Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OnlPWvhn986omVqkpPiv0fkgfV0.roa
File: OnlPWvhn986omVqkpPiv0fkgfV0.roa (raw, json)
Hash identifier: qM9tur8846JE2/F/Dgo/GhyF0kgx6WSc/HkBR4goWzs=
Subject key identifier: 3A:79:4F:5A:F8:67:F7:CE:A8:99:5A:A4:A4:F8:AF:D1:F9:20:7D:5D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018F404380E7975311822F07CC51EB7358CD
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OnlPWvhn986omVqkpPiv0fkgfV0.roa
Signing time: Fri 03 May 2024 21:01:56 +0000
ROA not before: Fri 03 May 2024 21:01:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30823
IP address blocks: 94.177.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:40:43:80:e7:97:53:11:82:2f:07:cc:51:eb:73:58:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 3 21:01:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a794f5af867f7cea8995aa4a4f8afd1f9207d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:8e:e0:2f:90:3e:25:d5:f5:22:61:48:04:
da:b0:78:6f:8a:b8:84:3c:e8:b3:6a:2a:be:62:f7:
b9:ab:4f:9c:91:f5:f7:06:2e:25:4e:db:2f:ea:c5:
1c:cb:05:f3:e6:39:49:2e:bd:55:24:0c:85:53:00:
a6:28:8b:11:ca:11:3f:3c:1a:23:29:f4:92:5e:e4:
e1:7f:56:98:0c:d9:87:61:3a:0a:e7:fc:24:bf:f4:
29:71:7e:b0:ca:7a:eb:66:ae:e0:28:b8:21:21:95:
83:bf:ba:4a:3a:c2:fb:13:81:04:be:13:a7:95:ef:
a8:97:25:4d:f8:d4:c4:51:36:7c:17:5b:03:66:a8:
4c:fe:e7:a5:cb:95:78:2d:44:4d:3b:83:ce:a6:4f:
cc:fc:3a:00:e5:7f:57:4a:2d:5e:d3:88:da:39:72:
67:1f:9a:e9:e5:46:dd:c6:63:1c:5f:0b:7a:b8:4c:
42:6f:70:0d:7e:16:fc:ce:bd:88:fd:f1:d7:38:3e:
00:d0:35:86:aa:76:de:f0:68:13:86:13:8b:8a:a1:
37:66:73:08:c3:95:9f:78:1f:a8:e6:2e:77:da:95:
6b:9f:df:a8:4e:f7:f0:6e:70:15:6d:2c:e5:26:e9:
a7:91:ed:10:59:12:06:64:f1:fb:01:4a:5a:86:84:
6c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:79:4F:5A:F8:67:F7:CE:A8:99:5A:A4:A4:F8:AF:D1:F9:20:7D:5D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OnlPWvhn986omVqkpPiv0fkgfV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.13.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a6:3f:5a:c1:5b:ec:23:b0:ba:9a:1a:3a:92:5c:a3:d6:5d:
ca:b8:41:e3:2a:cb:4c:2e:29:80:83:c3:9b:e2:42:2b:41:2d:
33:0c:f5:78:15:ca:04:fe:4a:0b:77:e3:e2:7d:10:5f:c6:e8:
ee:e9:be:fa:8e:66:51:f8:91:4c:fa:ba:12:c2:fa:87:6c:63:
65:c4:db:3c:86:29:c9:bc:ca:5e:4c:b2:d6:5d:b5:b2:df:61:
fa:24:10:f5:a3:8c:94:0f:a7:6c:55:45:5c:1e:28:16:a4:a9:
7d:7b:38:94:bd:95:f5:09:06:1a:6e:5b:b7:97:ac:79:f3:63:
5f:1d:7a:04:b4:3d:34:04:63:a0:b7:04:bc:de:59:75:46:ba:
88:41:02:51:80:12:ea:cd:1a:a6:93:78:2c:50:75:11:cb:02:
87:21:ad:f9:e3:fb:00:d4:a7:db:c4:dc:f5:0b:f0:36:b0:58:
a4:0d:f0:c4:ad:5a:b4:74:bc:6b:6e:df:64:d9:ff:ec:7c:df:
21:d7:3e:8c:ec:82:1a:51:b2:48:a6:06:61:50:da:ff:24:99:
32:8b:73:9b:9a:7c:ef:0a:90:62:eb:eb:0b:99:f2:ea:ea:3c:
f9:64:0f:e2:cd:52:53:7a:fa:e9:38:08:55:2e:11:a2:fc:24:
e5:d5:31:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY9AQ4Dnl1MRgi8HzFHrc1jNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwNTAzMjEwMTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTc5NGY1YWY4NjdmN2NlYTg5OTVhYTRhNGY4YWZkMWY5MjA3ZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYqO4C+QPiXV9SJhSATasHhviriE
POizaiq+Yve5q0+ckfX3Bi4lTtsv6sUcywXz5jlJLr1VJAyFUwCmKIsRyhE/PBoj
KfSSXuThf1aYDNmHYToK5/wkv/QpcX6wynrrZq7gKLghIZWDv7pKOsL7E4EEvhOn
le+olyVN+NTEUTZ8F1sDZqhM/uely5V4LURNO4POpk/M/DoA5X9XSi1e04jaOXJn
H5rp5UbdxmMcXwt6uExCb3ANfhb8zr2I/fHXOD4A0DWGqnbe8GgThhOLiqE3ZnMI
w5WfeB+o5i532pVrn9+oTvfwbnAVbSzlJumnke0QWRIGZPH7AUpahoRsqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDp5T1r4Z/fOqJlapKT4r9H5IH1dMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvT25sUFd2aG45ODZvbVZxa3BQaXYwZmtnZlYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrENMA0G
CSqGSIb3DQEBCwUAA4IBAQBwpj9awVvsI7C6mho6klyj1l3KuEHjKstMLimAg8Ob
4kIrQS0zDPV4FcoE/koLd+PifRBfxuju6b76jmZR+JFM+roSwvqHbGNlxNs8hinJ
vMpeTLLWXbWy32H6JBD1o4yUD6dsVUVcHigWpKl9eziUvZX1CQYablu3l6x582Nf
HXoEtD00BGOgtwS83ll1RrqIQQJRgBLqzRqmk3gsUHURywKHIa354/sA1KfbxNz1
C/A2sFikDfDErVq0dLxrbt9k2f/sfN8h1z6M7IIaUbJIpgZhUNr/JJkyi3Obmnzv
CpBi6+sLmfLq6jz5ZA/izVJTevrpOAhVLhGi/CTl1TFn
-----END CERTIFICATE-----
Generated at Sun May 19 06:34:55 2024 by rpki-client on console-ams.rpki-client.org