Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/CGE9KmXw-zC57hSPOq6rdybZ2RI.roa
File: CGE9KmXw-zC57hSPOq6rdybZ2RI.roa (raw, json)
Hash identifier: LWn1eV7Y6tg30vCj4taVfgxNgfGN6c1PrEHGAH0ABo0=
Subject key identifier: 08:61:3D:2A:65:F0:FB:30:B9:EE:14:8F:3A:AE:AB:77:26:D9:D9:12
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 018CC348A5E982FEC6B41D7A1067D962775C
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/CGE9KmXw-zC57hSPOq6rdybZ2RI.roa
Signing time: Mon 01 Jan 2024 04:29:27 +0000
ROA not before: Mon 01 Jan 2024 04:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12777
IP address blocks: 193.255.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a5:e9:82:fe:c6:b4:1d:7a:10:67:d9:62:77:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 04:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08613d2a65f0fb30b9ee148f3aaeab7726d9d912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:be:fa:23:c6:0e:86:9d:27:8e:78:fa:ed:0e:
89:41:e1:8c:ba:e4:63:29:9e:76:5c:bb:ba:1f:1e:
ec:95:b8:3b:06:d4:a2:e1:d9:03:84:0e:cc:f8:96:
61:b1:75:3c:db:b8:b0:59:9f:60:22:50:09:b6:11:
c0:e9:1d:0b:25:2c:b1:94:d7:f8:26:42:a1:fb:87:
90:bd:8a:13:1d:fe:be:15:14:91:db:f1:a3:ac:3b:
cc:db:62:72:0e:54:d5:47:7f:06:27:a8:c6:fe:5f:
93:93:7c:04:7b:85:6e:21:3d:5d:87:e4:17:23:a9:
ea:3b:03:9a:b8:3f:18:e4:9a:08:8d:43:d8:4d:2d:
b6:c9:68:4c:a0:a8:92:ff:58:71:e7:0f:29:34:f2:
bb:bd:1f:9f:c6:64:3e:ba:57:a9:6d:3b:ac:45:51:
ec:cb:25:0b:7d:1d:b9:69:a8:62:3c:2b:33:16:57:
44:a3:5d:89:4f:49:6a:e0:a5:f3:dd:fc:af:1b:d8:
12:84:63:b9:29:93:8d:e0:30:ef:7b:5d:55:49:89:
c8:98:1c:95:26:6b:70:cd:9e:ad:f4:dd:f6:c2:69:
55:a1:26:61:d9:fc:06:ab:7e:70:ab:b3:7d:ca:b3:
bd:39:8b:b4:17:fc:9b:28:e7:07:70:04:78:fd:c4:
13:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:61:3D:2A:65:F0:FB:30:B9:EE:14:8F:3A:AE:AB:77:26:D9:D9:12
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/CGE9KmXw-zC57hSPOq6rdybZ2RI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.255.44.0/24
Signature Algorithm: sha256WithRSAEncryption
40:4f:5b:b5:32:c3:b1:71:de:2a:e3:95:e4:53:94:b8:d7:e0:
36:aa:3c:d8:33:28:c2:1e:26:e9:35:d9:ea:20:83:05:da:e9:
43:52:f1:c0:10:e6:38:c9:0d:ef:49:12:e6:09:b0:a8:66:6f:
ee:56:bd:57:1b:d8:3a:e8:30:e2:4d:92:4b:cb:ff:6b:7f:96:
ab:e1:c3:92:8d:93:52:c8:ac:20:2c:1c:37:17:51:05:d1:10:
e1:41:5d:80:13:99:2e:ca:39:f2:f7:e7:72:4c:37:5b:5c:54:
a4:09:f4:fb:fd:67:f3:42:26:3a:68:9e:f8:55:fe:b3:91:99:
d9:fb:68:9b:65:9c:3a:d6:82:a9:ac:f3:43:73:03:28:12:51:
1b:24:81:2b:a3:5d:f0:b0:21:4c:7b:51:e9:61:6e:9e:35:f1:
e2:1f:8a:6f:82:1c:e3:f0:37:07:c1:2e:5e:33:cf:90:58:a2:
36:b2:b4:a4:a3:7c:39:70:0d:05:ac:0d:33:a4:ec:96:07:4e:
e3:bf:0f:b7:ba:29:1e:0b:6c:15:94:f3:a5:f6:de:9c:c2:54:
fa:f0:06:cd:83:7f:45:8c:a4:23:9d:2a:4e:b2:e1:3a:e7:4c:
a1:2d:50:53:a5:42:ec:ee:7b:f0:ce:fb:5c:2d:16:ea:de:6c:
0a:bd:ed:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSKXpgv7GtB16EGfZYndcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh
YWI5MDcwHhcNMjQwMTAxMDQyOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODYxM2QyYTY1ZjBmYjMwYjllZTE0OGYzYWFlYWI3NzI2ZDlkOTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL76I8YOhp0njnj67Q6JQeGMuuRj
KZ52XLu6Hx7slbg7BtSi4dkDhA7M+JZhsXU827iwWZ9gIlAJthHA6R0LJSyxlNf4
JkKh+4eQvYoTHf6+FRSR2/GjrDvM22JyDlTVR38GJ6jG/l+Tk3wEe4VuIT1dh+QX
I6nqOwOauD8Y5JoIjUPYTS22yWhMoKiS/1hx5w8pNPK7vR+fxmQ+ulepbTusRVHs
yyULfR25aahiPCszFldEo12JT0lq4KXz3fyvG9gShGO5KZON4DDve11VSYnImByV
JmtwzZ6t9N32wmlVoSZh2fwGq35wq7N9yrO9OYu0F/ybKOcHcAR4/cQT2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAhhPSpl8Pswue4Ujzquq3cm2dkSMB8GA1UdIwQY
MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt
NTk2NzE5MjBmYjYwLzEvQ0dFOUttWHctekM1N2hTUE9xNnJkeWJaMlJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw
LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwf8sMA0G
CSqGSIb3DQEBCwUAA4IBAQBAT1u1MsOxcd4q45XkU5S41+A2qjzYMyjCHibpNdnq
IIMF2ulDUvHAEOY4yQ3vSRLmCbCoZm/uVr1XG9g66DDiTZJLy/9rf5ar4cOSjZNS
yKwgLBw3F1EF0RDhQV2AE5kuyjny9+dyTDdbXFSkCfT7/WfzQiY6aJ74Vf6zkZnZ
+2ibZZw61oKprPNDcwMoElEbJIEro13wsCFMe1HpYW6eNfHiH4pvghzj8DcHwS5e
M8+QWKI2srSko3w5cA0FrA0zpOyWB07jvw+3uikeC2wVlPOl9t6cwlT68AbNg39F
jKQjnSpOsuE650yhLVBTpULs7nvwzvtcLRbq3mwKve3P
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:57:19 2024 by rpki-client on console-fra.rpki-client.org