Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Ocgyc17Bi0CEWlgs_Q4pp40GNh4.roa
File: Ocgyc17Bi0CEWlgs_Q4pp40GNh4.roa (raw, json)
Hash identifier: o/ar6wJNmggVHzxIgXIFeuynfRTB8BPKaF7ojpQV630=
Subject key identifier: 39:C8:32:73:5E:C1:8B:40:84:5A:58:2C:FD:0E:29:A7:8D:06:36:1E
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018F86A709033C212E997A020327D9D23FEE
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Ocgyc17Bi0CEWlgs_Q4pp40GNh4.roa
Signing time: Fri 17 May 2024 13:04:04 +0000
ROA not before: Fri 17 May 2024 13:04:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57523
IP address blocks: 152.89.198.0/24 maxlen: 24
194.26.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:a7:09:03:3c:21:2e:99:7a:02:03:27:d9:d2:3f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: May 17 13:04:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39c832735ec18b40845a582cfd0e29a78d06361e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:52:fd:79:e7:2e:d7:ad:a6:8e:9f:fd:54:f4:
5e:86:c5:08:46:74:71:56:cc:00:f3:67:f7:45:72:
5c:98:96:3e:a9:01:93:75:53:49:2d:78:3d:a4:d8:
97:3a:55:da:2c:ee:ee:de:b5:c5:73:40:18:4c:1c:
8d:9a:4d:09:6b:fb:84:a9:af:a5:8e:f1:32:5e:bd:
f4:52:c6:e4:15:bd:71:8b:7d:64:a8:bd:bf:7f:d7:
f8:55:0b:59:cf:66:f3:2d:e3:ff:a5:a8:c0:ce:28:
cb:2d:e1:c7:cf:f0:1f:e4:10:53:5c:d7:04:a2:13:
c1:ad:60:9b:e3:55:31:a6:86:07:f2:fa:b0:14:c3:
f5:e0:83:ab:96:fe:2c:91:ee:f6:fb:71:cf:9e:51:
13:f3:7b:a5:58:3e:1f:39:ff:0c:f8:71:5a:f0:36:
4c:15:f7:aa:5f:34:02:3b:9a:9e:60:27:05:a9:81:
e3:d8:a1:c4:49:9d:e1:99:1b:dc:b6:1a:3b:51:ed:
26:b2:79:51:cf:9d:a2:42:61:65:f7:5f:6c:74:30:
b3:71:b5:98:92:3a:a5:40:72:73:94:6e:a3:29:33:
cb:f9:2c:8d:a3:76:06:df:bd:cf:57:33:43:33:ab:
ed:13:f1:70:61:9c:be:c1:27:36:97:55:28:e0:3f:
95:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C8:32:73:5E:C1:8B:40:84:5A:58:2C:FD:0E:29:A7:8D:06:36:1E
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Ocgyc17Bi0CEWlgs_Q4pp40GNh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.198.0/24
194.26.135.0/24
Signature Algorithm: sha256WithRSAEncryption
98:48:84:5f:43:92:fa:38:76:b1:14:0e:3b:e2:b8:7f:92:16:
83:a3:33:d9:b4:69:1c:79:f3:dd:12:38:6f:65:6d:8a:a5:2e:
23:45:85:b1:ed:e2:4a:5e:63:ca:e8:f1:ca:d6:30:79:6e:e5:
2d:32:16:51:99:25:e5:d6:ac:c9:6b:b8:59:8b:bf:3a:08:66:
96:31:f3:43:50:bc:86:46:03:53:03:e5:c3:98:0a:72:e4:80:
b6:51:93:57:6b:18:7f:be:e9:97:e2:f7:06:42:1c:de:da:9b:
54:50:e9:b7:3a:0e:6b:29:d3:7f:b2:24:7c:90:a5:23:01:3d:
b6:b3:89:80:f0:b0:fe:6c:0e:df:63:92:5a:60:17:36:38:08:
16:52:e3:7c:b5:c9:a9:58:c6:72:da:49:f1:7c:30:8e:50:99:
5f:8c:d5:0e:40:b5:2f:f6:40:f7:8c:94:86:32:0d:09:25:98:
48:f0:93:96:b9:d0:0d:7f:3b:85:9a:b3:62:69:d3:66:93:31:
2e:91:fe:de:fa:ef:4e:1b:c3:14:a0:ea:6c:c9:8f:89:67:95:
8d:5e:c0:84:1c:a6:b7:1e:fb:fd:03:40:a7:07:bc:d0:1c:64:
fe:c7:cf:7d:56:18:e4:d3:fe:53:18:5d:8d:e2:b2:d8:85:aa:
d1:23:46:b9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY+GpwkDPCEumXoCAyfZ0j/uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjQwNTE3MTMwNDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWM4MzI3MzVlYzE4YjQwODQ1YTU4MmNmZDBlMjlhNzhkMDYzNjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+1L9eecu162mjp/9VPRehsUIRnRx
VswA82f3RXJcmJY+qQGTdVNJLXg9pNiXOlXaLO7u3rXFc0AYTByNmk0Ja/uEqa+l
jvEyXr30UsbkFb1xi31kqL2/f9f4VQtZz2bzLeP/pajAzijLLeHHz/Af5BBTXNcE
ohPBrWCb41UxpoYH8vqwFMP14IOrlv4ske72+3HPnlET83ulWD4fOf8M+HFa8DZM
FfeqXzQCO5qeYCcFqYHj2KHESZ3hmRvctho7Ue0msnlRz52iQmFl919sdDCzcbWY
kjqlQHJzlG6jKTPL+SyNo3YG373PVzNDM6vtE/FwYZy+wSc2l1Uo4D+VFQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDnIMnNewYtAhFpYLP0OKaeNBjYeMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvT2NneWMxN0JpMENFV2xnc19RNHBwNDBHTmg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmFnGAwQA
whqHMA0GCSqGSIb3DQEBCwUAA4IBAQCYSIRfQ5L6OHaxFA474rh/khaDozPZtGkc
efPdEjhvZW2KpS4jRYWx7eJKXmPK6PHK1jB5buUtMhZRmSXl1qzJa7hZi786CGaW
MfNDULyGRgNTA+XDmApy5IC2UZNXaxh/vumX4vcGQhze2ptUUOm3Og5rKdN/siR8
kKUjAT22s4mA8LD+bA7fY5JaYBc2OAgWUuN8tcmpWMZy2knxfDCOUJlfjNUOQLUv
9kD3jJSGMg0JJZhI8JOWudANfzuFmrNiadNmkzEukf7e+u9OG8MUoOpsyY+JZ5WN
XsCEHKa3Hvv9A0CnB7zQHGT+x899Vhjk0/5TGF2N4rLYharRI0a5
-----END CERTIFICATE-----
Generated at Fri Jun 7 13:34:57 2024 by rpki-client on console-fra.rpki-client.org