Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/OLkNAP8aGt36I_csvICttlb430g.roa
File: OLkNAP8aGt36I_csvICttlb430g.roa (raw, json)
Hash identifier: glcNHVgcPmIS6PQMqIvzqAF2DUY4sCF/w5OU3FHYLsk=
Subject key identifier: 38:B9:0D:00:FF:1A:1A:DD:FA:23:F7:2C:BC:80:AD:B6:56:F8:DF:48
Certificate issuer: /CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Certificate serial: 018CC34894375C57A6EAD9A6FC522849B2A5
Authority key identifier: BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/OLkNAP8aGt36I_csvICttlb430g.roa
Signing time: Mon 01 Jan 2024 04:29:22 +0000
ROA not before: Mon 01 Jan 2024 04:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 193.201.122.0/23 maxlen: 23
193.150.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:94:37:5c:57:a6:ea:d9:a6:fc:52:28:49:b2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Validity
Not Before: Jan 1 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38b90d00ff1a1addfa23f72cbc80adb656f8df48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cb:3e:c5:fa:c0:a7:14:c2:4e:ec:e9:10:53:
b5:20:c1:4b:a1:13:38:d7:50:84:a0:c3:7b:1e:54:
a2:57:1a:96:06:b8:a5:bf:2d:b2:85:f6:b5:61:5e:
9f:35:7b:7f:04:62:68:6b:ff:a9:25:01:25:e7:3f:
58:62:4d:a4:43:03:5d:6f:d8:83:73:8e:e6:48:ba:
69:6a:76:13:36:2f:ba:3b:04:90:0b:a1:80:80:12:
d1:bd:35:52:c7:b2:93:09:d3:00:6c:3d:4b:8c:53:
5b:bf:38:85:d6:36:6b:1f:52:d0:15:65:ac:ab:08:
c9:fb:18:f7:27:61:68:5c:be:bd:cf:03:f5:41:4f:
4e:e3:8a:2a:b1:5b:11:f2:60:0b:30:66:c7:bf:b1:
6f:b1:30:c8:27:fd:a2:84:13:92:3e:c8:23:b6:ef:
7a:0f:fe:7b:74:d8:50:03:e0:d7:ae:09:2f:62:3d:
98:7c:49:50:de:2b:57:a7:0a:75:38:f8:2a:90:98:
41:fc:f5:c8:2c:ec:a5:2b:11:7c:4d:4d:a4:99:8c:
31:92:5b:57:5e:d2:22:af:c7:ac:33:69:cc:df:6c:
55:03:7e:62:3a:5d:d1:8e:3e:bc:49:d9:53:7a:e9:
e0:e4:1f:fd:da:f3:86:b0:37:a0:9c:6c:7f:f2:4d:
6a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B9:0D:00:FF:1A:1A:DD:FA:23:F7:2C:BC:80:AD:B6:56:F8:DF:48
X509v3 Authority Key Identifier:
keyid:BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/OLkNAP8aGt36I_csvICttlb430g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.48.0/24
193.201.122.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:81:af:f0:d1:82:96:f1:af:61:7c:55:ca:01:81:90:c5:86:
c5:40:e3:70:af:76:7e:b0:88:46:07:b4:b8:c9:2d:04:12:26:
ab:ab:43:4f:0a:ae:76:7a:f5:d0:db:3f:d5:0b:1a:f8:57:33:
e1:c6:c4:a9:51:c9:78:9a:3b:c8:20:f8:79:6e:62:cc:b4:d3:
51:55:37:88:99:96:a7:dd:fb:76:52:ce:0e:1f:59:91:d3:51:
02:f1:e1:35:84:a2:ae:d1:03:a8:96:5d:79:b4:a3:39:c8:98:
9b:26:7a:11:47:5c:b7:46:5b:56:e9:cb:9c:6c:51:a2:a4:5c:
b0:39:51:59:66:07:0d:65:f0:42:a0:d3:60:7f:49:a2:d3:04:
95:e6:f6:9d:29:8e:a8:46:1a:0b:39:c1:dd:77:c9:d5:b1:5a:
07:61:20:42:90:c7:47:65:c7:e5:eb:55:8a:ce:0f:9e:7c:e6:
c3:96:34:f9:df:32:71:75:32:e6:17:86:32:53:ab:4e:0b:3f:
a9:b4:71:3c:da:44:8d:d8:05:81:cc:2d:d0:03:6b:e1:b3:2d:
5b:ad:44:65:ad:3d:0c:da:d1:42:75:19:5b:f2:d1:b0:39:02:
ef:5f:12:f5:e3:5c:ca:b1:60:1c:70:91:e2:03:3b:30:be:05:
2b:68:10:af
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzDSJQ3XFem6tmm/FIoSbKlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNjViMzBkYWQ3NGFjNzY5ZDRiNWIzMjMxMmRhOGZhODFh
YjMzZDEwHhcNMjQwMTAxMDQyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGI5MGQwMGZmMWExYWRkZmEyM2Y3MmNiYzgwYWRiNjU2ZjhkZjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ms+xfrApxTCTuzpEFO1IMFLoRM4
11CEoMN7HlSiVxqWBrilvy2yhfa1YV6fNXt/BGJoa/+pJQEl5z9YYk2kQwNdb9iD
c47mSLppanYTNi+6OwSQC6GAgBLRvTVSx7KTCdMAbD1LjFNbvziF1jZrH1LQFWWs
qwjJ+xj3J2FoXL69zwP1QU9O44oqsVsR8mALMGbHv7FvsTDIJ/2ihBOSPsgjtu96
D/57dNhQA+DXrgkvYj2YfElQ3itXpwp1OPgqkJhB/PXILOylKxF8TU2kmYwxkltX
XtIir8esM2nM32xVA35iOl3Rjj68SdlTeung5B/92vOGsDegnGx/8k1qJQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDi5DQD/Ghrd+iP3LLyArbZW+N9IMB8GA1UdIwQY
MBaAFL5lsw2tdKx2nUtbMjEtqPqBqzPRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm1XekRhMTBySGFkUzFzeU1TMm8tb0dyTTlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82NmUwMzItYWI2YS00ZDNhLWExMmIt
NTEwY2ZhNDU1NjQwLzEvT0xrTkFQOGFHdDM2SV9jc3ZJQ3R0bGI0MzBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS82NmUwMzItYWI2YS00ZDNhLWExMmItNTEwY2ZhNDU1NjQw
LzEvdm1XekRhMTBySGFkUzFzeU1TMm8tb0dyTTlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwZYwAwQB
wcl6MA0GCSqGSIb3DQEBCwUAA4IBAQBcga/w0YKW8a9hfFXKAYGQxYbFQONwr3Z+
sIhGB7S4yS0EEiarq0NPCq52evXQ2z/VCxr4VzPhxsSpUcl4mjvIIPh5bmLMtNNR
VTeImZan3ft2Us4OH1mR01EC8eE1hKKu0QOoll15tKM5yJibJnoRR1y3RltW6cuc
bFGipFywOVFZZgcNZfBCoNNgf0mi0wSV5vadKY6oRhoLOcHdd8nVsVoHYSBCkMdH
Zcfl61WKzg+efObDljT53zJxdTLmF4YyU6tOCz+ptHE82kSN2AWBzC3QA2vhsy1b
rURlrT0M2tFCdRlb8tGwOQLvXxL141zKsWAccJHiAzswvgUraBCv
-----END CERTIFICATE-----
Generated at Fri Sep 27 21:54:52 2024 by rpki-client on console-ams.rpki-client.org