Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/oLIJy86JxE35ke9Gl5fMlnjTVbc.roa
File: oLIJy86JxE35ke9Gl5fMlnjTVbc.roa (raw, json)
Hash identifier: 1rJg5Q/MOzQKWxaN/e+BpXUF2JP6ZOZje/3vfiM9b+U=
Subject key identifier: A0:B2:09:CB:CE:89:C4:4D:F9:91:EF:46:97:97:CC:96:78:D3:55:B7
Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Certificate serial: 018CC2DAE636989F1A2B9F0AB1934A439438
Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/oLIJy86JxE35ke9Gl5fMlnjTVbc.roa
Signing time: Mon 01 Jan 2024 02:29:34 +0000
ROA not before: Mon 01 Jan 2024 02:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198229
IP address blocks: 194.31.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e6:36:98:9f:1a:2b:9f:0a:b1:93:4a:43:94:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Validity
Not Before: Jan 1 02:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0b209cbce89c44df991ef469797cc9678d355b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:82:1a:83:b8:66:ea:08:cd:1d:6b:c3:23:bf:
23:77:83:30:2e:0b:d9:b3:03:3b:42:81:0a:8b:ec:
70:1b:d5:0b:e2:22:08:62:a8:96:69:93:db:d1:74:
39:2a:0d:f4:4f:69:2d:d8:3b:e7:f3:2d:8c:2b:fb:
d8:11:56:15:eb:ae:98:dc:f7:02:ed:69:28:5b:31:
7e:6c:c9:c1:84:79:b9:75:84:43:19:14:55:b6:1d:
9a:44:1b:1f:17:1a:19:93:49:f6:51:01:ba:d1:e4:
46:c8:05:12:60:8b:44:d2:ce:53:6f:a9:49:2e:20:
24:b5:06:dc:5f:c2:78:6a:e3:b3:c2:b2:cd:99:c0:
f5:28:4d:71:54:b6:5b:8a:16:4d:0c:67:07:04:89:
64:a1:2b:5f:19:c6:5b:06:5f:04:15:09:07:af:62:
65:4b:ef:3a:ed:95:c9:c6:9b:a4:24:27:ac:a3:52:
66:df:9c:d3:d1:67:54:ad:1c:b6:3b:14:0b:19:86:
bb:9e:9e:9d:75:aa:2e:11:b3:08:b4:a9:00:c0:f4:
4c:36:c0:83:0b:d5:44:2d:c9:74:d8:20:b8:cd:e3:
87:99:b4:46:e4:36:5e:28:09:28:1b:75:26:44:4f:
9f:88:05:5b:50:95:98:64:28:a5:69:1f:04:f6:78:
5a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B2:09:CB:CE:89:C4:4D:F9:91:EF:46:97:97:CC:96:78:D3:55:B7
X509v3 Authority Key Identifier:
keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/oLIJy86JxE35ke9Gl5fMlnjTVbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.132.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:43:9a:2c:0a:70:82:3b:67:44:df:15:99:0c:49:32:07:a5:
ef:ef:b4:5b:b7:ea:9a:37:d6:72:0b:67:6d:eb:c2:d3:61:1f:
e5:6a:42:a1:73:26:f1:b5:57:a7:e2:08:3f:93:80:63:a1:03:
5e:69:b6:68:82:02:6a:ec:c5:90:db:6c:cb:8f:96:28:f5:73:
3f:c9:33:44:0f:46:bc:f1:3d:0c:90:78:36:6e:60:e4:f6:d7:
13:dd:d8:9a:7f:4c:32:42:af:94:58:a9:46:8c:61:d7:27:70:
39:0d:d7:11:9f:9f:ea:b4:1c:31:89:41:f4:e6:85:72:a1:59:
11:0f:0d:1e:05:80:3a:30:fc:1e:b8:91:a0:48:2c:91:d4:af:
c4:f8:b2:4d:1c:8e:6f:f4:c1:7a:67:04:b0:e6:08:5d:30:fc:
a2:45:88:9f:0f:28:a7:15:28:e9:38:cb:29:fe:8f:45:74:a0:
51:7a:63:9f:ae:9b:00:cf:f8:6a:39:2b:3a:89:be:b1:81:2e:
13:c0:7f:56:ea:54:f4:a0:a3:62:11:e8:00:b8:1f:d4:36:de:
c1:67:72:4c:63:19:9d:a0:ca:ce:4c:7a:c1:74:95:d8:03:d7:
72:8d:59:0a:68:d6:2a:b0:a9:01:2a:e3:4b:3a:b5:98:30:fe:
e4:39:cf:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2uY2mJ8aK58KsZNKQ5Q4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi
MjRhZjcwHhcNMjQwMTAxMDIyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGIyMDljYmNlODljNDRkZjk5MWVmNDY5Nzk3Y2M5Njc4ZDM1NWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIIag7hm6gjNHWvDI78jd4MwLgvZ
swM7QoEKi+xwG9UL4iIIYqiWaZPb0XQ5Kg30T2kt2Dvn8y2MK/vYEVYV666Y3PcC
7WkoWzF+bMnBhHm5dYRDGRRVth2aRBsfFxoZk0n2UQG60eRGyAUSYItE0s5Tb6lJ
LiAktQbcX8J4auOzwrLNmcD1KE1xVLZbihZNDGcHBIlkoStfGcZbBl8EFQkHr2Jl
S+867ZXJxpukJCeso1Jm35zT0WdUrRy2OxQLGYa7np6ddaouEbMItKkAwPRMNsCD
C9VELcl02CC4zeOHmbRG5DZeKAkoG3UmRE+fiAVbUJWYZCilaR8E9nhaVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKCyCcvOicRN+ZHvRpeXzJZ401W3MB8GA1UdIwQY
MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt
MTBiYjQ1NzlkNTI4LzEvb0xJSnk4Nkp4RTM1a2U5R2w1Zk1sbmpUVmJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4
LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh+EMA0G
CSqGSIb3DQEBCwUAA4IBAQChQ5osCnCCO2dE3xWZDEkyB6Xv77Rbt+qaN9ZyC2dt
68LTYR/lakKhcybxtVen4gg/k4BjoQNeabZoggJq7MWQ22zLj5Yo9XM/yTNED0a8
8T0MkHg2bmDk9tcT3diaf0wyQq+UWKlGjGHXJ3A5DdcRn5/qtBwxiUH05oVyoVkR
Dw0eBYA6MPweuJGgSCyR1K/E+LJNHI5v9MF6ZwSw5ghdMPyiRYifDyinFSjpOMsp
/o9FdKBRemOfrpsAz/hqOSs6ib6xgS4TwH9W6lT0oKNiEegAuB/UNt7BZ3JMYxmd
oMrOTHrBdJXYA9dyjVkKaNYqsKkBKuNLOrWYMP7kOc8p
-----END CERTIFICATE-----
Generated at Fri Jun 21 05:33:56 2024 by rpki-client on console-fra.rpki-client.org