Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/GZ60pi53JQHL415nSbZmk_TNIhQ.roa
File: GZ60pi53JQHL415nSbZmk_TNIhQ.roa (raw, json)
Hash identifier: nYbJC2JKelKLxp1F+vxGnWykGpglryRcqUp4uxrnU+E=
Subject key identifier: 19:9E:B4:A6:2E:77:25:01:CB:E3:5E:67:49:B6:66:93:F4:CD:22:14
Certificate issuer: /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Certificate serial: 018E5CC6D8C79668277FA2C62B5E4DB2C371
Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/GZ60pi53JQHL415nSbZmk_TNIhQ.roa
Signing time: Wed 20 Mar 2024 16:51:59 +0000
ROA not before: Wed 20 Mar 2024 16:51:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39521
IP address blocks: 193.178.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5c:c6:d8:c7:96:68:27:7f:a2:c6:2b:5e:4d:b2:c3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Validity
Not Before: Mar 20 16:51:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=199eb4a62e772501cbe35e6749b66693f4cd2214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:06:32:55:ac:af:21:44:f6:10:73:90:b3:
17:b5:10:61:6d:c4:87:1c:81:2d:f4:18:8b:7e:09:
f1:43:22:1b:39:d6:93:0d:49:45:7d:c4:81:a2:f0:
ed:e2:11:49:95:a1:10:d7:9c:2d:65:c6:d3:6b:e2:
f2:01:ec:08:0c:8c:8c:1b:f8:1a:a7:6d:ab:da:a0:
0d:ab:a2:03:0f:f6:40:e8:a1:99:d4:8d:a7:ae:1f:
a8:97:9c:20:5a:60:94:0b:99:3e:9a:3b:f1:bb:f2:
48:d4:95:3f:80:4f:2d:a9:9a:6f:46:57:8b:3d:33:
6c:b6:ff:f1:98:bc:76:d0:70:f2:32:a6:d7:60:1d:
ec:4b:4b:44:47:59:40:98:75:bf:01:7f:94:30:c7:
57:59:9d:7c:e9:73:53:1f:c5:28:a2:0a:49:84:33:
ac:99:eb:04:e0:0b:b0:ed:3c:86:c4:c5:aa:93:a5:
2c:89:39:ad:fb:3b:0b:39:fd:cd:b4:c4:fa:32:5d:
93:86:fa:25:44:7f:ee:a0:2a:93:97:d8:64:da:2f:
68:37:4a:57:db:b1:2b:63:63:42:ad:8b:b2:f7:14:
5a:03:14:90:c3:63:e8:2c:00:f9:2e:9b:be:8d:ca:
81:38:90:56:43:cb:93:d9:0a:bc:7d:eb:f7:7e:0b:
fc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9E:B4:A6:2E:77:25:01:CB:E3:5E:67:49:B6:66:93:F4:CD:22:14
X509v3 Authority Key Identifier:
keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/GZ60pi53JQHL415nSbZmk_TNIhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.227.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ef:d4:12:25:e5:f1:9b:d6:df:8d:65:cc:ec:51:d8:b8:c5:
f4:60:90:8c:26:10:f3:26:07:f6:65:de:8d:bf:35:2f:46:56:
97:81:d9:04:fc:c9:c3:a3:e0:86:7e:4d:bc:8a:d3:64:21:fe:
48:78:4f:88:a3:57:dd:5a:88:5c:7d:13:82:5a:54:d1:e5:df:
4c:9e:17:17:7e:9e:b0:e6:22:4b:18:3e:90:d7:2d:8f:6d:6a:
31:cb:73:97:75:0f:10:7e:07:24:a4:a7:e3:ec:73:9e:85:f0:
a4:53:5c:3e:70:3a:c0:eb:9f:c9:0e:88:bf:e2:43:ad:40:4a:
0d:cd:cf:81:74:0c:60:aa:8a:4c:14:bb:1e:dc:9b:1e:ae:df:
cf:b1:92:5d:81:2c:c2:4a:23:5f:6a:3f:2d:fc:60:b6:cc:e7:
32:6b:41:bd:86:1c:84:4d:6a:06:16:5a:32:6f:fb:24:18:77:
f3:0d:e0:3c:6d:a4:7f:e4:67:f8:44:f1:8e:e3:b5:cd:cb:a9:
e5:1b:3a:5d:07:a6:1d:37:27:98:59:df:30:2d:fc:90:5d:0d:
ab:72:cb:25:c3:de:2d:91:e7:75:dd:1d:25:72:50:33:8b:75:
8b:36:e7:2a:50:fb:02:d1:95:37:f9:79:bd:40:64:f5:1c:03:
81:63:d3:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY5cxtjHlmgnf6LGK15NssNxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNjY5YzBjMDg1Y2M5NzhhMzcyYTBlNGYwNTY0ODM5OGUx
ZTdmZTgwHhcNMjQwMzIwMTY1MTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTllYjRhNjJlNzcyNTAxY2JlMzVlNjc0OWI2NjY5M2Y0Y2QyMjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJcGMlWsryFE9hBzkLMXtRBhbcSH
HIEt9BiLfgnxQyIbOdaTDUlFfcSBovDt4hFJlaEQ15wtZcbTa+LyAewIDIyMG/ga
p22r2qANq6IDD/ZA6KGZ1I2nrh+ol5wgWmCUC5k+mjvxu/JI1JU/gE8tqZpvRleL
PTNstv/xmLx20HDyMqbXYB3sS0tER1lAmHW/AX+UMMdXWZ186XNTH8UoogpJhDOs
mesE4Auw7TyGxMWqk6UsiTmt+zsLOf3NtMT6Ml2ThvolRH/uoCqTl9hk2i9oN0pX
27ErY2NCrYuy9xRaAxSQw2PoLAD5Lpu+jcqBOJBWQ8uT2Qq8fev3fgv80wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBmetKYudyUBy+NeZ0m2ZpP0zSIUMB8GA1UdIwQY
MBaAFBNmnAwIXMl4o3Kg5PBWSDmOHn/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTJhY0RBaGN5WGlqY3FEazhGWklPWTRlZi1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lMzkzZDgtMTI1Mi00YzI3LWJhYWEt
NTNiMDQzNDI3ODNkLzEvR1o2MHBpNTNKUUhMNDE1blNiWm1rX1ROSWhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lMzkzZDgtMTI1Mi00YzI3LWJhYWEtNTNiMDQzNDI3ODNk
LzEvRTJhY0RBaGN5WGlqY3FEazhGWklPWTRlZi1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbLjMA0G
CSqGSIb3DQEBCwUAA4IBAQAU79QSJeXxm9bfjWXM7FHYuMX0YJCMJhDzJgf2Zd6N
vzUvRlaXgdkE/MnDo+CGfk28itNkIf5IeE+Io1fdWohcfROCWlTR5d9MnhcXfp6w
5iJLGD6Q1y2PbWoxy3OXdQ8QfgckpKfj7HOehfCkU1w+cDrA65/JDoi/4kOtQEoN
zc+BdAxgqopMFLse3Jsert/PsZJdgSzCSiNfaj8t/GC2zOcya0G9hhyETWoGFloy
b/skGHfzDeA8baR/5Gf4RPGO47XNy6nlGzpdB6YdNyeYWd8wLfyQXQ2rcsslw94t
ked13R0lclAzi3WLNucqUPsC0ZU3+Xm9QGT1HAOBY9PZ
-----END CERTIFICATE-----
Generated at Thu May 9 18:06:02 2024 by rpki-client on console-ams.rpki-client.org