Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/GbEqg7oKIbh19KO4SUqDVdrF9dQ.roa
File: GbEqg7oKIbh19KO4SUqDVdrF9dQ.roa (raw, json)
Hash identifier: luExIAump1gEgRLnI3FlAsc760St+NZpxES0fOU1IB8=
Subject key identifier: 19:B1:2A:83:BA:0A:21:B8:75:F4:A3:B8:49:4A:83:55:DA:C5:F5:D4
Certificate issuer: /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Certificate serial: 01934820CF19539DD3852CF6C426B61ECB32
Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/GbEqg7oKIbh19KO4SUqDVdrF9dQ.roa
Signing time: Wed 20 Nov 2024 05:52:09 +0000
ROA not before: Wed 20 Nov 2024 05:52:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48813
IP address blocks: 93.115.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:48:20:cf:19:53:9d:d3:85:2c:f6:c4:26:b6:1e:cb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Validity
Not Before: Nov 20 05:52:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19b12a83ba0a21b875f4a3b8494a8355dac5f5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:33:8e:51:b7:67:35:e3:4e:1c:27:47:66:
28:2d:65:b1:37:5a:03:80:9d:2a:46:60:59:4d:5e:
60:39:00:84:e6:c7:18:f7:de:2e:68:d9:00:cb:c5:
dd:8d:85:68:18:64:30:22:c4:a4:4f:e5:9f:20:77:
2f:4d:ad:00:fb:0a:e9:f4:bd:4f:52:0f:1e:fa:43:
ad:08:2d:bf:26:b6:b6:11:08:64:8a:8c:2f:c3:51:
b8:c5:2c:d6:ca:72:9a:9a:72:e6:53:a2:fa:65:87:
89:e1:20:4f:47:1b:62:ce:df:50:18:7a:54:a7:82:
16:44:92:f8:68:00:f0:59:30:1c:01:90:16:35:91:
98:a7:8b:e3:e5:4f:2c:d0:ff:7f:b0:d2:59:db:5f:
4b:01:3f:02:22:e3:c1:42:d7:3a:fe:36:bb:a7:fc:
0a:92:7f:3b:8a:4e:e4:ac:58:4b:d9:f5:10:5c:da:
6f:a0:40:97:a4:71:1f:15:b7:58:8f:7e:4b:0a:79:
ab:f7:a3:77:0c:02:d7:09:ea:43:37:be:59:e7:e8:
cc:8b:67:9e:a0:e9:60:bf:b8:24:96:9f:fe:ab:ba:
f2:70:36:cd:b6:57:1e:b2:81:0c:c2:fd:1a:b0:a1:
9a:e2:a7:b0:61:17:94:a1:74:56:98:0b:f3:61:6c:
d6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B1:2A:83:BA:0A:21:B8:75:F4:A3:B8:49:4A:83:55:DA:C5:F5:D4
X509v3 Authority Key Identifier:
keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/GbEqg7oKIbh19KO4SUqDVdrF9dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.103.0/24
Signature Algorithm: sha256WithRSAEncryption
99:c3:9a:81:2a:32:fd:2c:e0:81:b5:46:07:db:4f:17:a0:63:
ab:ff:bf:f9:e3:fd:e3:94:0a:67:9d:e0:bc:27:aa:63:a0:90:
bb:fc:21:ea:eb:e8:4c:88:86:99:6b:6c:6c:0f:43:d3:26:a7:
51:6f:27:e4:82:8b:50:05:a5:e4:52:80:8d:5a:1b:38:45:65:
f9:5a:01:aa:f6:16:8a:32:b9:32:70:a8:5f:b3:ad:af:70:89:
b7:af:c8:74:23:ad:af:f4:02:2a:52:57:c7:13:3c:d4:ed:fe:
cb:a2:49:bf:e8:5e:57:b9:5c:16:08:71:96:b4:72:9d:18:5d:
66:27:ff:b1:f7:94:61:28:fa:c5:4a:80:a2:ae:f0:2a:c4:cd:
e9:a6:e1:f6:30:ff:db:a4:08:48:6e:d9:d7:8f:62:5f:37:cf:
6a:ec:8b:da:54:73:ad:86:ba:48:bd:68:d2:40:3a:d6:a6:d5:
c2:36:4c:06:9a:d4:ad:c4:14:1c:84:cc:c9:68:d7:27:6a:f8:
71:6f:47:ff:19:68:7b:a9:af:50:18:5a:f2:81:e3:66:4c:ce:
02:59:1c:43:d7:0a:30:c0:61:22:4b:79:40:9f:87:ad:55:68:
f3:47:17:02:78:81:fd:3c:40:6c:dd:6a:43:3c:ec:12:17:51:
4d:7b:94:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNIIM8ZU53ThSz2xCa2HssyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5Y2M0NGQ3ZjFkMGRjMGE1YWJmMjc3NjQ5NWI2MWRlNDgx
OTkyNWYwHhcNMjQxMTIwMDU1MjA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWIxMmE4M2JhMGEyMWI4NzVmNGEzYjg0OTRhODM1NWRhYzVmNWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVszjlG3ZzXjThwnR2YoLWWxN1oD
gJ0qRmBZTV5gOQCE5scY994uaNkAy8XdjYVoGGQwIsSkT+WfIHcvTa0A+wrp9L1P
Ug8e+kOtCC2/Jra2EQhkiowvw1G4xSzWynKamnLmU6L6ZYeJ4SBPRxtizt9QGHpU
p4IWRJL4aADwWTAcAZAWNZGYp4vj5U8s0P9/sNJZ219LAT8CIuPBQtc6/ja7p/wK
kn87ik7krFhL2fUQXNpvoECXpHEfFbdYj35LCnmr96N3DALXCepDN75Z5+jMi2ee
oOlgv7gklp/+q7rycDbNtlcesoEMwv0asKGa4qewYReUoXRWmAvzYWzWDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBmxKoO6CiG4dfSjuElKg1XaxfXUMB8GA1UdIwQY
MBaAFKnMRNfx0NwKWr8ndklbYd5IGZJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWN4RTFfSFEzQXBhdnlkMlNWdGgza2daa2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9kYWI4NjctYTU3OS00YTk1LWFlZjct
MTYxN2YzOGE2ZGZjLzEvR2JFcWc3b0tJYmgxOUtPNFNVcURWZHJGOWRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9kYWI4NjctYTU3OS00YTk1LWFlZjctMTYxN2YzOGE2ZGZj
LzEvcWN4RTFfSFEzQXBhdnlkMlNWdGgza2daa2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXNnMA0G
CSqGSIb3DQEBCwUAA4IBAQCZw5qBKjL9LOCBtUYH208XoGOr/7/54/3jlApnneC8
J6pjoJC7/CHq6+hMiIaZa2xsD0PTJqdRbyfkgotQBaXkUoCNWhs4RWX5WgGq9haK
MrkycKhfs62vcIm3r8h0I62v9AIqUlfHEzzU7f7Lokm/6F5XuVwWCHGWtHKdGF1m
J/+x95RhKPrFSoCirvAqxM3ppuH2MP/bpAhIbtnXj2JfN89q7IvaVHOthrpIvWjS
QDrWptXCNkwGmtStxBQchMzJaNcnavhxb0f/GWh7qa9QGFrygeNmTM4CWRxD1wow
wGEiS3lAn4etVWjzRxcCeIH9PEBs3WpDPOwSF1FNe5Qs
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:45:52 2024 by rpki-client on console-ams.rpki-client.org