Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/OyZDhxq6inMGaWytZozZt6MDYIk.roa
File: OyZDhxq6inMGaWytZozZt6MDYIk.roa (raw, json)
Hash identifier: 2Dom99aZ5VbqMpEr9b3HfrGnlpAn4HawNPg3QM2Br4M=
Subject key identifier: 3B:26:43:87:1A:BA:8A:73:06:69:6C:AD:66:8C:D9:B7:A3:03:60:89
Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial: 018CC493010C7D80FFE2600F58071E7AF9A1
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/OyZDhxq6inMGaWytZozZt6MDYIk.roa
Signing time: Mon 01 Jan 2024 10:30:17 +0000
ROA not before: Mon 01 Jan 2024 10:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 91.230.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:01:0c:7d:80:ff:e2:60:0f:58:07:1e:7a:f9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Validity
Not Before: Jan 1 10:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b2643871aba8a7306696cad668cd9b7a3036089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ab:ee:42:65:be:a5:f7:68:53:3a:38:73:70:
d0:11:8a:d2:33:7c:09:db:bf:1c:05:eb:94:96:3a:
06:2d:22:0c:f3:46:25:19:46:53:cb:f6:07:7f:66:
33:32:ab:27:3e:8d:85:7d:38:44:7b:fa:0a:01:02:
00:4e:97:75:70:de:34:14:39:b5:02:86:df:19:b3:
6a:55:35:b6:81:09:e1:44:b0:40:25:d6:4b:59:e3:
34:2c:6b:e7:15:a3:c8:c3:b9:3e:b6:b1:aa:97:29:
a7:e8:71:94:64:cb:86:37:15:9d:2d:83:b3:7c:ef:
6f:dd:36:0d:32:f0:19:8e:15:f5:04:5c:51:7a:77:
5b:24:bc:54:9a:58:eb:e5:46:b9:3a:1d:a8:53:f5:
50:54:24:be:bf:ae:28:a3:14:f2:33:a2:cf:56:1f:
47:f5:22:44:1c:e8:85:c5:e5:a0:03:84:b2:24:d9:
3a:41:eb:c2:5d:c8:c8:6c:5c:85:8a:13:d4:4e:03:
a1:22:ee:3d:6f:d0:3f:c8:42:c0:73:f0:e4:62:84:
5a:94:7c:e4:fd:2d:66:ac:19:e4:3c:e9:4d:12:70:
da:f0:22:26:fd:fd:f4:e0:df:71:b4:5b:ec:b2:54:
f2:8e:51:b7:be:f6:16:51:08:36:fb:9b:a4:a4:b0:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:26:43:87:1A:BA:8A:73:06:69:6C:AD:66:8C:D9:B7:A3:03:60:89
X509v3 Authority Key Identifier:
keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/OyZDhxq6inMGaWytZozZt6MDYIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.249.0/24
Signature Algorithm: sha256WithRSAEncryption
02:32:28:ef:17:21:12:bf:15:c5:5d:5b:73:e9:88:a8:e5:39:
75:51:dd:e6:b2:f8:a1:19:08:5e:a4:2d:35:58:94:33:96:98:
17:a0:50:6d:cf:ec:71:c2:8d:45:d7:20:87:58:09:03:d7:cf:
de:a8:65:32:cb:6e:10:ba:3b:1a:fe:9b:84:d7:cf:23:a4:df:
e5:9b:ec:1e:78:10:75:56:ad:2e:47:e2:f5:a3:3a:b5:30:3b:
8c:8d:91:f4:40:30:ad:b9:97:84:b5:a5:27:e3:f0:ff:98:df:
70:a0:0e:e8:03:0b:b4:1c:54:05:f6:ed:9c:9b:77:af:7d:ec:
3f:56:e6:49:58:dd:e9:76:29:5d:99:64:01:9c:3b:1e:b4:aa:
0b:72:4d:fe:c6:f5:a2:bc:e7:01:ba:97:71:50:ad:e5:44:d7:
b5:c5:14:a1:9e:41:52:d2:2c:73:46:73:ae:fa:d9:4f:9d:69:
2d:20:19:1b:23:b8:fb:2e:46:ad:33:00:e7:3e:43:66:4c:46:
6e:9c:7c:ba:11:3f:da:ae:d0:4a:62:a9:33:40:39:b9:c1:d3:
a6:a4:71:55:64:dc:fc:26:8a:7a:2c:19:52:15:9d:10:c6:9e:
8d:f6:0f:d7:01:8d:87:a7:3c:26:53:d3:67:7d:90:c1:df:e3:
90:4a:08:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkwEMfYD/4mAPWAceevmhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhODM4ZjFjYThiZGNkODFjMDRiNmI2NzhlNzliZTYxNGU1
MWIxMTEwHhcNMjQwMTAxMTAzMDE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjI2NDM4NzFhYmE4YTczMDY2OTZjYWQ2NjhjZDliN2EzMDM2MDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6vuQmW+pfdoUzo4c3DQEYrSM3wJ
278cBeuUljoGLSIM80YlGUZTy/YHf2YzMqsnPo2FfThEe/oKAQIATpd1cN40FDm1
AobfGbNqVTW2gQnhRLBAJdZLWeM0LGvnFaPIw7k+trGqlymn6HGUZMuGNxWdLYOz
fO9v3TYNMvAZjhX1BFxRendbJLxUmljr5Ua5Oh2oU/VQVCS+v64ooxTyM6LPVh9H
9SJEHOiFxeWgA4SyJNk6QevCXcjIbFyFihPUTgOhIu49b9A/yELAc/DkYoRalHzk
/S1mrBnkPOlNEnDa8CIm/f304N9xtFvsslTyjlG3vvYWUQg2+5ukpLBJ2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDsmQ4cauopzBmlsrWaM2bejA2CJMB8GA1UdIwQY
MBaAFLqDjxyovc2BwEtrZ455vmFOUbERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kYjRlODgtZTU4ZC00MzQ1LTgwYzct
MDkzZWI5YTlhYThiLzEvT3laRGh4cTZpbk1HYVd5dFpvelp0Nk1EWUlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kYjRlODgtZTU4ZC00MzQ1LTgwYzctMDkzZWI5YTlhYThi
LzEvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+b5MA0G
CSqGSIb3DQEBCwUAA4IBAQACMijvFyESvxXFXVtz6Yio5Tl1Ud3msvihGQhepC01
WJQzlpgXoFBtz+xxwo1F1yCHWAkD18/eqGUyy24Qujsa/puE188jpN/lm+weeBB1
Vq0uR+L1ozq1MDuMjZH0QDCtuZeEtaUn4/D/mN9woA7oAwu0HFQF9u2cm3evfew/
VuZJWN3pdildmWQBnDsetKoLck3+xvWivOcBupdxUK3lRNe1xRShnkFS0ixzRnOu
+tlPnWktIBkbI7j7LkatMwDnPkNmTEZunHy6ET/artBKYqkzQDm5wdOmpHFVZNz8
Jop6LBlSFZ0Qxp6N9g/XAY2HpzwmU9NnfZDB3+OQSgiO
-----END CERTIFICATE-----
Generated at Tue Nov 26 09:13:39 2024 by rpki-client on console-fra.rpki-client.org