Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/glhaGjYvz9mGirczYGxMS81rRfI.roa
File: glhaGjYvz9mGirczYGxMS81rRfI.roa (raw, json)
Hash identifier: cPBvD492Ea2g7PNrZgsOnSXH4CPshMieJYjaq9P+dD8=
Subject key identifier: 82:58:5A:1A:36:2F:CF:D9:86:8A:B7:33:60:6C:4C:4B:CD:6B:45:F2
Certificate issuer: /CN=3ceb205098732cb908823045efd5d740250c6b27
Certificate serial: 019425FCD05396803478E57BA385F71337D4
Authority key identifier: 3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/glhaGjYvz9mGirczYGxMS81rRfI.roa
Signing time: Thu 02 Jan 2025 07:48:32 +0000
ROA not before: Thu 02 Jan 2025 07:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47617
IP address blocks: 93.187.208.0/21 maxlen: 21
93.187.208.0/24 maxlen: 24
93.187.209.0/24 maxlen: 24
93.187.210.0/24 maxlen: 24
93.187.211.0/24 maxlen: 24
195.162.128.0/19 maxlen: 19
195.162.128.0/20 maxlen: 20
195.162.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:d0:53:96:80:34:78:e5:7b:a3:85:f7:13:37:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ceb205098732cb908823045efd5d740250c6b27
Validity
Not Before: Jan 2 07:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82585a1a362fcfd9868ab733606c4c4bcd6b45f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:13:74:d5:a4:8e:ec:c5:0f:7f:c4:ee:f7:49:
eb:aa:1e:9c:4e:3e:ca:34:21:83:33:7b:14:9a:e4:
c9:5c:1f:30:d0:a4:e0:8d:dd:46:c5:2e:ee:7a:9a:
15:ab:17:2e:66:59:64:1a:8e:07:1a:cf:a9:b2:68:
9c:0a:28:81:03:32:4c:ed:4f:dd:ea:3e:c7:54:73:
de:98:ef:9a:3d:cc:44:38:23:25:19:f1:5b:c3:49:
51:84:34:ab:08:2c:4b:ea:a9:93:12:79:df:38:b4:
31:03:93:82:1c:17:22:51:68:62:36:68:b6:65:b4:
2a:19:e2:00:63:43:09:17:c4:5f:4a:80:a2:27:ce:
c0:6f:b8:1e:a4:2e:de:ab:45:29:fc:67:d6:92:f1:
48:90:af:ec:5a:68:a0:43:a2:9b:e2:a6:c1:70:95:
7e:85:14:f4:3b:3a:99:56:d7:b7:54:7e:4d:b3:d6:
e6:93:06:0e:be:fd:53:8b:ec:c2:2e:cc:32:87:54:
0e:e8:03:fd:9f:ba:7d:88:82:cf:6f:44:a5:66:a7:
da:99:d1:93:7e:15:f8:70:f5:da:7e:cf:31:82:d0:
ab:50:a8:6a:c9:6f:58:5f:6c:65:b0:f1:06:60:b9:
42:a1:5a:7f:95:98:16:e6:46:0e:4d:d7:2f:b0:d9:
5c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:58:5A:1A:36:2F:CF:D9:86:8A:B7:33:60:6C:4C:4B:CD:6B:45:F2
X509v3 Authority Key Identifier:
keyid:3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/glhaGjYvz9mGirczYGxMS81rRfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.208.0/21
195.162.128.0/19
Signature Algorithm: sha256WithRSAEncryption
93:00:3b:2c:8c:24:0f:cc:97:9e:fa:c6:1d:2e:9f:8c:8d:3d:
77:87:5f:4f:cb:aa:55:8b:41:eb:78:c5:a4:82:81:9f:d6:73:
3a:9a:79:c3:7c:8d:f7:d5:8f:c8:e4:d5:4c:cb:09:98:0c:42:
fe:74:68:ea:f5:26:e8:56:9f:92:f2:d9:82:0a:9a:f5:91:67:
07:be:33:4c:08:a8:5a:51:29:48:3b:ac:43:6e:31:55:68:3e:
6c:52:e5:fa:20:44:70:5d:ed:0a:b8:95:f3:8c:58:b0:ed:4c:
78:f4:12:90:bc:71:cc:97:98:0a:4f:08:76:99:1c:ac:3d:10:
44:79:29:21:2e:68:82:85:12:c9:f9:e1:2c:a3:b8:dd:c5:04:
3e:96:b7:3c:85:cf:99:39:b7:f4:e0:19:d5:48:1e:af:c6:43:
7d:de:ef:ef:2a:09:e2:21:e1:51:0f:47:b7:f0:c1:42:9f:9e:
90:02:c7:27:2b:ab:87:2a:f8:59:59:78:5e:69:b6:f0:c5:4f:
70:b6:c6:20:68:f9:1e:cd:94:ca:ce:92:02:ce:4d:62:15:2c:
45:5b:df:75:bc:f5:33:65:8d:dd:af:8c:61:79:3b:e4:62:26:
1f:3b:eb:be:72:60:24:72:f7:56:8c:3c:5b:d9:8f:2d:53:8f:
ba:b6:10:58
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQl/NBTloA0eOV7o4X3EzfUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZWIyMDUwOTg3MzJjYjkwODgyMzA0NWVmZDVkNzQwMjUw
YzZiMjcwHhcNMjUwMTAyMDc0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjU4NWExYTM2MmZjZmQ5ODY4YWI3MzM2MDZjNGM0YmNkNmI0NWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BN01aSO7MUPf8Tu90nrqh6cTj7K
NCGDM3sUmuTJXB8w0KTgjd1GxS7uepoVqxcuZllkGo4HGs+psmicCiiBAzJM7U/d
6j7HVHPemO+aPcxEOCMlGfFbw0lRhDSrCCxL6qmTEnnfOLQxA5OCHBciUWhiNmi2
ZbQqGeIAY0MJF8RfSoCiJ87Ab7gepC7eq0Up/GfWkvFIkK/sWmigQ6Kb4qbBcJV+
hRT0OzqZVte3VH5Ns9bmkwYOvv1Ti+zCLswyh1QO6AP9n7p9iILPb0SlZqfamdGT
fhX4cPXafs8xgtCrUKhqyW9YX2xlsPEGYLlCoVp/lZgW5kYOTdcvsNlc+QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIJYWho2L8/Zhoq3M2BsTEvNa0XyMB8GA1UdIwQY
MBaAFDzrIFCYcyy5CIIwRe/V10AlDGsnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9zZ1VKaHpMTGtJZ2pCRjc5WFhRQ1VNYXljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85YTQyMzgtN2Q3NC00ZWRmLWE0YjEt
MjVlZDc1MDQ2YjAxLzEvZ2xoYUdqWXZ6OW1HaXJjellHeE1TODFyUmZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC85YTQyMzgtN2Q3NC00ZWRmLWE0YjEtMjVlZDc1MDQ2YjAx
LzEvUE9zZ1VKaHpMTGtJZ2pCRjc5WFhRQ1VNYXljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDXbvQAwQF
w6KAMA0GCSqGSIb3DQEBCwUAA4IBAQCTADssjCQPzJee+sYdLp+MjT13h19Py6pV
i0HreMWkgoGf1nM6mnnDfI331Y/I5NVMywmYDEL+dGjq9SboVp+S8tmCCpr1kWcH
vjNMCKhaUSlIO6xDbjFVaD5sUuX6IERwXe0KuJXzjFiw7Ux49BKQvHHMl5gKTwh2
mRysPRBEeSkhLmiChRLJ+eEso7jdxQQ+lrc8hc+ZObf04BnVSB6vxkN93u/vKgni
IeFRD0e38MFCn56QAscnK6uHKvhZWXheabbwxU9wtsYgaPkezZTKzpICzk1iFSxF
W991vPUzZY3dr4xheTvkYiYfO+u+cmAkcvdWjDxb2Y8tU4+6thBY
-----END CERTIFICATE-----
Generated at Sun Mar 9 18:10:04 2025 by rpki-client