Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/cgwC3lrWO880doz4bZGsnwRl5Jg.roa
File: cgwC3lrWO880doz4bZGsnwRl5Jg.roa (raw, json)
Hash identifier: 4s1h35eNd4FE7ElmYCR+W5nhBFLQqCvzmNBpS0ybGxw=
Subject key identifier: 72:0C:02:DE:5A:D6:3B:CF:34:76:8C:F8:6D:91:AC:9F:04:65:E4:98
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 018CC9BB03D9898711DDE1FAB8BC08AE4258
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/cgwC3lrWO880doz4bZGsnwRl5Jg.roa
Signing time: Tue 02 Jan 2024 10:32:05 +0000
ROA not before: Tue 02 Jan 2024 10:32:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 192.109.200.0/24 maxlen: 24
192.109.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:03:d9:89:87:11:dd:e1:fa:b8:bc:08:ae:42:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: Jan 2 10:32:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=720c02de5ad63bcf34768cf86d91ac9f0465e498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c6:72:07:67:ea:51:f4:09:c2:31:94:bc:c0:
13:b0:9d:f5:c8:24:c7:58:8e:12:61:46:86:e3:d2:
4a:1e:12:0d:d0:88:d3:c0:43:07:d6:e2:59:22:2c:
8a:5d:00:11:50:e4:ba:15:96:00:24:17:5f:0d:30:
18:13:32:43:1a:1a:b4:4d:02:09:e0:2b:ea:90:37:
cb:53:cb:44:8a:22:eb:a9:eb:96:31:b5:a0:48:3a:
13:9c:4e:a3:60:5c:a3:f9:81:f6:c9:e6:c9:4e:48:
b2:b1:e8:03:9b:93:19:8d:22:31:17:af:82:1c:03:
ff:ad:b4:a5:a9:b7:44:71:ab:81:07:20:fd:cd:3d:
93:00:cc:6c:3a:b6:60:31:6f:e3:46:ac:84:94:9f:
fe:9e:e3:b5:cc:dd:d2:71:a7:e7:37:86:61:79:3f:
ec:02:b3:1b:01:d5:62:36:e3:63:f0:7b:9a:70:5b:
31:e6:ac:4c:c1:15:b2:31:0e:7d:1c:d3:23:12:73:
52:2b:df:28:64:6a:96:d8:fd:44:60:76:bb:8b:92:
53:c1:ca:2c:7c:dc:41:92:82:de:13:3c:cb:fc:e7:
cc:90:f3:9b:af:37:b7:e5:4f:93:01:18:2f:eb:df:
e6:d4:6d:ee:9e:8d:8b:e9:da:d3:41:c7:8b:5d:09:
17:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0C:02:DE:5A:D6:3B:CF:34:76:8C:F8:6D:91:AC:9F:04:65:E4:98
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/cgwC3lrWO880doz4bZGsnwRl5Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.139.0/24
192.109.200.0/24
Signature Algorithm: sha256WithRSAEncryption
09:4e:5c:31:f1:2e:9c:38:de:39:9a:c9:d8:09:56:1f:85:32:
d2:9b:51:0c:ce:84:16:4f:48:89:b5:10:cd:a0:8e:dd:12:c9:
d6:d2:02:9f:4d:e3:a0:dd:d1:f6:e8:6b:1a:9a:c7:db:6c:26:
27:2b:9f:af:c5:ae:ef:23:6a:c5:98:98:f9:83:29:71:4a:e7:
0d:73:b0:03:4c:99:70:a1:47:1f:e4:60:0e:8f:9e:ca:4c:25:
6a:00:dc:69:44:bf:49:2e:9d:88:23:31:d2:63:60:c0:a1:e8:
bf:e1:73:35:4a:8c:56:9f:d7:dd:92:cb:53:a4:ac:f2:72:e0:
53:e3:34:ce:f8:d9:bd:77:bc:c6:54:06:0d:d4:44:02:9d:c4:
ad:1d:81:e9:b4:88:b6:62:a8:41:7d:0e:7c:cf:4e:66:5e:c6:
ef:0d:7d:a7:fc:9f:32:d0:5e:a7:63:7f:be:4a:86:f4:e5:61:
4e:99:97:f0:0c:7a:44:7e:5c:49:e1:91:16:6f:23:2a:87:03:
ed:5e:72:74:d0:81:69:92:5d:e1:cf:51:12:2e:dc:e7:e9:04:
e0:7a:99:03:30:42:d3:67:3f:0f:c8:55:d5:1e:54:7c:bf:48:
dd:7e:b2:cc:78:03:c0:0c:c0:b6:82:e0:39:56:61:71:15:88:
b5:d5:fd:af
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzJuwPZiYcR3eH6uLwIrkJYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZjVhMTBlNGZkMjY1NWFkYmJiNDBlZGUxOGIyNjE1YWM1
NThlYTkwHhcNMjQwMTAyMTAzMjA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjBjMDJkZTVhZDYzYmNmMzQ3NjhjZjg2ZDkxYWM5ZjA0NjVlNDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+MZyB2fqUfQJwjGUvMATsJ31yCTH
WI4SYUaG49JKHhIN0IjTwEMH1uJZIiyKXQARUOS6FZYAJBdfDTAYEzJDGhq0TQIJ
4CvqkDfLU8tEiiLrqeuWMbWgSDoTnE6jYFyj+YH2yebJTkiysegDm5MZjSIxF6+C
HAP/rbSlqbdEcauBByD9zT2TAMxsOrZgMW/jRqyElJ/+nuO1zN3ScafnN4ZheT/s
ArMbAdViNuNj8HuacFsx5qxMwRWyMQ59HNMjEnNSK98oZGqW2P1EYHa7i5JTwcos
fNxBkoLeEzzL/OfMkPObrze35U+TARgv69/m1G3uno2L6drTQceLXQkXpQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHIMAt5a1jvPNHaM+G2RrJ8EZeSYMB8GA1UdIwQY
MBaAFEH1oQ5P0mVa27tA7eGLJhWsVY6pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZXaERrX1NaVnJidTBEdDRZc21GYXhWanFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84ZDNjODItZTQwMy00ZGE2LWIzMTUt
ODc5MDIwNmYwZDc0LzEvY2d3QzNscldPODgwZG96NGJaR3Nud1JsNUpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84ZDNjODItZTQwMy00ZGE2LWIzMTUtODc5MDIwNmYwZDc0
LzEvUWZXaERrX1NaVnJidTBEdDRZc21GYXhWanFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwG2LAwQA
wG3IMA0GCSqGSIb3DQEBCwUAA4IBAQAJTlwx8S6cON45msnYCVYfhTLSm1EMzoQW
T0iJtRDNoI7dEsnW0gKfTeOg3dH26GsamsfbbCYnK5+vxa7vI2rFmJj5gylxSucN
c7ADTJlwoUcf5GAOj57KTCVqANxpRL9JLp2IIzHSY2DAoei/4XM1SoxWn9fdkstT
pKzycuBT4zTO+Nm9d7zGVAYN1EQCncStHYHptIi2YqhBfQ58z05mXsbvDX2n/J8y
0F6nY3++Sob05WFOmZfwDHpEflxJ4ZEWbyMqhwPtXnJ00IFpkl3hz1ESLtzn6QTg
epkDMELTZz8PyFXVHlR8v0jdfrLMeAPADMC2guA5VmFxFYi11f2v
-----END CERTIFICATE-----
Generated at Fri May 3 10:48:05 2024 by rpki-client on console-fra.rpki-client.org