZhMjEwNzMxMDgy
ZWFjMjIwHhcNMjQwNDA0MDUxNDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDY5NTZlNjcxZGU0ZDVkNzQ0N2JmMTFjYmU3MmY4N2M4YTBhZjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VS0GaYQi0R0+LylWX3mvi2GooGY
U2loUAkZD4BYbhK/ag4U/meWSItYPnSlHfRzyvBsvkNn5EmLYACRxOcUb5z9ncj2
7QByqFBLXvEDkXlIwRvZcHqU77M0KM/3nuVAi9cv4L80W0lIxYyZ8hc4GQu3mnI4
kp2aiNgbViCE/aJzQSVYwwa3pvS2EuowskErgTRn0PRb0mgRTJDmWCfVqIOK3K6q
MeDVLrIvPt71kZxbK0iJWZlJXQChCOslKvkbf7Ct7wBHGzkhAaH/AkwUTgi5nhhM
GzH4ywAmW9dno9skk2KyoI+exclEPuN2LH3MjYM8aVL4y5u9r9vXVxcGwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHBpVuZx3k1ddEe/EcvnL4fIoK+KMB8GA1UdIwQY
MBaAFAhkOOmIk4mCn6X1G2ohBzEILqwiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0dRNDZZaVRpWUtmcGZVYmFpRUhNUWd1ckNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lNDlhZTctYTUxYS00NzY0LTg1Yzgt
YTc4MTBlM2ExYmViLzEvY0dsVzVuSGVUVjEwUjc4UnktY3ZoOGlncjRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9lNDlhZTctYTUxYS00NzY0LTg1YzgtYTc4MTBlM2ExYmVi
LzEvQ0dRNDZZaVRpWUtmcGZVYmFpRUhNUWd1ckNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwqUlMA0G
CSqGSIb3DQEBCwUAA4IBAQCCkeaKdGZinFJSb27MhLAZfkV4u9uuEcA6TYYyUw6y
z92VC6550xmqZa+PaDdO9APxZFOAAb2oByWpTW9GBMST5BFEP/nBOEr5J3Tq4y41
iAEp7+nezpki3qLWKHF6n1yH2ib0xCcCZWVYFcDO19vhY806o/2dPlTTLMw+FO0A
gW0LKW5g5sK2DhuMR/XilPWijOJeE0MqJOk+FYgmeli3uW/iobGV5HwOL/DKq/Hc
nG2hLo8c3rSZMHETd40yj2CAw7nDSY79sz+9NRGcX3WqMO+VaDRBsaq9sBfyrbSq
YUtoQMwkaTYScKvofzVRk6r4Pff2w2hCiVD3NTbj9fxs
-----END CERTIFICATE-----
Generated at Thu May 2 18:22:17 2024 by rpki-client on console-fra.rpki-client.org