Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/oXVyZ-2n1OIyjbttdCvAFlnKRzU.roa
File: oXVyZ-2n1OIyjbttdCvAFlnKRzU.roa (raw, json)
Hash identifier: mZ6NJhBLZYu8Bl3xA0lGnHG5revE9361n7c/Px2FmfA=
Subject key identifier: A1:75:72:67:ED:A7:D4:E2:32:8D:BB:6D:74:2B:C0:16:59:CA:47:35
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC7956562B644EE41F0BEC31279293DC5
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/oXVyZ-2n1OIyjbttdCvAFlnKRzU.roa
Signing time: Tue 02 Jan 2024 00:31:45 +0000
ROA not before: Tue 02 Jan 2024 00:31:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62322
IP address blocks: 89.33.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:65:62:b6:44:ee:41:f0:be:c3:12:79:29:3d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1757267eda7d4e2328dbb6d742bc01659ca4735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:95:88:f9:0f:36:35:4e:ae:95:26:13:43:
6b:60:12:1f:fa:04:95:b3:b7:1a:52:61:c6:67:d0:
93:9c:d9:e2:7e:f9:59:11:55:1c:50:c8:02:29:ae:
33:5e:cd:93:30:03:5c:2b:3b:a8:ad:ac:a9:2e:79:
06:01:7b:b7:ed:1e:e2:de:27:b3:14:7e:21:48:09:
8c:a3:aa:d1:9c:5a:70:0a:8d:3b:c2:95:04:29:54:
07:9b:6a:30:fa:16:85:20:64:b1:89:a1:9c:7e:d7:
be:3d:10:89:ab:93:d7:3c:f4:f1:b6:bd:bd:43:f2:
67:b5:79:09:3e:e3:45:8a:c9:7c:1d:da:b3:7c:7f:
69:22:78:1d:98:f2:66:a7:81:b9:46:ea:e3:ea:cd:
6f:1d:26:e9:60:e0:07:2f:98:82:c7:b3:4e:fc:ca:
92:50:3b:ca:38:04:e3:04:7c:49:c9:6d:13:55:dd:
88:f1:c8:30:21:28:bd:51:fc:53:ab:0e:58:8e:62:
95:4e:e5:5d:9c:60:49:3b:30:18:53:a7:6b:7a:f8:
af:bb:f6:ef:02:a7:20:0e:bb:34:87:77:58:ab:1c:
64:e9:61:d1:31:21:59:d1:b3:3c:cc:b5:71:61:56:
4c:5a:f6:f7:df:a5:1e:c5:c7:3a:9b:a3:51:24:ef:
4c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:75:72:67:ED:A7:D4:E2:32:8D:BB:6D:74:2B:C0:16:59:CA:47:35
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/oXVyZ-2n1OIyjbttdCvAFlnKRzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.132.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:47:31:79:b1:bc:e6:69:e7:23:6d:39:73:79:ec:b2:e3:db:
30:34:ba:2e:e6:ad:11:9a:e2:68:09:1a:bd:a6:a1:af:d5:74:
87:98:bb:67:e3:7d:b4:0b:fc:0f:37:6c:ca:8a:fa:6e:0b:c0:
09:97:4e:b3:c8:61:fd:a6:03:10:37:c5:f2:d7:cd:0e:2e:20:
be:21:76:d9:e5:bd:b8:1e:0c:24:0a:ac:9c:55:1f:13:a3:ec:
d2:84:25:0b:bc:2a:b0:32:27:15:1e:57:ef:cc:be:5c:20:6c:
32:00:e1:c5:f7:e2:7e:3e:53:74:5b:e2:18:83:c8:16:93:cf:
5d:d8:c9:bc:19:43:51:b8:98:6a:dc:68:bc:82:df:d3:af:5f:
56:4c:1a:40:69:b8:d9:3d:62:45:3f:50:8f:54:a9:c4:15:53:
e3:31:8a:75:44:d9:1a:3e:04:51:d3:ef:29:a1:69:87:9a:bb:
cd:30:5a:eb:be:2d:9f:42:66:eb:ff:c2:f9:4a:6b:75:94:76:
00:c1:cd:45:62:15:9e:7c:0b:87:83:f8:36:7a:83:6f:b7:ed:
6e:c1:48:75:0c:59:c2:e4:ca:9d:1c:69:6e:c6:0b:3f:29:71:
cb:c1:c5:dd:33:37:00:14:56:34:a8:0c:b9:62:54:ed:5a:ea:
07:b4:94:c6
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzHlWVitkTuQfC+wxJ5KT3FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjQwMTAyMDAzMTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTc1NzI2N2VkYTdkNGUyMzI4ZGJiNmQ3NDJiYzAxNjU5Y2E0NzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy+ViPkPNjVOrpUmE0NrYBIf+gSV
s7caUmHGZ9CTnNnifvlZEVUcUMgCKa4zXs2TMANcKzuoraypLnkGAXu37R7i3iez
FH4hSAmMo6rRnFpwCo07wpUEKVQHm2ow+haFIGSxiaGcfte+PRCJq5PXPPTxtr29
Q/JntXkJPuNFisl8HdqzfH9pIngdmPJmp4G5Rurj6s1vHSbpYOAHL5iCx7NO/MqS
UDvKOATjBHxJyW0TVd2I8cgwISi9UfxTqw5YjmKVTuVdnGBJOzAYU6drevivu/bv
AqcgDrs0h3dYqxxk6WHRMSFZ0bM8zLVxYVZMWvb336Uexcc6m6NRJO9MfwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFKF1cmftp9TiMo27bXQrwBZZykc1MB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL29YVnlaLTJuMU9JeWpidHRkQ3ZBRmxuS1J6VS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZIYQw
DQYJKoZIhvcNAQELBQADggEBABpHMXmxvOZp5yNtOXN57LLj2zA0ui7mrRGa4mgJ
Gr2moa/VdIeYu2fjfbQL/A83bMqK+m4LwAmXTrPIYf2mAxA3xfLXzQ4uIL4hdtnl
vbgeDCQKrJxVHxOj7NKEJQu8KrAyJxUeV+/MvlwgbDIA4cX34n4+U3Rb4hiDyBaT
z13YybwZQ1G4mGrcaLyC39OvX1ZMGkBpuNk9YkU/UI9UqcQVU+MxinVE2Ro+BFHT
7ymhaYeau80wWuu+LZ9CZuv/wvlKa3WUdgDBzUViFZ58C4eD+DZ6g2+37W7BSHUM
WcLkyp0caW7GCz8pccvBxd0zNwAUVjSoDLliVO1a6ge0lMY=
-----END CERTIFICATE-----
Generated at Thu Jun 20 11:37:00 2024 by rpki-client on console-fra.rpki-client.org