Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/x_Okdiwf4GtPmpQuOYhaYzsLu8E.roa
File: x_Okdiwf4GtPmpQuOYhaYzsLu8E.roa (raw, json)
Hash identifier: FSqhqih8wIdGKM/09rFZT95N8e0ftHQT3bfadTu8nJ4=
Subject key identifier: C7:F3:A4:76:2C:1F:E0:6B:4F:9A:94:2E:39:88:5A:63:3B:0B:BB:C1
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 0192488B6942F2AE40A878FBB3FB64DB16AE
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/x_Okdiwf4GtPmpQuOYhaYzsLu8E.roa
Signing time: Tue 01 Oct 2024 14:45:48 +0000
ROA not before: Tue 01 Oct 2024 14:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 195.210.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:48:8b:69:42:f2:ae:40:a8:78:fb:b3:fb:64:db:16:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: Oct 1 14:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7f3a4762c1fe06b4f9a942e39885a633b0bbbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3b:da:e4:97:a8:70:04:48:80:48:0a:15:39:
e9:0f:2b:01:b5:88:bb:27:d4:e1:db:60:c4:17:e0:
97:85:45:ef:5e:1f:27:cf:00:7d:31:4f:dc:a7:42:
22:b3:3b:b9:6c:4e:49:d3:bd:e9:ae:73:00:f1:88:
2e:06:b0:87:50:93:ed:3f:b6:6b:4e:14:64:1a:9a:
f5:c3:f0:69:1c:cc:b0:bd:42:72:e7:8f:77:e4:32:
96:2b:eb:48:c7:f4:81:4f:dc:b2:4c:5d:75:18:bc:
f3:53:3d:ca:ce:39:57:d9:02:e0:1f:2c:2d:b3:b6:
bf:91:f6:8f:02:f4:91:46:12:14:68:ea:49:24:2e:
ed:03:e9:7d:79:32:9c:4f:92:5f:30:b1:27:84:8e:
ee:d0:16:cb:53:4e:29:2d:c3:a0:3f:35:f3:cc:95:
d1:36:49:7b:3b:ae:db:34:92:6f:30:e3:c4:0f:39:
02:16:b1:85:c5:40:11:87:22:60:33:0f:cf:65:9f:
c0:5f:df:76:cd:b0:f1:dc:e0:85:10:17:d1:1e:92:
41:c3:75:ae:02:e0:a6:d5:9a:84:07:d0:7e:5c:27:
67:d6:87:fb:47:3a:59:4c:c4:ee:72:a4:9b:b7:7a:
88:7c:2c:33:2a:3b:da:d5:f5:09:a5:f9:3f:1f:12:
8d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F3:A4:76:2C:1F:E0:6B:4F:9A:94:2E:39:88:5A:63:3B:0B:BB:C1
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/x_Okdiwf4GtPmpQuOYhaYzsLu8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.112.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:1f:79:3c:61:a3:33:12:b6:e8:5c:cb:dd:7d:cc:9b:5b:91:
fc:ac:5d:85:8f:c7:a7:23:5e:44:8a:18:04:98:84:b9:e4:d8:
b0:59:c0:15:fd:65:f5:e7:36:6f:37:21:02:8e:4c:50:a6:a7:
b9:dd:8e:aa:08:34:84:90:eb:18:b8:a5:eb:c9:7e:6f:a6:0d:
df:7b:bf:76:5d:f9:6c:cc:d4:80:6b:96:46:be:b7:af:04:44:
77:04:90:f5:e1:14:7a:93:e2:b8:73:f1:1f:66:45:bb:87:c6:
9e:b5:aa:37:2f:e6:56:28:86:e4:b5:50:d3:81:b6:de:1b:fd:
cf:4e:89:04:61:c6:2d:de:eb:f1:7a:8c:b7:20:71:13:63:e7:
8f:14:b4:5f:ce:89:c1:f3:00:50:7d:5c:84:aa:40:c0:93:3e:
22:bc:6b:0a:1f:24:b3:ee:65:e9:a8:63:7f:8c:2e:35:c1:e6:
ca:5d:f9:1b:8a:2b:16:51:f2:0e:26:87:3d:0c:09:ab:ee:8f:
0c:f2:d1:74:78:3c:ea:eb:dc:1e:fc:dd:d9:bb:b0:65:ba:d2:
79:36:26:22:03:55:7e:43:21:66:56:ee:8c:e2:17:a7:80:6c:
31:cd:4b:c3:b7:ec:ed:f5:5c:07:ed:6e:7d:28:82:b0:ae:f2:
fb:39:0d:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJIi2lC8q5AqHj7s/tk2xauMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYjg0ZDlmOGY5ZTMzMTU2NTg5YTVlYmY3MjIyMDNhODk5
ZTBhNTEwHhcNMjQxMDAxMTQ0NTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2YzYTQ3NjJjMWZlMDZiNGY5YTk0MmUzOTg4NWE2MzNiMGJiYmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTva5JeocARIgEgKFTnpDysBtYi7
J9Th22DEF+CXhUXvXh8nzwB9MU/cp0Iiszu5bE5J073prnMA8YguBrCHUJPtP7Zr
ThRkGpr1w/BpHMywvUJy54935DKWK+tIx/SBT9yyTF11GLzzUz3KzjlX2QLgHywt
s7a/kfaPAvSRRhIUaOpJJC7tA+l9eTKcT5JfMLEnhI7u0BbLU04pLcOgPzXzzJXR
Nkl7O67bNJJvMOPEDzkCFrGFxUARhyJgMw/PZZ/AX992zbDx3OCFEBfRHpJBw3Wu
AuCm1ZqEB9B+XCdn1of7RzpZTMTucqSbt3qIfCwzKjva1fUJpfk/HxKNvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMfzpHYsH+BrT5qULjmIWmM7C7vBMB8GA1UdIwQY
MBaAFP64TZ+PnjMVZYml6/ciIDqJngpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82MTRlNWMtMjk5Yi00ZmQ0LWEwYmMt
YWYxY2MyMzE3ZTM5LzEveF9Pa2Rpd2Y0R3RQbXBRdU9ZaGFZenNMdThFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82MTRlNWMtMjk5Yi00ZmQ0LWEwYmMtYWYxY2MyMzE3ZTM5
LzEvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw9JwMA0G
CSqGSIb3DQEBCwUAA4IBAQDKH3k8YaMzErboXMvdfcybW5H8rF2Fj8enI15EihgE
mIS55NiwWcAV/WX15zZvNyECjkxQpqe53Y6qCDSEkOsYuKXryX5vpg3fe792Xfls
zNSAa5ZGvrevBER3BJD14RR6k+K4c/EfZkW7h8aetao3L+ZWKIbktVDTgbbeG/3P
TokEYcYt3uvxeoy3IHETY+ePFLRfzonB8wBQfVyEqkDAkz4ivGsKHySz7mXpqGN/
jC41webKXfkbiisWUfIOJoc9DAmr7o8M8tF0eDzq69we/N3Zu7BlutJ5NiYiA1V+
QyFmVu6M4hengGwxzUvDt+zt9VwH7W59KIKwrvL7OQ2G
-----END CERTIFICATE-----
Generated at Tue Oct 22 18:59:59 2024 by rpki-client on console-ams.rpki-client.org