Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/gvLSD1KNVwArnyr-Id8mBXa2Dzw.roa
File: gvLSD1KNVwArnyr-Id8mBXa2Dzw.roa (raw, json)
Hash identifier: YZNQAOQV8dmJRmFb4oME7iY/DdYCHIaGT0214pIYTeI=
Subject key identifier: 82:F2:D2:0F:52:8D:57:00:2B:9F:2A:FE:21:DF:26:05:76:B6:0F:3C
Certificate issuer: /CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Certificate serial: 018CC726D3EF105B46281B9BE3FAF6734485
Authority key identifier: DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/gvLSD1KNVwArnyr-Id8mBXa2Dzw.roa
Signing time: Mon 01 Jan 2024 22:30:59 +0000
ROA not before: Mon 01 Jan 2024 22:30:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54574
IP address blocks: 193.41.248.0/24 maxlen: 24
193.41.250.0/24 maxlen: 24
193.110.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:d3:ef:10:5b:46:28:1b:9b:e3:fa:f6:73:44:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Validity
Not Before: Jan 1 22:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82f2d20f528d57002b9f2afe21df260576b60f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:a0:4e:dc:1e:66:75:d4:11:4d:f2:e2:a7:
1e:ac:e7:d1:b0:78:f6:9a:49:5d:d7:6f:f8:99:e1:
ec:30:97:4d:0e:2c:9e:f8:ef:43:7b:49:99:c8:80:
00:48:78:51:9b:8d:28:c3:15:ff:e5:df:11:b6:59:
17:37:e3:d7:25:4c:42:6d:f6:65:4e:f7:55:e4:90:
a1:62:bb:a1:51:ae:57:e0:3f:92:51:b7:da:be:ca:
d1:69:d5:e8:2a:3b:0b:1b:7a:48:69:82:70:50:09:
ee:46:3f:9b:89:12:fe:41:a8:36:8c:e6:ea:04:0a:
6e:01:00:be:94:d3:c2:46:fd:7c:c5:60:c8:7a:1d:
ff:ba:0d:0d:3c:14:66:f6:a6:6d:e4:51:45:33:36:
72:8f:e0:f9:24:ab:fd:63:91:48:53:73:21:53:5e:
0d:5a:1a:f4:7e:c2:ad:ca:27:c1:55:55:94:bb:eb:
6b:c6:45:2e:0d:e3:0d:d7:2b:a1:5c:b7:59:b8:0f:
7e:e2:cb:4c:c6:cc:ea:d8:9a:e9:3c:7a:4f:b4:f3:
ba:e0:46:b5:a0:af:9d:5d:1f:5e:b2:fc:8d:f6:76:
09:a0:17:34:da:70:eb:af:eb:c1:8c:09:28:e4:84:
e7:16:e0:d9:e5:b6:d9:35:59:8e:bf:00:bd:4b:07:
35:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F2:D2:0F:52:8D:57:00:2B:9F:2A:FE:21:DF:26:05:76:B6:0F:3C
X509v3 Authority Key Identifier:
keyid:DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/gvLSD1KNVwArnyr-Id8mBXa2Dzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.248.0/24
193.41.250.0/24
193.110.200.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:48:a2:a8:5c:c5:be:41:0e:db:92:77:b8:63:1f:7f:67:9f:
dc:65:c2:75:b4:0e:45:6b:ed:69:9d:d3:f9:2f:3c:1c:e2:1e:
54:c2:80:05:f1:87:85:92:64:d2:d9:27:8c:11:5c:ac:55:8f:
ca:e7:b2:59:17:fb:a7:8f:f9:3e:c3:5f:73:f0:b3:51:2b:d3:
53:b1:c5:91:ee:7a:d9:a9:11:f6:4a:33:1b:d5:c3:d9:b8:18:
85:4d:5b:f9:7e:73:9f:db:f5:6f:1a:e0:7d:b8:32:4b:fa:49:
4c:33:e0:1d:02:df:11:69:81:e5:dd:e6:3d:0e:f0:ea:4d:12:
af:fd:29:aa:7a:32:35:ef:77:39:1b:b2:f4:07:10:95:bb:06:
25:2d:f9:e1:37:9b:30:e9:98:a7:f7:8e:33:97:2a:56:69:66:
59:11:ed:33:17:ee:6a:02:72:47:94:e6:8a:96:b3:36:14:14:
9a:22:95:fb:76:2b:bc:fa:37:e6:b5:b3:9c:e2:bc:0e:d4:12:
5e:f1:00:48:fd:e0:f3:08:47:f3:a4:cf:e4:f1:1a:47:c7:b0:
61:d4:26:a1:83:eb:cd:a8:c2:91:46:2a:01:22:d7:3f:95:f6:
4c:ed:2f:07:41:41:e1:b8:b0:c9:0b:95:2b:53:b0:70:c8:57:
15:da:62:cb
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzHJtPvEFtGKBub4/r2c0SFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYmZiMDA0OGE4ZGE1NTZmZDlkM2RmMTA3NzQwMmY4NDNm
NWQ3MDMwHhcNMjQwMTAxMjIzMDU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmYyZDIwZjUyOGQ1NzAwMmI5ZjJhZmUyMWRmMjYwNTc2YjYwZjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN+gTtweZnXUEU3y4qcerOfRsHj2
mkld12/4meHsMJdNDiye+O9De0mZyIAASHhRm40owxX/5d8RtlkXN+PXJUxCbfZl
TvdV5JChYruhUa5X4D+SUbfavsrRadXoKjsLG3pIaYJwUAnuRj+biRL+Qag2jObq
BApuAQC+lNPCRv18xWDIeh3/ug0NPBRm9qZt5FFFMzZyj+D5JKv9Y5FIU3MhU14N
Whr0fsKtyifBVVWUu+trxkUuDeMN1yuhXLdZuA9+4stMxszq2JrpPHpPtPO64Ea1
oK+dXR9esvyN9nYJoBc02nDrr+vBjAko5ITnFuDZ5bbZNVmOvwC9Swc1NwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFILy0g9SjVcAK58q/iHfJgV2tg88MB8GA1UdIwQY
MBaAFNy/sASKjaVW/Z098Qd0AvhD9dcDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0wtd0JJcU5wVmI5blQzeEIzUUMtRVAxMXdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kY2I3MGQtNzk0Ny00NTY5LWJjODQt
ZTA2MGI0ZmNiY2NiLzEvZ3ZMU0QxS05Wd0FybnlyLUlkOG1CWGEyRHp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kY2I3MGQtNzk0Ny00NTY5LWJjODQtZTA2MGI0ZmNiY2Ni
LzEvM0wtd0JJcU5wVmI5blQzeEIzUUMtRVAxMXdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwSn4AwQA
wSn6AwQCwW7IMA0GCSqGSIb3DQEBCwUAA4IBAQAvSKKoXMW+QQ7bkne4Yx9/Z5/c
ZcJ1tA5Fa+1pndP5Lzwc4h5UwoAF8YeFkmTS2SeMEVysVY/K57JZF/unj/k+w19z
8LNRK9NTscWR7nrZqRH2SjMb1cPZuBiFTVv5fnOf2/VvGuB9uDJL+klMM+AdAt8R
aYHl3eY9DvDqTRKv/SmqejI173c5G7L0BxCVuwYlLfnhN5sw6Zin944zlypWaWZZ
Ee0zF+5qAnJHlOaKlrM2FBSaIpX7diu8+jfmtbOc4rwO1BJe8QBI/eDzCEfzpM/k
8RpHx7Bh1Cahg+vNqMKRRioBItc/lfZM7S8HQUHhuLDJC5UrU7BwyFcV2mLL
-----END CERTIFICATE-----
Generated at Mon Jun 3 21:47:10 2024 by rpki-client on console-ams.rpki-client.org