Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/OUQCj4l5O7_TrCTJTTkfA9EZ_BY.roa
File: OUQCj4l5O7_TrCTJTTkfA9EZ_BY.roa (raw, json)
Hash identifier: ZSVCXV8dZNwsiLAECwmx6Hj/T+4k8/UXhXnRO1/qMds=
Subject key identifier: 39:44:02:8F:89:79:3B:BF:D3:AC:24:C9:4D:39:1F:03:D1:19:FC:16
Certificate issuer: /CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Certificate serial: 018CC7270E16701915798AE1D1E8F495E5D9
Authority key identifier: 8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/OUQCj4l5O7_TrCTJTTkfA9EZ_BY.roa
Signing time: Mon 01 Jan 2024 22:31:14 +0000
ROA not before: Mon 01 Jan 2024 22:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204516
IP address blocks: 213.190.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jul 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:0e:16:70:19:15:79:8a:e1:d1:e8:f4:95:e5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Validity
Not Before: Jan 1 22:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3944028f89793bbfd3ac24c94d391f03d119fc16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:be:42:e7:0f:1f:08:2d:ab:13:7c:65:b2:57:
95:53:be:56:98:f1:b6:d5:57:a1:be:86:03:74:1d:
7d:9b:e2:00:0d:c5:18:34:10:f5:1a:6c:a4:c4:b6:
24:21:ef:c1:4e:c7:05:b7:d4:6d:70:8f:ff:d5:cb:
9f:a6:e4:64:18:f1:c0:af:5d:b8:35:77:92:36:a7:
ea:0b:a7:36:fe:1e:de:60:b2:da:0d:8f:9e:1c:d2:
fb:50:e8:05:f2:86:ca:4a:d0:91:78:8d:32:8a:a4:
1d:69:fd:af:03:29:2b:c0:b5:8a:ca:4e:80:b4:8f:
7f:8d:a8:84:74:2a:84:9b:a5:d2:f8:b4:1c:0d:04:
42:66:13:f2:c5:e8:0a:99:b4:d4:78:f8:30:f7:b1:
d5:f7:51:34:ab:31:04:39:a7:b5:91:85:4a:e9:cb:
61:0f:05:4e:8f:d7:f3:5d:d4:a9:45:5c:69:90:bf:
70:68:5a:d7:a9:7b:e8:93:4e:b6:f0:1f:ca:28:12:
13:5d:1a:7e:71:dc:1b:97:fb:e7:88:5a:cc:57:ef:
4d:97:3f:bd:ff:2a:67:d5:c9:62:aa:fe:cc:bc:6e:
e0:0a:4e:7f:b2:17:14:da:a3:8b:94:21:54:ec:11:
f7:70:1e:67:1a:a5:7e:da:74:c9:a6:17:95:85:71:
7e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:44:02:8F:89:79:3B:BF:D3:AC:24:C9:4D:39:1F:03:D1:19:FC:16
X509v3 Authority Key Identifier:
keyid:8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/OUQCj4l5O7_TrCTJTTkfA9EZ_BY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.70.0/24
Signature Algorithm: sha256WithRSAEncryption
71:e0:eb:c7:f1:3d:6a:e0:eb:a6:26:aa:a5:9e:a1:cb:e9:df:
2d:b0:a5:69:b0:27:38:d9:f4:de:7f:c8:8c:5e:e1:70:87:28:
cc:95:f9:07:fd:e1:ed:69:a4:e2:3f:d0:10:04:6e:44:8f:8a:
c8:ee:f6:14:8b:47:0f:fd:e5:38:36:1b:d5:29:c2:15:c8:3f:
43:20:8e:dc:35:7b:7b:fe:14:af:48:1c:fc:d0:b9:34:42:4b:
b8:58:9d:6b:54:7f:b4:1b:51:d2:be:bf:6a:34:ba:51:c7:7a:
4e:e9:3f:f6:fc:48:e4:63:06:7a:47:90:cf:61:a6:82:d6:4b:
fb:49:ad:66:97:b2:3d:da:c7:2c:a5:b7:d4:8e:fa:97:7a:7e:
94:cf:f0:72:72:48:3b:ad:57:04:65:42:eb:69:66:20:d9:da:
d4:14:6f:60:21:2c:98:73:ee:55:e0:0c:b5:42:35:0c:97:0b:
c9:d1:9e:b7:60:69:24:49:5e:a0:e4:58:4a:ee:a1:3c:5d:59:
29:54:26:50:02:ab:60:48:88:0d:c3:ef:fa:44:da:87:2b:82:
f4:5e:87:e8:de:26:a3:bb:25:08:fe:e8:73:6b:49:38:7f:e0:
ae:3b:fe:f0:8c:97:fe:9e:6f:d7:dd:b9:cc:bd:a4:29:52:ef:
65:04:26:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJw4WcBkVeYrh0ej0leXZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMDYwMDQwZWYzYTA4MjNhYTk3M2YwZDA1OTJiMWRkYTgw
OGY3ODIwHhcNMjQwMTAxMjIzMTE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTQ0MDI4Zjg5NzkzYmJmZDNhYzI0Yzk0ZDM5MWYwM2QxMTlmYzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzr5C5w8fCC2rE3xlsleVU75WmPG2
1VehvoYDdB19m+IADcUYNBD1GmykxLYkIe/BTscFt9RtcI//1cufpuRkGPHAr124
NXeSNqfqC6c2/h7eYLLaDY+eHNL7UOgF8obKStCReI0yiqQdaf2vAykrwLWKyk6A
tI9/jaiEdCqEm6XS+LQcDQRCZhPyxegKmbTUePgw97HV91E0qzEEOae1kYVK6cth
DwVOj9fzXdSpRVxpkL9waFrXqXvok0628B/KKBITXRp+cdwbl/vniFrMV+9Nlz+9
/ypn1cliqv7MvG7gCk5/shcU2qOLlCFU7BH3cB5nGqV+2nTJpheVhXF+XQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDlEAo+JeTu/06wkyU05HwPRGfwWMB8GA1UdIwQY
MBaAFIwGAEDvOggjqpc/DQWSsd2oCPeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakFZQVFPODZDQ09xbHo4TkJaS3gzYWdJOTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lNzU0OWUtNWIyNS00MjAwLTg4Yjkt
NGU0YTM1ZGQzNjc3LzEvT1VRQ2o0bDVPN19UckNUSlRUa2ZBOUVaX0JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lNzU0OWUtNWIyNS00MjAwLTg4YjktNGU0YTM1ZGQzNjc3
LzEvakFZQVFPODZDQ09xbHo4TkJaS3gzYWdJOTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1b5GMA0G
CSqGSIb3DQEBCwUAA4IBAQBx4OvH8T1q4OumJqqlnqHL6d8tsKVpsCc42fTef8iM
XuFwhyjMlfkH/eHtaaTiP9AQBG5Ej4rI7vYUi0cP/eU4NhvVKcIVyD9DII7cNXt7
/hSvSBz80Lk0Qku4WJ1rVH+0G1HSvr9qNLpRx3pO6T/2/EjkYwZ6R5DPYaaC1kv7
Sa1ml7I92scspbfUjvqXen6Uz/Byckg7rVcEZULraWYg2drUFG9gISyYc+5V4Ay1
QjUMlwvJ0Z63YGkkSV6g5FhK7qE8XVkpVCZQAqtgSIgNw+/6RNqHK4L0Xofo3iaj
uyUI/uhza0k4f+CuO/7wjJf+nm/X3bnMvaQpUu9lBCaX
-----END CERTIFICATE-----
Generated at Thu Jul 4 17:29:33 2024 by rpki-client on console-ams.rpki-client.org