Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/OGZCXy7XdHZiuL20AY1HJP08UYE.roa
File: OGZCXy7XdHZiuL20AY1HJP08UYE.roa (raw, json)
Hash identifier: vMd+Ud2KPxSGOZuUWtOSrWd4he1LTB83sbgEslStL9Q=
Subject key identifier: 38:66:42:5F:2E:D7:74:76:62:B8:BD:B4:01:8D:47:24:FD:3C:51:81
Certificate issuer: /CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93
Certificate serial: 018D4013EA27C7F0BC0249ED126C06C37AE6
Authority key identifier: DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/OGZCXy7XdHZiuL20AY1HJP08UYE.roa
Signing time: Thu 25 Jan 2024 10:04:23 +0000
ROA not before: Thu 25 Jan 2024 10:04:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42156
IP address blocks: 193.107.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:40:13:ea:27:c7:f0:bc:02:49:ed:12:6c:06:c3:7a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93
Validity
Not Before: Jan 25 10:04:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3866425f2ed7747662b8bdb4018d4724fd3c5181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f9:5f:e0:29:2c:11:84:75:f2:df:45:4a:74:
fe:99:02:13:7d:e6:c1:2e:7e:d5:8a:9e:fc:6c:f9:
bf:4a:1a:5d:21:cf:80:0c:a1:bd:29:aa:27:0b:ab:
46:c6:41:b8:07:63:98:15:f6:9d:bd:22:7a:72:b3:
fc:48:e4:26:bb:89:31:1b:7b:75:78:b1:39:cb:50:
a0:86:08:62:1a:67:84:be:4c:50:91:40:3d:55:a0:
21:12:f0:b3:23:32:25:53:bc:7b:8c:54:b7:0c:c4:
1d:1b:3b:fe:2f:23:c9:ea:47:55:16:e4:1a:b7:04:
17:0d:a2:ed:61:2d:dd:ad:fa:64:97:8c:ce:75:0f:
1a:31:e0:38:07:e7:be:fe:7f:c5:46:13:7e:4d:f2:
65:5c:fe:6f:60:d5:2c:91:19:ea:9a:35:ad:ba:ef:
10:49:16:15:f3:7d:f3:f3:8d:b9:27:af:89:5d:5c:
19:1f:fb:c6:e3:a3:2e:50:27:27:b0:02:35:f5:59:
6a:d9:c9:78:e7:48:cc:35:bb:2a:2a:d0:5a:fb:ba:
0e:b4:1c:7a:73:75:2c:d8:71:86:73:7b:5e:72:7d:
60:77:a7:f5:59:10:09:19:a2:03:9b:eb:f4:3d:06:
06:11:c6:20:ef:74:07:a8:45:0c:d8:3f:42:37:b7:
0a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:66:42:5F:2E:D7:74:76:62:B8:BD:B4:01:8D:47:24:FD:3C:51:81
X509v3 Authority Key Identifier:
keyid:DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/OGZCXy7XdHZiuL20AY1HJP08UYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.247.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:62:59:7b:06:35:7e:f1:02:88:1c:41:30:6d:29:2c:8a:aa:
53:49:f0:1e:21:1e:c7:ef:75:d7:d6:de:bd:93:7a:ce:49:f5:
3c:91:f7:a7:b6:e5:e6:db:c2:ac:af:a1:8d:de:39:b7:5b:3c:
b8:f1:13:a1:db:e1:7c:15:57:90:f9:7f:c2:35:c8:b0:74:d9:
01:a8:2c:31:04:26:53:2a:a0:95:65:6e:75:c9:d2:ba:7b:a6:
5f:14:fa:af:1f:74:3b:7f:1d:25:90:93:b1:10:3e:0b:42:39:
60:1a:3e:6c:8b:ef:88:db:6a:8f:df:ff:e2:85:23:19:56:4d:
97:f1:af:cb:d0:84:34:ac:f7:8e:a5:74:15:d1:99:34:8d:d9:
13:c6:1c:b4:8e:9a:49:69:1f:7b:3c:7b:c5:33:2b:dc:b5:dc:
70:55:34:9b:90:f6:71:c0:27:88:2b:8c:5f:17:b4:76:eb:87:
44:e5:57:16:da:91:5e:6d:b5:9b:69:df:dd:c2:fa:1f:26:dd:
96:5c:2e:7c:f0:09:5e:9c:df:15:90:d6:db:da:31:16:41:c2:
b6:8a:b4:b7:7e:ba:92:54:0f:ba:e4:17:71:c3:de:fe:21:9c:
b8:6a:93:ce:41:76:cf:c1:35:93:73:d8:5e:17:6d:b3:27:c9:
b4:7b:63:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1AE+onx/C8AkntEmwGw3rmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYTJmMzBlNGU2OTY5MmIxYjRmZWNlYmFlOTFmZDU2MDRi
ZGVjOTMwHhcNMjQwMTI1MTAwNDIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODY2NDI1ZjJlZDc3NDc2NjJiOGJkYjQwMThkNDcyNGZkM2M1MTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/lf4CksEYR18t9FSnT+mQITfebB
Ln7Vip78bPm/ShpdIc+ADKG9KaonC6tGxkG4B2OYFfadvSJ6crP8SOQmu4kxG3t1
eLE5y1CghghiGmeEvkxQkUA9VaAhEvCzIzIlU7x7jFS3DMQdGzv+LyPJ6kdVFuQa
twQXDaLtYS3drfpkl4zOdQ8aMeA4B+e+/n/FRhN+TfJlXP5vYNUskRnqmjWtuu8Q
SRYV833z8425J6+JXVwZH/vG46MuUCcnsAI19Vlq2cl450jMNbsqKtBa+7oOtBx6
c3Us2HGGc3tecn1gd6f1WRAJGaIDm+v0PQYGEcYg73QHqEUM2D9CN7cKJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDhmQl8u13R2Yri9tAGNRyT9PFGBMB8GA1UdIwQY
MBaAFNyi8w5OaWkrG0/s666R/VYEveyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tMekRrNXBhU3NiVC16cnJwSDlWZ1M5N0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wMzY1NDktNDVkMC00NTY1LTgyOGYt
ZWIzZTc4NWQ5MDk3LzEvT0daQ1h5N1hkSFppdUwyMEFZMUhKUDA4VVlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8wMzY1NDktNDVkMC00NTY1LTgyOGYtZWIzZTc4NWQ5MDk3
LzEvM0tMekRrNXBhU3NiVC16cnJwSDlWZ1M5N0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWv3MA0G
CSqGSIb3DQEBCwUAA4IBAQBPYll7BjV+8QKIHEEwbSksiqpTSfAeIR7H73XX1t69
k3rOSfU8kfentuXm28Ksr6GN3jm3Wzy48ROh2+F8FVeQ+X/CNciwdNkBqCwxBCZT
KqCVZW51ydK6e6ZfFPqvH3Q7fx0lkJOxED4LQjlgGj5si++I22qP3//ihSMZVk2X
8a/L0IQ0rPeOpXQV0Zk0jdkTxhy0jppJaR97PHvFMyvctdxwVTSbkPZxwCeIK4xf
F7R264dE5VcW2pFebbWbad/dwvofJt2WXC588AlenN8VkNbb2jEWQcK2irS3frqS
VA+65Bdxw97+IZy4apPOQXbPwTWTc9heF22zJ8m0e2No
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:43:55 2024 by rpki-client on console-ams.rpki-client.org