Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/gqk5VTLIy54FrilULbGo61Cg7S0.roa
File: gqk5VTLIy54FrilULbGo61Cg7S0.roa (raw, json)
Hash identifier: gZGBTS2nUj7R/pr78gL71iwhl+M4teB2uaA6XqRY430=
Subject key identifier: 82:A9:39:55:32:C8:CB:9E:05:AE:29:54:2D:B1:A8:EB:50:A0:ED:2D
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 018CC72761974CA644CF18586B575381E11C
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/gqk5VTLIy54FrilULbGo61Cg7S0.roa
Signing time: Mon 01 Jan 2024 22:31:36 +0000
ROA not before: Mon 01 Jan 2024 22:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209372
IP address blocks: 91.202.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:61:97:4c:a6:44:cf:18:58:6b:57:53:81:e1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jan 1 22:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82a9395532c8cb9e05ae29542db1a8eb50a0ed2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e4:40:d7:3d:57:84:d7:f7:f4:68:c4:4e:78:
a4:26:42:06:b3:fc:40:46:31:d1:5a:8e:cb:a1:9c:
81:a1:99:86:d1:c8:0b:c7:bf:bb:69:60:c1:c8:be:
08:ac:29:1e:d0:2a:bd:35:46:3c:ec:45:9a:9f:b6:
2e:c8:17:31:90:e4:f2:70:de:61:70:fe:3f:f5:d3:
ed:7c:ae:3d:30:2a:59:c4:67:6e:68:01:cd:cd:5b:
ae:5e:ad:ab:bd:6e:71:b3:bf:9d:6f:f1:74:e0:ee:
e7:1c:a8:79:3e:92:dd:f8:be:88:97:77:14:f6:ef:
41:9e:22:ec:33:89:c6:ec:da:3f:c7:e0:a0:7b:a5:
8a:9e:27:af:e0:ad:98:0c:06:3b:b4:ed:fb:4a:35:
28:b9:14:59:85:b4:89:bd:b2:57:03:a4:91:80:d0:
3d:3e:8f:8a:06:13:6e:b9:77:8e:6c:bc:41:84:ff:
cb:2f:30:5e:33:14:1f:bd:f5:7d:4e:0c:9d:47:91:
f2:ef:36:28:1a:2d:0e:f8:df:9a:dc:61:40:ea:f6:
89:be:f1:52:e3:9b:e8:ed:ad:3c:1a:7b:f6:13:50:
b8:c7:0b:80:81:63:10:87:10:ff:75:cf:ef:21:28:
e6:b9:8b:2f:15:b8:16:ed:bb:f3:0f:ad:ea:12:e0:
2e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A9:39:55:32:C8:CB:9E:05:AE:29:54:2D:B1:A8:EB:50:A0:ED:2D
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/gqk5VTLIy54FrilULbGo61Cg7S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.232.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:3f:af:0d:91:3c:f2:b3:6d:3e:a9:73:63:80:46:37:58:5e:
b3:c0:39:c7:f5:84:47:eb:90:52:be:54:a4:61:ef:a2:8b:dd:
18:14:58:c7:5b:dd:96:79:2d:45:2a:a5:95:2c:65:ae:41:c2:
2b:77:cd:f1:77:d2:48:2e:73:bd:c8:7a:0b:99:f2:79:b5:4d:
36:2b:b0:db:a6:fa:54:16:e2:d7:35:85:de:51:37:d5:a1:70:
31:e3:1a:f1:ee:bb:b3:f2:6c:29:43:ec:a3:6c:c9:ff:c5:6c:
ba:2f:be:18:39:8f:7f:05:13:1c:89:9c:2c:ed:41:e8:31:85:
1c:7c:d6:85:de:12:f6:83:9a:25:e6:fe:86:c5:62:ce:cc:c0:
b8:a4:44:34:48:dd:44:47:40:04:90:3c:74:63:c9:32:17:58:
e0:78:fb:78:ec:90:28:03:45:42:d4:c7:97:d2:46:8d:3f:59:
d8:d2:6c:e9:23:bd:84:6a:ea:b5:d2:d5:59:d7:16:86:5f:56:
2c:d6:d5:dd:d2:e1:f6:8e:02:d2:09:3f:88:62:b3:0d:7d:41:
cb:d1:fd:05:ee:0f:22:11:34:e0:5e:85:6f:66:d9:f5:6f:56:
b6:22:f5:95:4e:04:a7:5c:d0:8b:06:41:49:0d:43:85:f5:24:
34:35:74:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJ2GXTKZEzxhYa1dTgeEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2
Njk0NmYwHhcNMjQwMTAxMjIzMTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmE5Mzk1NTMyYzhjYjllMDVhZTI5NTQyZGIxYThlYjUwYTBlZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoORA1z1XhNf39GjETnikJkIGs/xA
RjHRWo7LoZyBoZmG0cgLx7+7aWDByL4IrCke0Cq9NUY87EWan7YuyBcxkOTycN5h
cP4/9dPtfK49MCpZxGduaAHNzVuuXq2rvW5xs7+db/F04O7nHKh5PpLd+L6Il3cU
9u9BniLsM4nG7No/x+Cge6WKniev4K2YDAY7tO37SjUouRRZhbSJvbJXA6SRgNA9
Po+KBhNuuXeObLxBhP/LLzBeMxQfvfV9TgydR5Hy7zYoGi0O+N+a3GFA6vaJvvFS
45vo7a08Gnv2E1C4xwuAgWMQhxD/dc/vISjmuYsvFbgW7bvzD63qEuAuCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIKpOVUyyMueBa4pVC2xqOtQoO0tMB8GA1UdIwQY
MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct
MDhhZDk0MTAxZDdlLzEvZ3FrNVZUTEl5NTRGcmlsVUxiR282MUNnN1MwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl
LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8roMA0G
CSqGSIb3DQEBCwUAA4IBAQA+P68NkTzys20+qXNjgEY3WF6zwDnH9YRH65BSvlSk
Ye+ii90YFFjHW92WeS1FKqWVLGWuQcIrd83xd9JILnO9yHoLmfJ5tU02K7DbpvpU
FuLXNYXeUTfVoXAx4xrx7ruz8mwpQ+yjbMn/xWy6L74YOY9/BRMciZws7UHoMYUc
fNaF3hL2g5ol5v6GxWLOzMC4pEQ0SN1ER0AEkDx0Y8kyF1jgePt47JAoA0VC1MeX
0kaNP1nY0mzpI72Eauq10tVZ1xaGX1Ys1tXd0uH2jgLSCT+IYrMNfUHL0f0F7g8i
ETTgXoVvZtn1b1a2IvWVTgSnXNCLBkFJDUOF9SQ0NXQ8
-----END CERTIFICATE-----
Generated at Fri May 10 01:44:58 2024 by rpki-client on console-ams.rpki-client.org