Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/OlsJTeabmAGdHkgiStDl2J3Yia8.roa
File: OlsJTeabmAGdHkgiStDl2J3Yia8.roa (raw, json)
Hash identifier: 3LB59E2zGfoZNdBhX0Upke/031gDOY/8Kr/gYOwgZuI=
Subject key identifier: 3A:5B:09:4D:E6:9B:98:01:9D:1E:48:22:4A:D0:E5:D8:9D:D8:89:AF
Certificate issuer: /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Certificate serial: 018CC64A70B7C9EEF8676B0AE68591C3B93E
Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/OlsJTeabmAGdHkgiStDl2J3Yia8.roa
Signing time: Mon 01 Jan 2024 18:30:16 +0000
ROA not before: Mon 01 Jan 2024 18:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47377
IP address blocks: 194.62.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:70:b7:c9:ee:f8:67:6b:0a:e6:85:91:c3:b9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Validity
Not Before: Jan 1 18:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a5b094de69b98019d1e48224ad0e5d89dd889af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:90:6b:e1:e0:e0:4d:f7:af:0b:2d:e3:4b:b0:
4f:c4:91:15:ba:3a:8b:e4:04:c0:6e:b6:6c:44:18:
34:e0:6b:68:ef:ea:d1:2b:88:ba:c5:9a:2e:13:7b:
b0:0a:38:89:59:54:7e:fa:ba:36:5a:0e:3d:4b:1e:
c7:64:2c:b9:66:88:08:8a:cf:29:14:3c:10:29:22:
01:75:1e:8b:08:dd:67:c5:71:2d:41:53:78:e1:63:
00:48:73:fb:0a:15:bb:db:da:79:a6:df:47:a2:92:
9b:64:2d:9f:dd:12:d3:c1:a2:28:c1:a0:b5:27:03:
db:df:7b:a9:af:5c:f8:c3:5e:ca:e5:1d:b9:d6:39:
2a:dc:df:76:17:7e:9a:9d:a7:f4:2c:c9:22:b1:58:
11:2e:c6:19:71:30:22:7a:47:ac:84:74:c3:a4:12:
40:8a:e9:70:20:5d:cb:5f:23:28:be:95:ad:81:85:
25:12:df:52:03:c4:da:37:f4:97:55:ca:fa:45:dc:
17:ed:f4:0f:e9:09:bd:de:e5:f5:28:4d:cf:bb:57:
07:ff:ed:af:40:90:54:28:78:a1:b6:91:4b:d0:a5:
4e:b6:af:49:40:c2:b0:e0:e5:bb:85:3f:e2:13:08:
82:67:05:cc:2d:ec:e6:ed:5e:ba:1a:c7:b6:96:6e:
90:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5B:09:4D:E6:9B:98:01:9D:1E:48:22:4A:D0:E5:D8:9D:D8:89:AF
X509v3 Authority Key Identifier:
keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/OlsJTeabmAGdHkgiStDl2J3Yia8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.72.0/24
Signature Algorithm: sha256WithRSAEncryption
25:56:f8:a7:a0:f0:9b:df:eb:23:91:0e:6e:af:8c:ab:ac:11:
9c:7b:01:77:2b:a9:ac:be:d6:d4:b9:c0:c3:94:d2:f0:2e:8d:
7a:c3:91:04:03:9a:69:21:70:41:7d:3d:25:46:f6:af:52:92:
5e:35:f4:83:1d:ef:4e:5d:9a:60:41:71:80:ca:2f:bc:cd:83:
76:58:f4:7a:51:fb:ac:b5:a3:8c:41:9b:92:04:de:9f:b6:36:
6d:b1:46:2e:19:fe:64:ed:24:db:13:77:43:39:8e:fa:23:1d:
8b:64:31:ff:99:79:a0:71:bc:12:c1:b8:ba:d4:98:23:ec:13:
86:01:ef:a7:05:1b:22:f8:f3:bc:ea:3d:51:9b:dc:0b:86:41:
8b:d2:54:b1:09:e5:e5:2b:68:1a:0f:b4:d9:77:f5:13:06:fe:
0b:11:9b:e9:b9:7a:14:d0:38:bb:ed:25:c1:2c:50:d5:68:16:
55:7f:02:3c:9c:95:ce:80:c7:e9:4c:fc:d8:0c:dd:1e:3d:32:
e7:8d:62:0a:38:9e:88:ef:2c:4b:77:a1:22:63:4c:70:6b:f7:
39:a1:0f:75:5d:ed:73:f1:70:fb:5b:22:0e:be:71:37:0f:60:
24:4d:08:ee:a6:67:b0:af:51:1b:08:6a:21:ca:ad:0d:ab:50:
51:1b:66:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSnC3ye74Z2sK5oWRw7k+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNDAzYmM2MGI0YTEzYzNkYWEzNDExYWM5MjNjNjM3MmQ0
MjNlYjgwHhcNMjQwMTAxMTgzMDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTViMDk0ZGU2OWI5ODAxOWQxZTQ4MjI0YWQwZTVkODlkZDg4OWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpBr4eDgTfevCy3jS7BPxJEVujqL
5ATAbrZsRBg04Gto7+rRK4i6xZouE3uwCjiJWVR++ro2Wg49Sx7HZCy5ZogIis8p
FDwQKSIBdR6LCN1nxXEtQVN44WMASHP7ChW729p5pt9HopKbZC2f3RLTwaIowaC1
JwPb33upr1z4w17K5R251jkq3N92F36anaf0LMkisVgRLsYZcTAiekeshHTDpBJA
iulwIF3LXyMovpWtgYUlEt9SA8TaN/SXVcr6RdwX7fQP6Qm93uX1KE3Pu1cH/+2v
QJBUKHihtpFL0KVOtq9JQMKw4OW7hT/iEwiCZwXMLezm7V66Gse2lm6QrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDpbCU3mm5gBnR5IIkrQ5did2ImvMB8GA1UdIwQY
MBaAFExAO8YLShPD2qNBGskjxjctQj64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjct
MmU4NGI4ZDE4ZTRlLzEvT2xzSlRlYWJtQUdkSGtnaVN0RGwySjNZaWE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjctMmU4NGI4ZDE4ZTRl
LzEvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj5IMA0G
CSqGSIb3DQEBCwUAA4IBAQAlVvinoPCb3+sjkQ5ur4yrrBGcewF3K6msvtbUucDD
lNLwLo16w5EEA5ppIXBBfT0lRvavUpJeNfSDHe9OXZpgQXGAyi+8zYN2WPR6Ufus
taOMQZuSBN6ftjZtsUYuGf5k7STbE3dDOY76Ix2LZDH/mXmgcbwSwbi61Jgj7BOG
Ae+nBRsi+PO86j1Rm9wLhkGL0lSxCeXlK2gaD7TZd/UTBv4LEZvpuXoU0Di77SXB
LFDVaBZVfwI8nJXOgMfpTPzYDN0ePTLnjWIKOJ6I7yxLd6EiY0xwa/c5oQ91Xe1z
8XD7WyIOvnE3D2AkTQjupmewr1EbCGohyq0Nq1BRG2Z3
-----END CERTIFICATE-----
Generated at Sat Jun 22 09:16:14 2024 by rpki-client on console-fra.rpki-client.org