Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/O-EAOuq1EWcYfIiGqkh-JdQ7hk0.roa
File: O-EAOuq1EWcYfIiGqkh-JdQ7hk0.roa (raw, json)
Hash identifier: +rxP5S9LszZnXWPrTU+nwMEhlytmqNEZ9BEz3ywttCo=
Subject key identifier: 3B:E1:00:3A:EA:B5:11:67:18:7C:88:86:AA:48:7E:25:D4:3B:86:4D
Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial: 018CC5DC7CCDD5191531080BB6C93C2A757A
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/O-EAOuq1EWcYfIiGqkh-JdQ7hk0.roa
Signing time: Mon 01 Jan 2024 16:30:10 +0000
ROA not before: Mon 01 Jan 2024 16:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199833
IP address blocks: 81.177.254.0/23 maxlen: 23
81.177.186.0/24 maxlen: 24
2a03:aa00:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:7c:cd:d5:19:15:31:08:0b:b6:c9:3c:2a:75:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Validity
Not Before: Jan 1 16:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3be1003aeab51167187c8886aa487e25d43b864d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:db:9a:73:60:a1:6a:f3:84:d6:cb:05:fb:fb:
e4:b3:b4:d8:c9:66:3b:6a:ea:87:12:43:9c:be:8c:
0b:79:5a:4a:4c:20:1e:05:b1:ac:04:f1:4b:2a:9c:
dd:48:5e:c9:b0:f8:8e:bf:5e:81:69:ba:f3:b6:dd:
42:4b:11:f5:d7:02:65:50:5b:52:c4:04:c0:ee:7d:
58:c0:53:f7:e0:67:28:d0:9c:82:07:c0:db:7e:57:
e6:49:af:84:56:30:2b:e5:32:74:08:4a:8a:e7:26:
b6:9d:d5:53:81:99:63:94:69:9d:e0:44:1f:8b:30:
80:38:ae:e0:58:52:1b:e7:78:b8:21:1b:2c:d5:81:
d5:91:e3:3a:02:06:09:8c:79:b2:0d:7c:8e:87:51:
39:7d:35:c4:18:d6:d9:f3:40:66:79:4c:2d:e7:4a:
0a:b9:c3:01:f1:8c:11:6d:64:7d:46:24:5e:15:6f:
e8:32:54:7d:44:ec:7e:09:26:56:b5:11:32:b8:68:
fc:33:8b:4f:57:56:c7:0d:8d:94:b0:21:0a:3b:42:
a0:11:e9:61:ae:b6:34:7b:8f:83:e2:92:59:4e:8c:
31:1e:da:37:7a:93:34:21:3b:b5:32:94:f7:fd:28:
0a:38:1f:ca:99:05:ec:ff:98:2a:dd:da:ef:47:e5:
d9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E1:00:3A:EA:B5:11:67:18:7C:88:86:AA:48:7E:25:D4:3B:86:4D
X509v3 Authority Key Identifier:
keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/O-EAOuq1EWcYfIiGqkh-JdQ7hk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.177.186.0/24
81.177.254.0/23
IPv6:
2a03:aa00:1000::/48
Signature Algorithm: sha256WithRSAEncryption
20:5c:c7:fd:f4:24:f0:b5:af:3e:1d:df:fa:95:44:eb:9e:3c:
a7:19:0a:3d:58:66:78:c1:f7:4f:5b:87:71:78:3b:32:e0:93:
8f:8d:81:c2:09:95:82:97:1c:b7:fb:c2:cf:32:72:71:23:21:
ac:d9:11:e0:43:7c:d7:a0:4b:2c:4d:43:82:e6:0e:22:e9:d8:
4c:5e:01:e2:04:3e:bf:ef:02:19:85:d7:ce:d7:e8:a3:ee:be:
5f:59:ba:83:f6:40:33:0f:30:df:27:73:f0:49:4a:d1:a0:e7:
b3:15:c0:9a:b7:c3:62:3b:07:b0:f0:f1:4e:91:35:b8:a8:bf:
9d:23:e7:73:c6:44:86:0d:a7:2c:cb:64:4a:5b:d3:65:11:6d:
99:53:2e:5f:1c:d2:f0:5a:93:6d:45:c2:76:65:aa:6b:58:91:
2a:70:4a:15:97:30:45:58:e8:ed:00:13:9b:f5:eb:25:49:fb:
fd:71:ef:42:c6:16:50:1f:93:02:6d:2e:a8:88:fe:ed:36:88:
be:6d:0b:35:53:08:dd:cf:58:12:2b:6d:22:91:23:71:65:b4:
d9:8c:f3:11:41:27:5d:b5:70:37:02:17:48:9c:41:fe:2f:96:
2d:48:f7:68:60:39:8a:de:b5:9d:24:90:47:3c:c0:37:0b:a7:
05:f3:6b:e8
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYzF3HzN1RkVMQgLtsk8KnV6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZjRiMWMwYmZiYWQ0NmI4MTFlZWU1NjhhMThmYmFhMTRh
OWQ2ODcwHhcNMjQwMTAxMTYzMDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmUxMDAzYWVhYjUxMTY3MTg3Yzg4ODZhYTQ4N2UyNWQ0M2I4NjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9uac2ChavOE1ssF+/vks7TYyWY7
auqHEkOcvowLeVpKTCAeBbGsBPFLKpzdSF7JsPiOv16Babrztt1CSxH11wJlUFtS
xATA7n1YwFP34Gco0JyCB8DbflfmSa+EVjAr5TJ0CEqK5ya2ndVTgZljlGmd4EQf
izCAOK7gWFIb53i4IRss1YHVkeM6AgYJjHmyDXyOh1E5fTXEGNbZ80BmeUwt50oK
ucMB8YwRbWR9RiReFW/oMlR9ROx+CSZWtREyuGj8M4tPV1bHDY2UsCEKO0KgEelh
rrY0e4+D4pJZTowxHto3epM0ITu1MpT3/SgKOB/KmQXs/5gq3drvR+XZ3wIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFDvhADrqtRFnGHyIhqpIfiXUO4ZNMB8GA1UdIwQY
MBaAFJL0scC/utRrgR7uVooY+6oUqdaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMt
YTA4NGY3NmM4ZTJiLzEvTy1FQU91cTFFV2NZZklpR3FraC1KZFE3aGswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMtYTA4NGY3NmM4ZTJi
LzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAUbG6AwQB
UbH+MA8EAgACMAkDBwAqA6oAEAAwDQYJKoZIhvcNAQELBQADggEBACBcx/30JPC1
rz4d3/qVROuePKcZCj1YZnjB909bh3F4OzLgk4+NgcIJlYKXHLf7ws8ycnEjIazZ
EeBDfNegSyxNQ4LmDiLp2ExeAeIEPr/vAhmF187X6KPuvl9ZuoP2QDMPMN8nc/BJ
StGg57MVwJq3w2I7B7Dw8U6RNbiov50j53PGRIYNpyzLZEpb02URbZlTLl8c0vBa
k21FwnZlqmtYkSpwShWXMEVY6O0AE5v16yVJ+/1x70LGFlAfkwJtLqiI/u02iL5t
CzVTCN3PWBIrbSKRI3FltNmM8xFBJ121cDcCF0icQf4vli1I92hgOYretZ0kkEc8
wDcLpwXza+g=
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:31:15 2024 by rpki-client on console-ams.rpki-client.org