Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/GZZyVseTWhkMwPMkIteTk1q18LY.roa
File: GZZyVseTWhkMwPMkIteTk1q18LY.roa (raw, json)
Hash identifier: biL0ipm/4cFkrKEomXpDXIn2JkFfSaWNTIYnM1uDgQ8=
Subject key identifier: 19:96:72:56:C7:93:5A:19:0C:C0:F3:24:22:D7:93:93:5A:B5:F0:B6
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0192BA267B16A255CB0376201D21B8D73E5A
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/GZZyVseTWhkMwPMkIteTk1q18LY.roa
Signing time: Wed 23 Oct 2024 16:12:16 +0000
ROA not before: Wed 23 Oct 2024 16:12:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215181
IP address blocks: 194.116.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ba:26:7b:16:a2:55:cb:03:76:20:1d:21:b8:d7:3e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 23 16:12:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19967256c7935a190cc0f32422d793935ab5f0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:a1:ba:b7:1d:60:e7:da:89:d1:21:cc:3a:
85:5a:3d:09:60:e8:b0:fc:99:de:1c:2a:2a:b7:ee:
cb:d3:59:60:f3:58:58:c6:19:52:dd:7c:e8:cb:4e:
31:cf:8f:47:4d:be:6d:26:bb:a4:fb:36:bd:90:21:
f5:29:16:e0:6f:30:9e:7b:49:85:86:c5:c3:74:c8:
7a:20:48:f0:d0:7f:75:53:bf:5c:9c:e7:af:f3:91:
23:f8:74:dd:77:39:67:cf:77:2f:4b:11:ae:fd:78:
c7:29:4a:06:fa:12:c9:9f:22:b2:9e:99:4c:66:26:
19:27:8d:e7:e8:58:ca:11:a7:e2:8f:b1:52:98:9f:
ef:4c:16:b3:f6:54:26:b9:2f:be:2f:7e:b7:fa:dd:
0f:7c:7d:46:53:f9:f5:b0:6e:83:a2:1a:29:b5:04:
12:e4:ca:22:5a:8c:6a:d8:95:6a:2a:16:73:03:04:
87:af:d1:c9:57:d8:5b:fb:54:42:66:a6:e7:16:7e:
79:39:ac:ff:7a:7d:a6:cd:3f:ef:b0:74:00:ae:2a:
0c:01:dc:11:7f:24:aa:7c:c7:67:4b:61:a0:b9:d2:
f4:98:59:b6:ec:fc:0b:01:e0:9d:a5:54:2b:64:05:
37:92:6b:5c:35:35:9b:35:60:36:31:b9:7a:3e:13:
c0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:96:72:56:C7:93:5A:19:0C:C0:F3:24:22:D7:93:93:5A:B5:F0:B6
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/GZZyVseTWhkMwPMkIteTk1q18LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.229.0/24
Signature Algorithm: sha256WithRSAEncryption
62:60:6d:b8:cd:dc:07:42:88:85:a0:fe:82:ce:e9:7e:3f:68:
4d:3b:32:ce:33:a4:68:b3:de:36:6c:7c:76:01:42:9f:98:1c:
df:6a:6c:18:3a:c1:77:e1:69:5b:c3:a4:1a:4a:b3:d1:c8:82:
28:74:0f:a4:ba:91:9d:6a:a9:70:ee:1b:b4:ee:71:f5:4e:d4:
7c:58:c0:36:5a:e2:d4:34:04:70:4b:7a:35:ef:8e:1e:8c:f5:
f2:79:fa:40:0d:0e:58:f5:83:4c:7e:3d:85:32:2a:a5:e0:0b:
09:e2:6f:b8:e9:1a:71:db:b3:47:07:b3:b7:bb:8f:83:87:14:
36:6e:85:e6:8f:e7:f5:a3:c7:4e:10:b9:2e:f8:7a:7a:73:36:
70:fe:bf:16:50:02:9a:83:9f:26:66:b0:50:0e:90:4f:3c:ac:
27:ae:d3:05:dc:8f:76:62:6f:d3:d8:3e:e5:26:f7:3d:95:42:
14:42:10:77:5b:1d:13:b5:74:c6:24:1a:c1:b2:19:14:f8:91:
76:1d:86:cc:d6:6d:34:e4:85:5c:96:8f:9d:01:37:2f:a1:c1:
cd:16:9e:23:24:2a:30:33:fd:9d:15:0d:0c:ce:85:56:b9:6d:
fe:61:4e:3f:a2:f6:0d:bb:9a:a6:b0:68:a9:9a:35:01:3e:ca:
f9:e2:44:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZK6JnsWolXLA3YgHSG41z5aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjQxMDIzMTYxMjE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTk2NzI1NmM3OTM1YTE5MGNjMGYzMjQyMmQ3OTM5MzVhYjVmMGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqGhurcdYOfaidEhzDqFWj0JYOiw
/JneHCoqt+7L01lg81hYxhlS3Xzoy04xz49HTb5tJruk+za9kCH1KRbgbzCee0mF
hsXDdMh6IEjw0H91U79cnOev85Ej+HTddzlnz3cvSxGu/XjHKUoG+hLJnyKynplM
ZiYZJ43n6FjKEafij7FSmJ/vTBaz9lQmuS++L363+t0PfH1GU/n1sG6DohoptQQS
5MoiWoxq2JVqKhZzAwSHr9HJV9hb+1RCZqbnFn55Oaz/en2mzT/vsHQArioMAdwR
fySqfMdnS2GgudL0mFm27PwLAeCdpVQrZAU3kmtcNTWbNWA2Mbl6PhPAcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBmWclbHk1oZDMDzJCLXk5NatfC2MB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvR1paeVZzZVRXaGtNd1BNa0l0ZVRrMXExOExZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnTlMA0G
CSqGSIb3DQEBCwUAA4IBAQBiYG24zdwHQoiFoP6Czul+P2hNOzLOM6Ros942bHx2
AUKfmBzfamwYOsF34Wlbw6QaSrPRyIIodA+kupGdaqlw7hu07nH1TtR8WMA2WuLU
NARwS3o1744ejPXyefpADQ5Y9YNMfj2FMiql4AsJ4m+46Rpx27NHB7O3u4+DhxQ2
boXmj+f1o8dOELku+Hp6czZw/r8WUAKag58mZrBQDpBPPKwnrtMF3I92Ym/T2D7l
Jvc9lUIUQhB3Wx0TtXTGJBrBshkU+JF2HYbM1m005IVclo+dATcvocHNFp4jJCow
M/2dFQ0MzoVWuW3+YU4/ovYNu5qmsGipmjUBPsr54kRz
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:45:46 2024 by rpki-client on console-fra.rpki-client.org