Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/gqUxW_fCX9l4f8uRff1iNA5lIO4.roa
File: gqUxW_fCX9l4f8uRff1iNA5lIO4.roa (raw, json)
Hash identifier: 1SEvkCdT+4nRzDrgcRlOoElA+ubuB06w+UaXzbWNyV0=
Subject key identifier: 82:A5:31:5B:F7:C2:5F:D9:78:7F:CB:91:7D:FD:62:34:0E:65:20:EE
Certificate issuer: /CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Certificate serial: 018CC2DB11E60D51FEE934223475FA9FE017
Authority key identifier: AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/gqUxW_fCX9l4f8uRff1iNA5lIO4.roa
Signing time: Mon 01 Jan 2024 02:29:46 +0000
ROA not before: Mon 01 Jan 2024 02:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52075
IP address blocks: 46.193.228.0/22 maxlen: 22
46.193.232.0/22 maxlen: 22
46.193.236.0/22 maxlen: 22
46.193.240.0/20 maxlen: 20
46.193.32.0/19 maxlen: 19
46.193.64.0/19 maxlen: 19
46.193.176.0/20 maxlen: 20
46.192.0.0/15 maxlen: 15
45.81.196.0/22 maxlen: 22
46.193.0.0/19 maxlen: 19
46.193.224.0/22 maxlen: 22
46.193.128.0/20 maxlen: 20
46.193.144.0/20 maxlen: 20
46.193.160.0/20 maxlen: 20
46.193.96.0/19 maxlen: 19
2a01:7c01:40::/42 maxlen: 42
2a01:7c01::/42 maxlen: 42
2a01:7c00:700::/40 maxlen: 40
2a01:7c00:600::/40 maxlen: 40
2a01:7c00:500::/40 maxlen: 40
2a01:7c00:400::/40 maxlen: 40
2a01:7c00::/29 maxlen: 29
2a01:7c00:10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:11:e6:0d:51:fe:e9:34:22:34:75:fa:9f:e0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Validity
Not Before: Jan 1 02:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82a5315bf7c25fd9787fcb917dfd62340e6520ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dc:fb:27:45:e6:ce:af:80:c2:12:d4:0c:fc:
b2:2d:b6:bc:e8:26:3e:b4:6e:a4:10:ba:02:15:4f:
4e:84:c4:3b:d0:a1:4f:f4:54:3b:06:c9:af:ce:61:
58:43:75:b7:ad:37:8d:71:7c:bf:42:c8:23:68:ef:
3c:42:0e:09:63:f0:3e:5a:19:0f:22:f9:ab:f8:16:
ec:c8:6e:03:4f:67:ff:c8:1e:1d:19:bb:60:9b:da:
7e:1e:88:53:47:d3:04:9d:d9:f2:a1:3e:ad:00:04:
0e:ab:6a:ef:2d:a8:a5:52:cc:f4:63:ea:c5:b8:8f:
11:23:bc:ef:90:59:28:84:a8:0f:23:cf:73:5d:1a:
fc:ba:1a:dc:15:32:3f:80:58:51:f1:3e:83:f0:44:
55:7d:74:55:97:2b:36:7d:cd:cb:1c:76:39:07:e7:
98:7f:98:fe:0d:7a:d4:96:7b:64:fc:61:e6:f1:52:
5e:08:80:5b:e8:8f:b6:d4:b1:1d:f7:42:70:b5:28:
56:16:c5:9c:ca:bd:33:d3:d4:b6:de:1e:63:f4:9c:
20:2d:65:93:2e:0f:10:af:90:c1:e1:59:06:79:21:
a4:04:4a:70:ca:2b:96:1b:46:2d:51:ee:f8:d3:94:
0a:f4:1d:19:a8:54:22:f1:c0:e8:eb:3a:d5:89:6b:
1a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A5:31:5B:F7:C2:5F:D9:78:7F:CB:91:7D:FD:62:34:0E:65:20:EE
X509v3 Authority Key Identifier:
keyid:AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/gqUxW_fCX9l4f8uRff1iNA5lIO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.196.0/22
46.192.0.0/15
IPv6:
2a01:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
68:27:0a:45:a7:2d:ef:fc:cc:c7:e5:3c:97:ce:dc:d2:d9:8e:
59:39:0f:72:ec:8d:6c:57:ea:de:d1:10:c1:44:d4:a6:bf:f7:
41:9a:ee:b6:c2:40:6a:c2:d2:e4:85:45:44:35:f6:5f:84:fa:
f9:2a:8d:ec:d4:99:c2:76:3e:e6:48:dc:29:13:f1:db:8d:92:
d2:18:c9:10:68:c9:eb:58:e9:fc:ea:24:47:02:49:89:2e:65:
31:19:df:39:8d:a5:72:f7:c3:33:13:6e:b0:90:03:58:fd:ad:
75:f2:55:84:ef:ee:6f:89:08:e4:18:00:1a:1e:57:c5:34:1b:
be:99:f3:fe:c1:d5:52:d1:b9:47:23:6a:d8:f6:e0:d6:7e:53:
f9:65:70:23:67:e6:75:67:df:5f:a4:b0:4a:a6:84:36:19:d2:
18:bf:d0:e2:2c:86:91:6d:ca:d5:2c:e7:e7:b3:17:58:37:2a:
79:cb:2a:11:ff:92:d0:d0:72:59:61:5b:71:1c:2f:86:8b:8b:
a7:5f:95:97:1e:9b:2f:61:25:85:f3:47:91:f1:d1:ae:b9:72:
12:b2:03:e9:b3:09:20:68:4e:3f:8d:7a:21:08:c1:c6:b9:6c:
96:4a:d9:00:b6:61:72:09:26:6a:31:b8:b9:c6:55:a0:7e:1d:
e0:17:de:1e
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYzC2xHmDVH+6TQiNHX6n+AXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNTZhYWRjNDI0MTEyYzRmYzg5ODljMGFlZTI1NDliYmFm
NTY1NjgwHhcNMjQwMTAxMDIyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmE1MzE1YmY3YzI1ZmQ5Nzg3ZmNiOTE3ZGZkNjIzNDBlNjUyMGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutz7J0Xmzq+AwhLUDPyyLba86CY+
tG6kELoCFU9OhMQ70KFP9FQ7BsmvzmFYQ3W3rTeNcXy/QsgjaO88Qg4JY/A+WhkP
Ivmr+BbsyG4DT2f/yB4dGbtgm9p+HohTR9MEndnyoT6tAAQOq2rvLailUsz0Y+rF
uI8RI7zvkFkohKgPI89zXRr8uhrcFTI/gFhR8T6D8ERVfXRVlys2fc3LHHY5B+eY
f5j+DXrUlntk/GHm8VJeCIBb6I+21LEd90JwtShWFsWcyr0z09S23h5j9JwgLWWT
Lg8Qr5DB4VkGeSGkBEpwyiuWG0YtUe7405QK9B0ZqFQi8cDo6zrViWsaywIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFIKlMVv3wl/ZeH/LkX39YjQOZSDuMB8GA1UdIwQY
MBaAFKxWqtxCQRLE/ImJwK7iVJu69WVoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckZhcTNFSkJFc1Q4aVluQXJ1SlVtN3IxWldnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iMDMzZDMtZWU5Ni00YzBkLWE3MGUt
MDI3NGY0NDZkMzMxLzEvZ3FVeFdfZkNYOWw0Zjh1UmZmMWlOQTVsSU80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9iMDMzZDMtZWU5Ni00YzBkLWE3MGUtMDI3NGY0NDZkMzMx
LzEvckZhcTNFSkJFc1Q4aVluQXJ1SlVtN3IxWldnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwQCLVHEAwMB
LsAwDQQCAAIwBwMFAyoBfAAwDQYJKoZIhvcNAQELBQADggEBAGgnCkWnLe/8zMfl
PJfO3NLZjlk5D3LsjWxX6t7REMFE1Ka/90Ga7rbCQGrC0uSFRUQ19l+E+vkqjezU
mcJ2PuZI3CkT8duNktIYyRBoyetY6fzqJEcCSYkuZTEZ3zmNpXL3wzMTbrCQA1j9
rXXyVYTv7m+JCOQYABoeV8U0G76Z8/7B1VLRuUcjatj24NZ+U/llcCNn5nVn31+k
sEqmhDYZ0hi/0OIshpFtytUs5+ezF1g3KnnLKhH/ktDQcllhW3EcL4aLi6dflZce
my9hJYXzR5Hx0a65chKyA+mzCSBoTj+NeiEIwca5bJZK2QC2YXIJJmoxuLnGVaB+
HeAX3h4=
-----END CERTIFICATE-----
Generated at Sat Jun 8 04:24:23 2024 by rpki-client on console-ams.rpki-client.org