Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/GUBCJGyCMnfsLZRKWQOC_PIS-qc.roa
File: GUBCJGyCMnfsLZRKWQOC_PIS-qc.roa (raw, json)
Hash identifier: pmYpO743A7hL/AQqkdZhMdvzJRqYN/+xW62o48h1ic0=
Subject key identifier: 19:40:42:24:6C:82:32:77:EC:2D:94:4A:59:03:82:FC:F2:12:FA:A7
Certificate issuer: /CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Certificate serial: 018E5C1245BB449C92ACED72F39DEA27B8E5
Authority key identifier: E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/GUBCJGyCMnfsLZRKWQOC_PIS-qc.roa
Signing time: Wed 20 Mar 2024 13:34:45 +0000
ROA not before: Wed 20 Mar 2024 13:34:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202333
IP address blocks: 194.156.214.0/24 maxlen: 24
194.156.215.0/24 maxlen: 24
2a07:e880::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5c:12:45:bb:44:9c:92:ac:ed:72:f3:9d:ea:27:b8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Validity
Not Before: Mar 20 13:34:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=194042246c823277ec2d944a590382fcf212faa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:83:c1:d5:e8:54:33:c7:38:93:53:54:99:90:
7a:54:cd:43:85:7f:e5:93:0f:0e:60:e6:f1:26:04:
b2:02:4c:70:8f:46:f0:c8:39:7c:d9:2f:a0:35:bb:
f3:02:23:fa:46:c7:ac:d3:ce:2e:98:27:f0:9b:39:
7e:86:f0:1b:2e:1e:2f:81:f9:ca:52:33:d0:25:75:
a2:de:4f:c1:a9:06:5c:c9:8e:34:7f:69:21:de:62:
05:fc:82:c0:eb:93:16:2d:55:20:d9:14:58:5e:6c:
3b:34:aa:7e:80:bc:25:2d:bd:88:55:cb:84:99:7b:
37:da:92:6a:88:37:f5:89:44:0f:e4:d9:16:f9:b3:
18:79:b1:0c:39:88:f9:b5:c6:ed:37:46:c5:5f:b1:
c8:c4:fa:b3:2e:63:85:47:bc:19:dc:46:5a:d7:be:
e5:09:3b:02:00:7f:47:da:51:de:75:3d:6c:48:05:
cc:2f:83:0b:f3:ad:59:09:cf:f7:f3:0d:82:4a:02:
45:06:2d:ec:05:49:bd:86:30:94:57:03:01:74:40:
63:20:ce:47:a7:31:97:b5:e6:ea:7d:33:02:d6:19:
09:a0:67:6a:4b:75:33:4b:be:42:4a:1b:20:14:79:
cb:8e:57:6e:b7:d8:ea:9b:23:6c:c4:d6:ff:67:91:
60:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:40:42:24:6C:82:32:77:EC:2D:94:4A:59:03:82:FC:F2:12:FA:A7
X509v3 Authority Key Identifier:
keyid:E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/GUBCJGyCMnfsLZRKWQOC_PIS-qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.214.0/23
IPv6:
2a07:e880::/30
Signature Algorithm: sha256WithRSAEncryption
4c:ff:0d:2f:c8:54:e6:44:df:34:24:8b:c5:9f:f1:20:f1:44:
e8:73:0b:e4:ad:2d:62:e1:c2:1c:55:b0:3a:e5:06:5d:a2:98:
13:b5:0f:34:75:a6:16:d7:d5:b3:66:27:16:5a:ae:f3:9a:9c:
92:0a:dd:2f:fb:72:21:31:e0:cc:38:ae:be:49:52:dd:0a:4b:
a0:07:1c:72:66:85:b3:10:22:7f:e9:56:24:2c:5d:c1:4c:f5:
59:84:96:34:8f:92:43:d9:19:7f:ad:4e:cb:ac:38:70:74:f0:
83:e0:66:12:c3:c9:fa:1d:c0:d1:7a:d0:e9:9a:f4:6b:2b:55:
59:e4:68:c4:b9:93:b1:e7:a2:63:3a:e8:a1:36:ea:5b:4c:02:
07:e8:4f:bd:c4:49:fa:ad:2b:a1:de:2e:8f:ff:91:b8:1d:7e:
5d:73:6b:33:8f:d4:67:30:29:3b:50:d6:da:0a:e2:77:0c:0b:
15:b1:3c:2c:7b:5b:d4:60:49:40:cb:bd:93:02:dc:e4:9d:a0:
f8:58:71:6b:4f:a4:fe:97:7a:d6:c2:36:b3:c9:c4:ae:20:61:
5f:0b:4e:50:4d:ff:7e:e0:b1:af:b3:b8:12:6b:7e:ce:b0:2b:
f9:e6:4b:0d:79:4b:91:04:03:ac:da:0c:d0:ad:da:55:77:76:
95:86:9e:9e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAY5cEkW7RJySrO1y853qJ7jlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjJiYjkyYmJlZTlmNmRlNzc1N2QyNTZkNDhmNjZlMjA3
ZjQ0YWYwHhcNMjQwMzIwMTMzNDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTQwNDIyNDZjODIzMjc3ZWMyZDk0NGE1OTAzODJmY2YyMTJmYWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4PB1ehUM8c4k1NUmZB6VM1DhX/l
kw8OYObxJgSyAkxwj0bwyDl82S+gNbvzAiP6Rses084umCfwmzl+hvAbLh4vgfnK
UjPQJXWi3k/BqQZcyY40f2kh3mIF/ILA65MWLVUg2RRYXmw7NKp+gLwlLb2IVcuE
mXs32pJqiDf1iUQP5NkW+bMYebEMOYj5tcbtN0bFX7HIxPqzLmOFR7wZ3EZa177l
CTsCAH9H2lHedT1sSAXML4ML861ZCc/38w2CSgJFBi3sBUm9hjCUVwMBdEBjIM5H
pzGXtebqfTMC1hkJoGdqS3UzS75CShsgFHnLjldut9jqmyNsxNb/Z5FgGwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBlAQiRsgjJ37C2USlkDgvzyEvqnMB8GA1UdIwQY
MBaAFOBiu5K77p9t53V9JW1I9m4gf0SvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdLN2tydnVuMjNuZFgwbGJVajJiaUJfUks4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84YWY1MTgtMTU2Ni00YTZiLTgwNGIt
MWFiNWQ2MjA5ZjU3LzEvR1VCQ0pHeUNNbmZzTFpSS1dRT0NfUElTLXFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi84YWY1MTgtMTU2Ni00YTZiLTgwNGItMWFiNWQ2MjA5ZjU3
LzEvNEdLN2tydnVuMjNuZFgwbGJVajJiaUJfUks4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBwpzWMA0E
AgACMAcDBQIqB+iAMA0GCSqGSIb3DQEBCwUAA4IBAQBM/w0vyFTmRN80JIvFn/Eg
8UTocwvkrS1i4cIcVbA65QZdopgTtQ80daYW19WzZicWWq7zmpySCt0v+3IhMeDM
OK6+SVLdCkugBxxyZoWzECJ/6VYkLF3BTPVZhJY0j5JD2Rl/rU7LrDhwdPCD4GYS
w8n6HcDRetDpmvRrK1VZ5GjEuZOx56JjOuihNupbTAIH6E+9xEn6rSuh3i6P/5G4
HX5dc2szj9RnMCk7UNbaCuJ3DAsVsTwse1vUYElAy72TAtzknaD4WHFrT6T+l3rW
wjazycSuIGFfC05QTf9+4LGvs7gSa37OsCv55ksNeUuRBAOs2gzQrdpVd3aVhp6e
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:55:38 2024 by rpki-client on console-ams.rpki-client.org