Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/O__KNZ5ROUJsP7Hr8RW_M7OTFJc.roa
File: O__KNZ5ROUJsP7Hr8RW_M7OTFJc.roa (raw, json)
Hash identifier: pVSJtlQe3VE+XnJ2/KeLc7ILBN0ZeWp2bywxB/W7BVA=
Subject key identifier: 3B:FF:CA:35:9E:51:39:42:6C:3F:B1:EB:F1:15:BF:33:B3:93:14:97
Certificate issuer: /CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Certificate serial: 0192B7524C4C8E61D44FE35C39617E19800F
Authority key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/O__KNZ5ROUJsP7Hr8RW_M7OTFJc.roa
Signing time: Wed 23 Oct 2024 03:01:16 +0000
ROA not before: Wed 23 Oct 2024 03:01:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 185.28.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b7:52:4c:4c:8e:61:d4:4f:e3:5c:39:61:7e:19:80:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Validity
Not Before: Oct 23 03:01:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3bffca359e5139426c3fb1ebf115bf33b3931497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:6f:d6:25:98:3a:d7:f2:fb:5d:52:e0:d8:
4b:31:dd:e7:a4:1d:e2:33:46:80:12:a9:73:24:90:
14:7d:e2:ce:49:c4:b4:fa:23:75:16:86:db:c4:3c:
96:d5:b5:bf:49:15:a6:37:bc:79:79:b5:26:9a:fb:
70:22:7f:27:a7:73:c6:ff:8f:8c:e4:b3:27:49:5a:
6f:d5:41:61:f5:c7:d3:f5:03:82:f5:08:d3:d8:21:
a6:86:e5:5a:b5:67:75:8c:02:90:e0:4c:9d:3d:52:
7d:6d:25:90:68:2c:4f:f6:3f:4e:e5:d9:d2:d5:62:
48:df:63:db:2b:d2:81:dd:8a:38:18:a1:62:ca:db:
1d:a4:02:eb:aa:ba:78:51:2a:3b:da:cc:07:6f:44:
a1:13:80:b6:8a:65:a7:85:29:4d:30:d2:05:9e:3d:
f9:db:08:6a:b9:50:3e:47:3c:a8:e5:09:95:a5:59:
e6:4c:a3:a1:78:37:39:c2:18:9f:fc:e6:c3:0a:33:
b4:3c:9e:f7:55:70:1b:a1:88:4e:56:7e:ac:fb:1d:
3b:bc:dd:6a:2e:0f:5d:cd:98:49:e6:e0:4e:e4:65:
a0:b1:f1:51:bf:44:70:56:80:84:47:e3:2c:b4:41:
75:2f:c9:13:db:99:0a:d8:41:ef:5b:82:27:ef:b3:
af:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FF:CA:35:9E:51:39:42:6C:3F:B1:EB:F1:15:BF:33:B3:93:14:97
X509v3 Authority Key Identifier:
keyid:9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/O__KNZ5ROUJsP7Hr8RW_M7OTFJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.36.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:f4:5a:84:0b:53:18:1a:aa:10:69:90:f7:2a:25:06:91:90:
d6:e0:3d:fe:af:2e:2c:ef:3a:e1:49:f3:7d:75:74:c9:af:de:
db:f2:c3:90:89:ed:68:0f:b8:46:ea:6d:be:5b:a8:27:db:83:
ea:38:cc:82:cb:76:62:cf:ea:ed:e8:e0:03:d4:a9:b7:20:5f:
00:ad:e8:ec:50:67:70:44:97:b6:fa:8e:d7:af:9d:ad:8f:93:
73:05:99:1b:cd:b7:3a:23:e3:f4:62:c9:be:b7:70:20:b7:68:
51:ba:15:e1:90:2a:e4:2a:66:b4:8c:cf:2e:75:a5:72:8e:a2:
8b:05:c6:6b:7a:c0:16:2a:fa:ac:b7:03:93:0b:85:0a:2d:a6:
06:cf:21:7e:4d:75:f9:dc:db:1d:b9:5d:f9:fc:a4:34:ee:19:
d2:53:2e:4b:54:cf:c9:3c:71:ad:db:4c:e8:8c:e5:2a:18:1c:
73:b2:7d:8d:f4:63:e2:83:1d:d3:4b:c7:1c:58:f1:f6:62:fa:
c1:cb:52:73:b2:9f:cd:80:22:a2:97:6b:46:b4:a9:5d:00:61:
4e:2c:db:61:8a:06:3e:5e:73:2a:e9:fd:18:44:ba:20:07:d3:
37:c8:9a:d0:a3:de:fa:e2:40:68:60:12:6e:a6:a3:af:18:02:
1d:66:58:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZK3UkxMjmHUT+NcOWF+GYAPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliOTdjMjJkMGIzMzhhOGE0NWFhMTM0NWIwOTE3YmEwZGM5
NzMzOTAwHhcNMjQxMDIzMDMwMTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmZmY2EzNTllNTEzOTQyNmMzZmIxZWJmMTE1YmYzM2IzOTMxNDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpBv1iWYOtfy+11S4NhLMd3npB3i
M0aAEqlzJJAUfeLOScS0+iN1FobbxDyW1bW/SRWmN7x5ebUmmvtwIn8np3PG/4+M
5LMnSVpv1UFh9cfT9QOC9QjT2CGmhuVatWd1jAKQ4EydPVJ9bSWQaCxP9j9O5dnS
1WJI32PbK9KB3Yo4GKFiytsdpALrqrp4USo72swHb0ShE4C2imWnhSlNMNIFnj35
2whquVA+Rzyo5QmVpVnmTKOheDc5whif/ObDCjO0PJ73VXAboYhOVn6s+x07vN1q
Lg9dzZhJ5uBO5GWgsfFRv0RwVoCER+MstEF1L8kT25kK2EHvW4In77OviQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDv/yjWeUTlCbD+x6/EVvzOzkxSXMB8GA1UdIwQY
MBaAFJuXwi0LM4qKRaoTRbCRe6DclzOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTVmQ0xRc3ppb3BGcWhORnNKRjdvTnlYTTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lMjI1OGQtOGJjNS00NGVkLTgwNzMt
YWU5OTllZDdjNWQ0LzEvT19fS05aNVJPVUpzUDdIcjhSV19NN09URkpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9lMjI1OGQtOGJjNS00NGVkLTgwNzMtYWU5OTllZDdjNWQ0
LzEvbTVmQ0xRc3ppb3BGcWhORnNKRjdvTnlYTTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRwkMA0G
CSqGSIb3DQEBCwUAA4IBAQDJ9FqEC1MYGqoQaZD3KiUGkZDW4D3+ry4s7zrhSfN9
dXTJr97b8sOQie1oD7hG6m2+W6gn24PqOMyCy3Ziz+rt6OAD1Km3IF8ArejsUGdw
RJe2+o7Xr52tj5NzBZkbzbc6I+P0Ysm+t3Agt2hRuhXhkCrkKma0jM8udaVyjqKL
BcZresAWKvqstwOTC4UKLaYGzyF+TXX53NsduV35/KQ07hnSUy5LVM/JPHGt20zo
jOUqGBxzsn2N9GPigx3TS8ccWPH2YvrBy1Jzsp/NgCKil2tGtKldAGFOLNthigY+
XnMq6f0YRLogB9M3yJrQo9764kBoYBJupqOvGAIdZlj6
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:09 2024 by rpki-client on console-fra.rpki-client.org