Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/g9tHVZMDA05ws-7PY6svy3jXPyo.roa
File: g9tHVZMDA05ws-7PY6svy3jXPyo.roa (raw, json)
Hash identifier: vx/4ibyhV2E8JAqYTqFlPvvDuxadl3FGuxhfcyZ1LRg=
Subject key identifier: 83:DB:47:55:93:03:03:4E:70:B3:EE:CF:63:AB:2F:CB:78:D7:3F:2A
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 018CC348AB11255F17B8505AEB9C3FEA24A5
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/g9tHVZMDA05ws-7PY6svy3jXPyo.roa
Signing time: Mon 01 Jan 2024 04:29:28 +0000
ROA not before: Mon 01 Jan 2024 04:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206887
IP address blocks: 95.183.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ab:11:25:5f:17:b8:50:5a:eb:9c:3f:ea:24:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 04:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83db47559303034e70b3eecf63ab2fcb78d73f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:e9:82:82:5c:99:1c:10:8d:0a:1a:b0:15:
30:ad:fc:5d:5a:69:e9:af:ea:bb:7e:ff:09:93:27:
0f:ec:6a:02:c8:74:d4:93:e0:75:39:d9:b0:9b:60:
ff:74:ba:be:31:37:59:cb:f3:d3:7d:2f:ac:66:aa:
2e:54:4b:92:09:11:bd:5f:c0:6c:35:f0:d9:04:0f:
8f:ea:95:5f:e8:52:61:70:05:13:fb:9d:91:a2:40:
7c:c4:8e:39:ae:99:5a:3f:83:ee:73:1b:8a:ec:57:
79:c6:16:84:ce:15:8d:6e:75:29:a1:27:e9:33:dd:
dc:d8:98:1d:d4:6b:b5:04:f9:47:dd:b3:27:04:54:
9e:a1:d0:71:87:19:5a:47:91:68:2d:5a:0b:7c:08:
57:f2:dc:96:bf:50:b8:dd:07:3b:c3:71:02:c3:ee:
05:77:02:7f:cf:95:6f:02:dd:dd:8e:79:77:41:82:
af:9a:5e:75:d5:4c:c0:90:56:86:2f:f3:7a:25:6c:
81:71:9f:86:6b:a8:1b:76:41:0d:6d:e6:f2:a7:c0:
ed:7e:08:75:b4:5f:df:c0:9a:63:ad:d7:6a:ab:71:
46:93:3d:cd:97:37:f7:bd:b2:6c:29:89:37:75:2d:
12:af:8a:fd:76:f0:b5:ef:0e:27:18:90:dc:4a:18:
ce:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DB:47:55:93:03:03:4E:70:B3:EE:CF:63:AB:2F:CB:78:D7:3F:2A
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/g9tHVZMDA05ws-7PY6svy3jXPyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.183.220.0/22
Signature Algorithm: sha256WithRSAEncryption
76:c9:1c:83:f3:3a:9c:c1:87:2e:bd:89:de:de:f9:9a:86:c7:
44:be:0c:0e:3f:bd:7d:31:92:7c:25:b1:a4:6e:6e:1f:71:b6:
21:3e:5e:74:f3:b5:15:08:8e:e8:99:60:ba:62:ea:6d:37:42:
70:4b:9e:cc:dd:32:60:4d:9c:62:5d:9f:7e:4f:de:0a:64:91:
73:ac:0c:8e:b8:4e:38:49:67:d6:0a:d1:5b:7e:64:78:3f:6e:
ef:1a:da:b9:3c:7d:b9:e1:1b:b4:7f:24:4b:66:9d:f9:ec:5a:
f5:6c:8b:be:73:77:56:43:7b:21:d2:3c:b7:2c:71:3a:25:c2:
db:7b:17:af:35:f9:61:9a:50:e1:20:ba:b0:91:14:43:de:48:
cf:bd:a6:27:dc:96:20:14:87:59:86:bb:96:53:e6:80:90:30:
42:37:b2:e6:0c:c7:f5:c6:c5:5a:27:8e:98:08:26:dd:4c:18:
a9:c0:ba:23:91:10:1d:00:85:eb:43:4d:23:ad:c6:b5:ae:65:
d3:f5:56:b9:28:3f:51:3b:fb:1d:f1:59:dc:0e:12:fd:84:d8:
d4:30:40:1e:db:4c:a4:21:fa:a5:8d:ef:2d:91:31:4f:3c:66:
2f:9c:69:60:2b:0b:1b:4c:35:43:f9:d9:22:0c:91:93:d4:a3:
d0:df:f3:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSKsRJV8XuFBa65w/6iSlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh
YWI5MDcwHhcNMjQwMTAxMDQyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2RiNDc1NTkzMDMwMzRlNzBiM2VlY2Y2M2FiMmZjYjc4ZDczZjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO3pgoJcmRwQjQoasBUwrfxdWmnp
r+q7fv8JkycP7GoCyHTUk+B1Odmwm2D/dLq+MTdZy/PTfS+sZqouVEuSCRG9X8Bs
NfDZBA+P6pVf6FJhcAUT+52RokB8xI45rplaP4PucxuK7Fd5xhaEzhWNbnUpoSfp
M93c2Jgd1Gu1BPlH3bMnBFSeodBxhxlaR5FoLVoLfAhX8tyWv1C43Qc7w3ECw+4F
dwJ/z5VvAt3djnl3QYKvml511UzAkFaGL/N6JWyBcZ+Ga6gbdkENbebyp8Dtfgh1
tF/fwJpjrddqq3FGkz3Nlzf3vbJsKYk3dS0Sr4r9dvC17w4nGJDcShjO4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIPbR1WTAwNOcLPuz2OrL8t41z8qMB8GA1UdIwQY
MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt
NTk2NzE5MjBmYjYwLzEvZzl0SFZaTURBMDV3cy03UFk2c3Z5M2pYUHlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw
LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCX7fcMA0G
CSqGSIb3DQEBCwUAA4IBAQB2yRyD8zqcwYcuvYne3vmahsdEvgwOP719MZJ8JbGk
bm4fcbYhPl5087UVCI7omWC6YuptN0JwS57M3TJgTZxiXZ9+T94KZJFzrAyOuE44
SWfWCtFbfmR4P27vGtq5PH254Ru0fyRLZp357Fr1bIu+c3dWQ3sh0jy3LHE6JcLb
exevNflhmlDhILqwkRRD3kjPvaYn3JYgFIdZhruWU+aAkDBCN7LmDMf1xsVaJ46Y
CCbdTBipwLojkRAdAIXrQ00jrca1rmXT9Va5KD9RO/sd8VncDhL9hNjUMEAe20yk
Ifqlje8tkTFPPGYvnGlgKwsbTDVD+dkiDJGT1KPQ3/Nl
-----END CERTIFICATE-----
Generated at Fri Jun 7 14:10:53 2024 by rpki-client on console-ams.rpki-client.org