Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/OervXHNAuNl2w3zrZsTcNkmAXHM.roa
File: OervXHNAuNl2w3zrZsTcNkmAXHM.roa (raw, json)
Hash identifier: CWVEI9ATg5+Uv1OQJhLN+05/2A1JHbfIZBtz9AUR41k=
Subject key identifier: 39:EA:EF:5C:73:40:B8:D9:76:C3:7C:EB:66:C4:DC:36:49:80:5C:73
Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial: 018CC42453B95FD9D7F4AD29B93D338E3232
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/OervXHNAuNl2w3zrZsTcNkmAXHM.roa
Signing time: Mon 01 Jan 2024 08:29:24 +0000
ROA not before: Mon 01 Jan 2024 08:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 212.19.235.0/24 maxlen: 24
212.19.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 13:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:53:b9:5f:d9:d7:f4:ad:29:b9:3d:33:8e:32:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
Validity
Not Before: Jan 1 08:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39eaef5c7340b8d976c37ceb66c4dc3649805c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1c:07:35:a5:32:d7:37:6d:46:89:0f:aa:f0:
fa:3c:83:b3:2e:b7:34:ee:37:d3:18:08:98:d3:42:
91:86:b7:2b:59:eb:c6:81:da:72:6e:48:67:aa:a6:
a0:c9:b1:49:a7:97:3f:c7:09:d4:b0:7e:a3:5a:d2:
49:cb:62:48:5c:7f:7d:50:82:6b:e4:28:58:ce:03:
fc:a4:8d:f3:7d:f5:53:1f:eb:0b:ed:9b:29:d6:44:
88:cb:3b:a2:cc:9e:ff:a5:71:52:c3:e2:a6:84:75:
fe:a0:db:dc:3e:6b:e0:27:3b:82:3b:af:8b:bd:04:
10:72:68:b4:02:fc:ed:44:78:78:a7:ac:94:46:62:
09:95:34:69:0a:b2:3e:ad:b6:dc:35:97:ef:4b:e5:
28:79:40:63:0a:98:86:ff:2f:fa:65:7c:7b:c8:28:
18:f5:39:15:87:ca:93:59:50:71:d0:8a:06:5c:43:
7d:b5:5a:7d:05:4b:45:0b:dc:46:eb:31:9e:e5:bc:
da:54:26:ac:d0:7b:03:9e:29:38:00:9d:fa:53:33:
6e:22:bc:4d:ae:28:74:a7:29:09:40:97:0f:ae:7b:
8d:b6:fc:25:50:a5:6f:d8:52:72:38:74:fb:a0:54:
77:40:ae:68:8e:d5:5b:e2:57:20:16:d5:b2:01:86:
07:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EA:EF:5C:73:40:B8:D9:76:C3:7C:EB:66:C4:DC:36:49:80:5C:73
X509v3 Authority Key Identifier:
keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/OervXHNAuNl2w3zrZsTcNkmAXHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.19.235.0-212.19.236.255
Signature Algorithm: sha256WithRSAEncryption
15:75:d2:5c:47:b4:4b:d2:b5:bb:9d:4d:9b:30:3d:6a:4d:63:
3f:75:90:7f:b2:ca:40:7d:22:59:d8:fa:de:a4:72:b8:ee:9c:
b0:e5:44:3a:b4:f6:3d:e1:91:a4:50:37:bb:5e:cb:06:ce:8c:
9d:d4:0d:8b:45:bb:5d:c1:85:31:ec:d1:24:98:07:84:b0:43:
1f:39:86:88:be:ea:76:c3:bd:c0:f3:49:af:41:5c:bd:20:0f:
5f:d6:61:3a:57:8c:dc:df:5e:f5:cd:ad:aa:80:eb:46:12:03:
7c:da:98:69:af:e8:34:78:a0:65:d6:e5:8d:e2:9a:24:6c:32:
18:7f:07:36:a2:93:80:d6:be:90:88:23:56:9e:40:b5:4a:08:
05:6d:dc:55:5a:87:c9:67:fe:17:5a:5f:24:79:f3:7f:f3:0d:
3f:77:54:b2:da:53:16:78:ad:ac:e8:12:10:71:bd:3a:52:67:
c2:b2:81:56:e7:c5:36:44:19:4c:3f:16:6a:e8:99:e8:aa:34:
7a:d5:b3:0f:d4:ab:5e:18:4b:de:44:6c:b9:af:d0:a4:cb:b1:
af:15:85:64:f2:2b:63:1f:5d:43:06:21:52:fb:17:7a:c8:72:
e1:2f:5e:3c:30:68:bc:5e:73:1b:c3:b8:8d:b7:0a:69:aa:04:
2b:3f:b5:6e
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzEJFO5X9nX9K0puT0zjjIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ODdkYWMwODM3ZWQzMTEzN2EzMjQ5NmE2YzkzZTk0MzFj
NjA3ODQwHhcNMjQwMTAxMDgyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWVhZWY1YzczNDBiOGQ5NzZjMzdjZWI2NmM0ZGMzNjQ5ODA1YzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBwHNaUy1zdtRokPqvD6PIOzLrc0
7jfTGAiY00KRhrcrWevGgdpybkhnqqagybFJp5c/xwnUsH6jWtJJy2JIXH99UIJr
5ChYzgP8pI3zffVTH+sL7Zsp1kSIyzuizJ7/pXFSw+KmhHX+oNvcPmvgJzuCO6+L
vQQQcmi0AvztRHh4p6yURmIJlTRpCrI+rbbcNZfvS+UoeUBjCpiG/y/6ZXx7yCgY
9TkVh8qTWVBx0IoGXEN9tVp9BUtFC9xG6zGe5bzaVCas0HsDnik4AJ36UzNuIrxN
rih0pykJQJcPrnuNtvwlUKVv2FJyOHT7oFR3QK5ojtVb4lcgFtWyAYYHkQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFDnq71xzQLjZdsN862bE3DZJgFxzMB8GA1UdIwQY
MBaAFEaH2sCDftMRN6MklqbJPpQxxgeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm9mYXdJTi0weEUzb3lTV3Bzay1sREhHQjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xMjY0ZjgtOWM3ZC00MGNkLTk3Mjkt
NzA4OWJjNTk4ZDgzLzEvT2VydlhITkF1TmwydzN6clpzVGNOa21BWEhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8xMjY0ZjgtOWM3ZC00MGNkLTk3MjktNzA4OWJjNTk4ZDgz
LzEvUm9mYXdJTi0weEUzb3lTV3Bzay1sREhHQjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADUE+sD
BADUE+wwDQYJKoZIhvcNAQELBQADggEBABV10lxHtEvStbudTZswPWpNYz91kH+y
ykB9IlnY+t6kcrjunLDlRDq09j3hkaRQN7teywbOjJ3UDYtFu13BhTHs0SSYB4Sw
Qx85hoi+6nbDvcDzSa9BXL0gD1/WYTpXjNzfXvXNraqA60YSA3zamGmv6DR4oGXW
5Y3imiRsMhh/Bzaik4DWvpCII1aeQLVKCAVt3FVah8ln/hdaXyR583/zDT93VLLa
UxZ4razoEhBxvTpSZ8KygVbnxTZEGUw/FmromeiqNHrVsw/Uq14YS95EbLmv0KTL
sa8VhWTyK2MfXUMGIVL7F3rIcuEvXjwwaLxecxvDuI23CmmqBCs/tW4=
-----END CERTIFICATE-----
Generated at Wed May 1 22:41:59 2024 by rpki-client on console-fra.rpki-client.org