Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/Odli5zTC_KuE1rTLoF8ARl3tReg.roa
File: Odli5zTC_KuE1rTLoF8ARl3tReg.roa (raw, json)
Hash identifier: 3R1/Z+Pgi440YvwOC9FZMd3yFerfbl6vV92zeV4+6Dg=
Subject key identifier: 39:D9:62:E7:34:C2:FC:AB:84:D6:B4:CB:A0:5F:00:46:5D:ED:45:E8
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018CC8DE1477066061E92EDA403F56E5843A
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/Odli5zTC_KuE1rTLoF8ARl3tReg.roa
Signing time: Tue 02 Jan 2024 06:30:46 +0000
ROA not before: Tue 02 Jan 2024 06:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 193.239.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:14:77:06:60:61:e9:2e:da:40:3f:56:e5:84:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 2 06:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39d962e734c2fcab84d6b4cba05f00465ded45e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:9b:21:ee:5f:86:99:ed:c1:33:2f:0b:8a:
34:c8:00:48:11:56:66:14:ac:0a:a7:1e:aa:12:a1:
99:c5:a7:ac:e9:db:a4:5a:46:9d:66:fb:e9:cc:28:
f1:7b:62:58:41:56:69:25:ed:99:99:72:d3:42:cb:
6e:9c:52:35:22:ca:a8:ec:21:d9:3b:06:dc:05:56:
d0:da:99:73:ab:7b:9e:e9:70:66:a2:75:79:d1:04:
b0:c4:3f:80:88:f4:71:d9:d1:f7:87:e3:7c:d3:60:
6c:bb:fd:47:1b:7d:ea:0a:e7:c9:f8:1b:9d:ec:d7:
00:5b:19:59:7f:f3:02:ab:dd:e9:ed:c9:53:21:84:
f4:31:d6:bb:39:50:69:54:b3:40:ae:6b:de:5c:da:
4e:81:df:8f:4d:ba:9b:e2:fa:70:bd:53:9b:63:e0:
c0:a2:18:a2:91:a1:37:91:15:af:52:5d:1b:44:6d:
c6:cb:30:3e:6c:b7:20:c1:c9:f3:d1:3e:b0:7b:ef:
e1:6d:6d:07:21:c7:54:a7:d5:66:a7:07:5e:41:b5:
cf:15:29:2f:d4:77:7a:26:d7:c6:e0:50:4c:6c:b4:
eb:ae:8b:24:75:a8:c3:bc:cb:0b:cc:25:b8:d4:97:
12:f0:5b:12:b8:21:73:25:5d:42:8b:bc:ad:98:d7:
78:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D9:62:E7:34:C2:FC:AB:84:D6:B4:CB:A0:5F:00:46:5D:ED:45:E8
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/Odli5zTC_KuE1rTLoF8ARl3tReg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.236.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ec:6a:a5:c1:fa:63:42:fa:44:69:9e:af:25:a9:32:d9:f8:
13:2e:07:03:89:28:ba:d0:c6:7a:e8:6b:f5:bd:e1:dc:db:62:
78:d2:bf:2a:22:26:24:5d:c3:af:f5:d7:81:88:ff:46:93:6a:
7e:a1:90:9c:b8:e2:41:6d:7d:b3:ea:2b:ba:33:bc:e3:06:52:
12:46:0a:a7:32:1a:a1:fd:0b:0b:10:6e:f0:7c:14:4e:a6:b2:
57:5a:3d:b6:55:88:a9:da:b9:38:e4:b7:31:ee:09:c8:41:94:
85:c6:88:aa:b9:49:fb:9d:e3:95:97:e3:9b:73:8d:f7:b1:7f:
04:26:22:54:19:41:9b:03:0c:39:dd:51:58:d0:b9:52:28:a3:
52:9a:a2:71:b3:f2:cc:b2:3d:c2:1f:dc:54:17:48:8c:9f:99:
3a:96:8a:92:64:c9:53:5d:a7:74:66:53:98:97:b0:30:65:32:
47:f1:93:10:2c:93:5d:c8:ee:d6:dd:73:89:1f:1f:dd:bd:40:
01:a0:95:71:67:09:af:a8:fa:16:bd:56:0d:58:98:1b:47:90:
19:81:55:48:c4:4b:85:28:5a:5c:4c:e1:7f:31:f7:4c:77:70:
65:d5:2e:b8:3a:33:47:5a:c0:fc:1f:c0:56:6f:f6:e1:47:a1:
6e:a2:43:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3hR3BmBh6S7aQD9W5YQ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTA3YWI2OTIxZWY4Y2IyZGVjYTNlYjc2NjQ3OGNmZjNl
NWZjNmQwHhcNMjQwMTAyMDYzMDQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWQ5NjJlNzM0YzJmY2FiODRkNmI0Y2JhMDVmMDA0NjVkZWQ0NWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWebIe5fhpntwTMvC4o0yABIEVZm
FKwKpx6qEqGZxaes6dukWkadZvvpzCjxe2JYQVZpJe2ZmXLTQstunFI1Isqo7CHZ
OwbcBVbQ2plzq3ue6XBmonV50QSwxD+AiPRx2dH3h+N802Bsu/1HG33qCufJ+Bud
7NcAWxlZf/MCq93p7clTIYT0Mda7OVBpVLNArmveXNpOgd+PTbqb4vpwvVObY+DA
ohiikaE3kRWvUl0bRG3GyzA+bLcgwcnz0T6we+/hbW0HIcdUp9VmpwdeQbXPFSkv
1Hd6JtfG4FBMbLTrroskdajDvMsLzCW41JcS8FsSuCFzJV1Ci7ytmNd4UQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDnZYuc0wvyrhNa0y6BfAEZd7UXoMB8GA1UdIwQY
MBaAFCgQeraSHvjLLeyj63ZkeM/z5fxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzIt
YzBmYjNlZjc2NDBlLzEvT2RsaTV6VENfS3VFMXJUTG9GOEFSbDN0UmVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzItYzBmYjNlZjc2NDBl
LzEvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwe/sMA0G
CSqGSIb3DQEBCwUAA4IBAQCF7GqlwfpjQvpEaZ6vJaky2fgTLgcDiSi60MZ66Gv1
veHc22J40r8qIiYkXcOv9deBiP9Gk2p+oZCcuOJBbX2z6iu6M7zjBlISRgqnMhqh
/QsLEG7wfBROprJXWj22VYip2rk45Lcx7gnIQZSFxoiquUn7neOVl+Obc433sX8E
JiJUGUGbAww53VFY0LlSKKNSmqJxs/LMsj3CH9xUF0iMn5k6loqSZMlTXad0ZlOY
l7AwZTJH8ZMQLJNdyO7W3XOJHx/dvUABoJVxZwmvqPoWvVYNWJgbR5AZgVVIxEuF
KFpcTOF/MfdMd3Bl1S64OjNHWsD8H8BWb/bhR6FuokPH
-----END CERTIFICATE-----
Generated at Thu May 2 18:17:28 2024 by rpki-client on console-fra.rpki-client.org