Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/GSXA3s5jn64og_rXKCBZDIqnKLo.roa
File: GSXA3s5jn64og_rXKCBZDIqnKLo.roa (raw, json)
Hash identifier: VUM3R0A+HqG4tbXAuoqWxTiYWVL8M3ASZYrddjU7/AA=
Subject key identifier: 19:25:C0:DE:CE:63:9F:AE:28:83:FA:D7:28:20:59:0C:8A:A7:28:BA
Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial: 01900241F3D36BE66CA54A9528807E0FBF44
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/GSXA3s5jn64og_rXKCBZDIqnKLo.roa
Signing time: Mon 10 Jun 2024 13:06:34 +0000
ROA not before: Mon 10 Jun 2024 13:06:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200200
IP address blocks: 91.220.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:02:41:f3:d3:6b:e6:6c:a5:4a:95:28:80:7e:0f:bf:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Validity
Not Before: Jun 10 13:06:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1925c0dece639fae2883fad72820590c8aa728ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:2e:bd:69:14:58:26:64:b0:df:05:39:5e:
5e:98:34:7e:ed:c4:9a:bc:ec:15:57:c0:33:38:e5:
9a:d9:cd:40:ae:16:b4:4f:f5:a5:44:c0:88:a7:dc:
42:da:47:d7:62:7c:12:44:15:cf:fc:64:91:05:25:
63:44:0a:8c:d4:28:e8:5c:50:d6:df:00:1e:59:3d:
9f:d6:1f:3a:2b:58:1b:d5:9a:ab:b9:9f:5a:b9:41:
2c:3e:63:38:0e:62:59:26:ec:8a:19:e6:5b:62:b4:
ab:16:fa:62:d8:d6:2e:08:a4:f4:da:9d:e2:ad:84:
ae:94:e9:26:5c:d0:59:71:21:95:cc:83:76:a3:b1:
7d:0b:78:d9:74:5f:e7:f4:f1:07:08:d5:36:f8:5e:
7c:ad:fa:e4:08:97:b9:be:c2:a3:8d:22:9e:c9:4d:
bb:77:36:70:4f:4e:e2:c1:3f:72:19:e1:24:fd:0d:
cd:02:fa:33:ae:fe:aa:68:28:3c:58:35:7b:af:84:
7e:a1:b1:c0:7d:0d:89:5f:a1:8c:f2:48:93:b8:5f:
ce:8f:58:07:9b:cd:47:5e:4a:40:ac:5d:98:34:91:
fa:3f:1c:2d:7c:21:7d:bf:c5:cf:0b:a7:89:34:93:
97:34:a0:31:a6:c0:6c:7b:65:f9:88:24:e3:82:1f:
37:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:25:C0:DE:CE:63:9F:AE:28:83:FA:D7:28:20:59:0C:8A:A7:28:BA
X509v3 Authority Key Identifier:
keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/GSXA3s5jn64og_rXKCBZDIqnKLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.41.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:96:db:e5:4e:0c:86:69:56:78:71:9c:13:94:5b:43:05:0e:
74:83:9d:19:e7:3c:c4:96:da:aa:c7:db:b8:b1:6c:57:3b:59:
13:41:84:8d:ed:be:9a:d1:52:a0:e4:b8:bd:ea:38:99:56:41:
c0:b9:a5:b3:12:fe:21:d1:0a:a3:6f:01:ca:5e:f5:10:03:0a:
43:92:1f:7f:8f:d7:79:51:a9:af:c2:35:27:49:a0:89:a9:e6:
aa:fd:87:36:fb:3a:12:f3:f2:8f:4d:8b:96:27:f6:ec:6e:e9:
11:21:8e:0a:be:7e:86:9b:ba:9b:ef:07:ff:0b:d5:83:28:d2:
46:8e:b0:33:12:37:03:5e:68:52:7d:3e:2f:cc:a2:6d:11:a7:
18:76:cf:19:46:75:5a:75:7f:7a:2e:a2:90:79:4b:26:0a:9d:
b9:d4:91:b1:4e:3b:d3:5f:24:82:b2:15:70:9d:17:ba:77:31:
be:b9:0c:1c:89:97:1b:0b:08:32:da:96:94:1c:34:7f:8d:30:
bb:8d:bf:75:ed:9a:c8:16:9f:d8:d7:94:8b:77:ea:88:77:26:
6f:2a:c4:4c:53:b0:6d:b8:9d:b0:f5:da:92:ea:cd:c0:42:81:
3b:ff:e0:ad:c4:33:b9:fd:7c:75:fb:a1:eb:3d:ff:19:d0:5f:
5e:b2:c8:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZACQfPTa+ZspUqVKIB+D79EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MTMwMjJkZWRjMWY4ZjAxM2FhNmUzOTBmYTIzYmQyMmYx
ZmUzOTIwHhcNMjQwNjEwMTMwNjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTI1YzBkZWNlNjM5ZmFlMjg4M2ZhZDcyODIwNTkwYzhhYTcyOGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszEuvWkUWCZksN8FOV5emDR+7cSa
vOwVV8AzOOWa2c1Arha0T/WlRMCIp9xC2kfXYnwSRBXP/GSRBSVjRAqM1CjoXFDW
3wAeWT2f1h86K1gb1ZqruZ9auUEsPmM4DmJZJuyKGeZbYrSrFvpi2NYuCKT02p3i
rYSulOkmXNBZcSGVzIN2o7F9C3jZdF/n9PEHCNU2+F58rfrkCJe5vsKjjSKeyU27
dzZwT07iwT9yGeEk/Q3NAvozrv6qaCg8WDV7r4R+obHAfQ2JX6GM8kiTuF/Oj1gH
m81HXkpArF2YNJH6PxwtfCF9v8XPC6eJNJOXNKAxpsBse2X5iCTjgh83AQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBklwN7OY5+uKIP61yggWQyKpyi6MB8GA1UdIwQY
MBaAFDYTAi3twfjwE6puOQ+iO9IvH+OSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhNQ0xlM0ItUEFUcW00NUQ2STcwaThmNDVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xZTdmOTYtZTkzNi00MmM4LWFjNjIt
NDA2NjlhZDE5ZmI5LzEvR1NYQTNzNWpuNjRvZ19yWEtDQlpESXFuS0xvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8xZTdmOTYtZTkzNi00MmM4LWFjNjItNDA2NjlhZDE5ZmI5
LzEvTmhNQ0xlM0ItUEFUcW00NUQ2STcwaThmNDVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9wpMA0G
CSqGSIb3DQEBCwUAA4IBAQDFltvlTgyGaVZ4cZwTlFtDBQ50g50Z5zzEltqqx9u4
sWxXO1kTQYSN7b6a0VKg5Li96jiZVkHAuaWzEv4h0QqjbwHKXvUQAwpDkh9/j9d5
UamvwjUnSaCJqeaq/Yc2+zoS8/KPTYuWJ/bsbukRIY4Kvn6Gm7qb7wf/C9WDKNJG
jrAzEjcDXmhSfT4vzKJtEacYds8ZRnVadX96LqKQeUsmCp251JGxTjvTXySCshVw
nRe6dzG+uQwciZcbCwgy2paUHDR/jTC7jb917ZrIFp/Y15SLd+qIdyZvKsRMU7Bt
uJ2w9dqS6s3AQoE7/+CtxDO5/Xx1+6HrPf8Z0F9essjr
-----END CERTIFICATE-----
Generated at Sat Sep 28 19:22:39 2024 by rpki-client on console-ams.rpki-client.org