Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/GSv8v-8lGE6-Qe77_HOWhvTU6Eo.roa
File: GSv8v-8lGE6-Qe77_HOWhvTU6Eo.roa (raw, json)
Hash identifier: WSq38GmuyBXs1ZVtfWrjHjqBrDaJmwjFNIWsg41pVzs=
Subject key identifier: 19:2B:FC:BF:EF:25:18:4E:BE:41:EE:FB:FC:73:96:86:F4:D4:E8:4A
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0191CB67CBAD2C3932A83C6B224E741430AB
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/GSv8v-8lGE6-Qe77_HOWhvTU6Eo.roa
Signing time: Sat 07 Sep 2024 07:34:22 +0000
ROA not before: Sat 07 Sep 2024 07:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53356
IP address blocks: 194.246.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:cb:67:cb:ad:2c:39:32:a8:3c:6b:22:4e:74:14:30:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Sep 7 07:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=192bfcbfef25184ebe41eefbfc739686f4d4e84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ac:45:6e:4c:9c:d2:81:f6:38:05:d9:44:18:
3f:ae:1a:9c:3a:31:e7:96:1c:1e:1d:8c:39:cc:82:
1a:7d:01:f1:bf:7b:56:0a:4f:ea:d1:df:51:de:5a:
7b:ec:0f:e8:e1:dd:92:26:fd:86:ff:ce:6e:c8:55:
c0:48:e1:ac:61:52:1e:52:4f:c1:2d:52:66:2f:90:
70:64:5c:e4:b7:3e:e2:f3:39:97:0a:bd:6a:0e:3f:
fb:97:1b:4c:e0:ad:9c:05:77:e7:b4:cc:96:88:43:
3f:98:91:af:be:67:61:4f:16:f6:64:ed:05:f8:b7:
53:10:29:15:ec:a2:6f:4c:12:4d:63:b1:3c:61:ed:
68:ad:66:3e:f7:56:87:55:ca:6b:d2:0c:b7:f3:b8:
1a:44:8c:35:fd:8c:f4:63:27:2c:f0:4e:15:0f:e2:
f0:09:74:bd:df:a3:b3:c8:90:34:61:cb:1d:c0:c3:
87:ce:41:53:43:80:30:70:ad:28:b8:d2:5c:89:37:
c1:7d:23:94:1a:b4:79:ad:ee:2d:55:96:80:24:b4:
c7:3c:ce:f0:72:ae:13:7f:22:6e:19:19:56:be:90:
24:93:39:22:a9:b0:d5:06:7d:47:10:39:13:88:0b:
39:3a:28:8f:c8:70:7b:35:5a:ef:f5:5c:92:0c:b1:
22:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2B:FC:BF:EF:25:18:4E:BE:41:EE:FB:FC:73:96:86:F4:D4:E8:4A
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/GSv8v-8lGE6-Qe77_HOWhvTU6Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.37.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c6:6f:fc:7e:3c:41:22:bf:ce:5c:8e:8e:6b:95:c0:ba:88:
84:92:29:92:c0:26:37:46:e5:9c:b2:a5:9f:19:e5:a5:60:6b:
e7:e9:0f:3f:61:87:53:12:86:10:a2:41:ae:56:ba:d4:b3:c5:
40:8a:83:bc:a3:a5:16:c5:00:37:ae:65:5b:0c:f9:5f:f6:49:
63:8e:33:00:01:3c:d6:ad:fd:67:58:36:29:01:1e:da:46:79:
99:22:c7:32:24:6f:74:6a:f3:c7:44:d5:6d:36:d0:d3:d1:a6:
6f:0f:c3:24:d7:13:65:3d:27:54:e2:68:c9:f5:0f:df:2b:85:
1b:6b:9a:59:79:7b:b2:23:eb:3a:26:66:5a:11:96:b0:47:3c:
c4:d5:77:2d:c8:c6:84:5f:0f:f2:cc:2f:61:82:ce:c4:1e:cd:
1d:60:fc:26:be:21:9a:c3:40:8b:63:49:a4:a2:90:0c:c3:81:
ff:cb:26:24:2d:0b:21:48:5c:bb:37:e0:57:37:46:92:98:2d:
3e:96:47:43:3f:a9:3f:e6:c3:94:5d:c5:ae:09:dd:1b:74:90:
20:29:93:cd:83:21:4c:31:0d:1b:55:3f:cd:04:4d:66:0a:ef:
bd:6e:0a:75:19:87:af:97:aa:32:7e:45:d0:b1:31:af:e3:a7:
5f:69:d7:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZHLZ8utLDkyqDxrIk50FDCrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl
ZWFjNDQwHhcNMjQwOTA3MDczNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTJiZmNiZmVmMjUxODRlYmU0MWVlZmJmYzczOTY4NmY0ZDRlODRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKxFbkyc0oH2OAXZRBg/rhqcOjHn
lhweHYw5zIIafQHxv3tWCk/q0d9R3lp77A/o4d2SJv2G/85uyFXASOGsYVIeUk/B
LVJmL5BwZFzktz7i8zmXCr1qDj/7lxtM4K2cBXfntMyWiEM/mJGvvmdhTxb2ZO0F
+LdTECkV7KJvTBJNY7E8Ye1orWY+91aHVcpr0gy387gaRIw1/Yz0Yycs8E4VD+Lw
CXS936OzyJA0YcsdwMOHzkFTQ4AwcK0ouNJciTfBfSOUGrR5re4tVZaAJLTHPM7w
cq4TfyJuGRlWvpAkkzkiqbDVBn1HEDkTiAs5OiiPyHB7NVrv9VySDLEi8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBkr/L/vJRhOvkHu+/xzlob01OhKMB8GA1UdIwQY
MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt
OGVmZjNmZDNjNDhhLzEvR1N2OHYtOGxHRTYtUWU3N19IT1dodlRVNkVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh
LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwvYlMA0G
CSqGSIb3DQEBCwUAA4IBAQBOxm/8fjxBIr/OXI6Oa5XAuoiEkimSwCY3RuWcsqWf
GeWlYGvn6Q8/YYdTEoYQokGuVrrUs8VAioO8o6UWxQA3rmVbDPlf9kljjjMAATzW
rf1nWDYpAR7aRnmZIscyJG90avPHRNVtNtDT0aZvD8Mk1xNlPSdU4mjJ9Q/fK4Ub
a5pZeXuyI+s6JmZaEZawRzzE1XctyMaEXw/yzC9hgs7EHs0dYPwmviGaw0CLY0mk
opAMw4H/yyYkLQshSFy7N+BXN0aSmC0+lkdDP6k/5sOUXcWuCd0bdJAgKZPNgyFM
MQ0bVT/NBE1mCu+9bgp1GYevl6oyfkXQsTGv46dfadcL
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:56:37 2024 by rpki-client on console-ams.rpki-client.org