Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/GVZUC0rsnJQ_sIBtkI8ZsdyoWyk.roa
File: GVZUC0rsnJQ_sIBtkI8ZsdyoWyk.roa (raw, json)
Hash identifier: X6+WjYU4u92P6QuF2cfdvTIGyt+YNPourgL+oCE8uTI=
Subject key identifier: 19:56:54:0B:4A:EC:9C:94:3F:B0:80:6D:90:8F:19:B1:DC:A8:5B:29
Certificate issuer: /CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Certificate serial: 019423D6FF9EB31CB540AA992E8002C2A7FD
Authority key identifier: 06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/GVZUC0rsnJQ_sIBtkI8ZsdyoWyk.roa
Signing time: Wed 01 Jan 2025 21:48:00 +0000
ROA not before: Wed 01 Jan 2025 21:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51412
IP address blocks: 193.150.152.0/21 maxlen: 21
193.150.156.0/22 maxlen: 22
193.150.156.0/24 maxlen: 24
193.150.160.0/22 maxlen: 22
193.150.160.0/24 maxlen: 24
193.150.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ff:9e:b3:1c:b5:40:aa:99:2e:80:02:c2:a7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Validity
Not Before: Jan 1 21:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1956540b4aec9c943fb0806d908f19b1dca85b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:20:37:d1:9e:a3:67:1b:26:cf:53:44:c0:
95:a2:88:46:4c:11:55:7d:68:38:c6:ba:aa:88:fa:
f6:b1:07:39:91:47:66:32:99:9f:4e:5d:84:42:d7:
67:e6:16:e6:9c:e9:91:92:e1:a8:21:cc:89:60:4b:
1a:a7:83:57:44:bf:05:7d:20:5b:d8:92:47:c0:ea:
64:15:41:b5:f7:a6:74:83:fe:07:0e:cd:4c:7b:fe:
bb:9c:3c:37:6d:92:70:47:f7:42:4f:ef:6d:37:a7:
43:0d:85:42:df:94:ff:ae:a5:61:ec:89:02:8c:79:
23:a4:b2:39:06:d6:8c:47:e1:51:7f:a3:38:fc:20:
48:2e:a4:9a:42:8b:85:70:73:be:92:2c:c5:67:b5:
a7:e5:1a:ea:13:99:8a:ac:99:c2:73:b3:6f:e4:fd:
5c:b4:c9:81:e2:6d:14:ac:9a:c2:ab:e8:2d:86:a1:
f4:43:7e:21:3b:b5:82:e5:1e:d5:f0:fc:7d:2b:98:
ea:b9:a4:ac:fb:68:70:f2:83:d3:fb:81:63:c5:57:
6f:b3:97:02:24:16:57:eb:0a:81:0f:77:da:9d:dc:
f9:c7:9b:b3:fd:68:cf:88:8c:57:0a:bc:b9:b7:8a:
8e:41:7d:d3:64:6e:5d:9f:46:e0:8b:06:52:fc:d9:
e6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:56:54:0B:4A:EC:9C:94:3F:B0:80:6D:90:8F:19:B1:DC:A8:5B:29
X509v3 Authority Key Identifier:
keyid:06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/GVZUC0rsnJQ_sIBtkI8ZsdyoWyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.152.0-193.150.164.255
Signature Algorithm: sha256WithRSAEncryption
09:97:e8:5c:cf:b2:98:b4:86:cf:97:27:10:d6:87:a3:18:cb:
f7:02:4e:c8:7b:8c:e1:e7:fb:4d:b3:40:fa:90:3e:7b:90:e7:
dd:a2:46:30:81:2d:a9:c9:0b:9e:94:de:c5:25:cd:f6:a0:de:
7a:ed:0b:1c:0e:5e:85:3c:9f:8c:bd:9e:4b:eb:89:49:e0:17:
86:0a:b3:52:4a:8b:ab:6c:c9:90:5b:d3:a9:9c:1e:16:68:17:
40:82:67:71:77:26:5c:e3:62:90:1f:02:0e:44:67:cf:be:ea:
b4:c8:93:9e:ac:e6:5e:76:e6:74:e3:7d:e7:29:18:3e:57:ab:
38:55:3a:be:d0:ab:2d:7e:82:2f:39:2f:08:b5:09:94:39:c9:
91:1b:dc:76:d9:04:64:5b:4e:4d:5e:c1:2a:18:76:da:61:52:
f3:9b:54:c7:2d:eb:3e:29:9d:1d:09:6b:bd:2a:08:36:0b:23:
f5:e0:6d:69:06:68:13:12:ca:24:cc:f0:7c:9c:29:9f:af:b7:
94:23:8b:3e:3b:99:76:49:44:56:be:9a:67:10:52:10:08:c9:
d9:3a:2d:97:e3:92:60:f6:44:1c:90:d1:28:74:d5:a3:05:81:
83:69:eb:d7:ee:76:86:f1:2b:6e:0c:fe:8b:49:c3:97:ca:13:
62:7d:e4:29
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQj1v+esxy1QKqZLoACwqf9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ZjkyZTY4MzFkZjFmMmViY2Q1ZDVlYjBlNTk5OWM1YjA0
NzVjNTEwHhcNMjUwMTAxMjE0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTU2NTQwYjRhZWM5Yzk0M2ZiMDgwNmQ5MDhmMTliMWRjYTg1YjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtIgN9Geo2cbJs9TRMCVoohGTBFV
fWg4xrqqiPr2sQc5kUdmMpmfTl2EQtdn5hbmnOmRkuGoIcyJYEsap4NXRL8FfSBb
2JJHwOpkFUG196Z0g/4HDs1Me/67nDw3bZJwR/dCT+9tN6dDDYVC35T/rqVh7IkC
jHkjpLI5BtaMR+FRf6M4/CBILqSaQouFcHO+kizFZ7Wn5RrqE5mKrJnCc7Nv5P1c
tMmB4m0UrJrCq+gthqH0Q34hO7WC5R7V8Px9K5jquaSs+2hw8oPT+4FjxVdvs5cC
JBZX6wqBD3fandz5x5uz/WjPiIxXCry5t4qOQX3TZG5dn0bgiwZS/NnmOQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFBlWVAtK7JyUP7CAbZCPGbHcqFspMB8GA1UdIwQY
MBaAFAb5Lmgx3x8uvNXV6w5ZmcWwR1xRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnZrdWFESGZIeTY4MWRYckRsbVp4YkJIWEZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy84ZDBiY2YtNmYzNS00ZDc5LTg4NGEt
NTAyYjc3Y2U5MmY4LzEvR1ZaVUMwcnNuSlFfc0lCdGtJOFpzZHlvV3lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy84ZDBiY2YtNmYzNS00ZDc5LTg4NGEtNTAyYjc3Y2U5MmY4
LzEvQnZrdWFESGZIeTY4MWRYckRsbVp4YkJIWEZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAPBlpgD
BADBlqQwDQYJKoZIhvcNAQELBQADggEBAAmX6FzPspi0hs+XJxDWh6MYy/cCTsh7
jOHn+02zQPqQPnuQ592iRjCBLanJC56U3sUlzfag3nrtCxwOXoU8n4y9nkvriUng
F4YKs1JKi6tsyZBb06mcHhZoF0CCZ3F3JlzjYpAfAg5EZ8++6rTIk56s5l525nTj
fecpGD5XqzhVOr7Qqy1+gi85Lwi1CZQ5yZEb3HbZBGRbTk1ewSoYdtphUvObVMct
6z4pnR0Ja70qCDYLI/XgbWkGaBMSyiTM8HycKZ+vt5Qjiz47mXZJRFa+mmcQUhAI
ydk6LZfjkmD2RByQ0Sh01aMFgYNp69fudobxK24M/otJw5fKE2J95Ck=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:13:49 2025 by rpki-client