Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/osxe9l_A5nCiim1PEnCRg-XeF64.roa
File: osxe9l_A5nCiim1PEnCRg-XeF64.roa (raw, json)
Hash identifier: ou6cR7HbPfLGPol/VI/KpPCN10zJA52Y2c2G4z/Ofb4=
Subject key identifier: A2:CC:5E:F6:5F:C0:E6:70:A2:8A:6D:4F:12:70:91:83:E5:DE:17:AE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018D3AE9C1658FDE53BEDC7F3970376562FA
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/osxe9l_A5nCiim1PEnCRg-XeF64.roa
Signing time: Wed 24 Jan 2024 10:00:14 +0000
ROA not before: Wed 24 Jan 2024 10:00:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28459
IP address blocks: 89.213.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3a:e9:c1:65:8f:de:53:be:dc:7f:39:70:37:65:62:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 24 10:00:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2cc5ef65fc0e670a28a6d4f12709183e5de17ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:99:04:66:84:95:86:cb:cd:67:06:96:59:73:
85:f4:ce:f5:ff:31:22:87:8d:4c:d4:6b:f7:07:39:
da:73:f7:00:02:5d:dc:16:55:ed:e2:bd:58:2b:e1:
96:99:f4:3d:84:17:89:49:f6:ed:18:36:2c:58:90:
38:dc:a5:77:ee:31:cd:a5:7a:74:5a:23:2e:af:3c:
b7:9e:1d:5a:a5:dd:3b:f7:8b:65:7e:f3:f9:f7:24:
d1:8b:d3:cd:30:84:ec:cd:99:62:30:ef:d7:f1:63:
48:e4:14:1e:70:b5:12:68:c7:38:28:77:b6:e3:26:
2e:31:19:8f:07:84:17:5d:07:7f:7b:f9:e4:07:8d:
47:2e:0f:66:f7:fa:74:1f:25:b7:aa:9e:17:a2:d5:
a1:37:f6:22:10:b1:ed:1b:14:3a:42:94:ea:e7:60:
52:ae:5c:37:94:3f:80:44:5e:b3:9a:2a:6d:31:6f:
f6:8a:50:f1:31:63:80:04:07:ad:54:90:1c:ce:ae:
77:df:5d:93:c2:f4:26:40:c8:65:96:6c:79:1e:31:
89:a6:93:4f:bc:1e:27:d0:19:21:0a:5a:05:75:d7:
5f:23:1e:65:a5:7f:d8:68:a0:72:97:30:7c:62:43:
c3:ae:6c:21:09:b5:5c:eb:ac:12:5c:9e:f5:61:24:
1a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CC:5E:F6:5F:C0:E6:70:A2:8A:6D:4F:12:70:91:83:E5:DE:17:AE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/osxe9l_A5nCiim1PEnCRg-XeF64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.172.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:8b:15:f0:0d:e5:e6:57:52:e9:7b:66:8a:06:ae:00:c3:fe:
b2:fc:24:ee:53:bd:1a:a7:fb:4e:63:9d:9f:3c:67:4a:1d:82:
99:d0:99:da:b0:77:51:c8:7c:3d:43:a7:3f:72:58:e6:17:3c:
5c:22:c4:d9:2f:13:05:b0:68:b3:24:67:b2:b0:fb:f7:7f:93:
79:74:7d:62:75:81:e0:4f:56:fb:cf:5e:d9:a5:b9:b2:99:30:
5a:35:62:8d:3f:87:02:01:58:a0:d2:96:e5:ac:1f:01:25:c6:
e7:57:ad:2b:7a:22:ed:2b:73:25:13:a8:57:73:24:66:9b:e7:
fd:2d:e4:db:60:19:e1:00:1f:4a:da:c8:7a:39:ff:08:ac:d8:
b1:f8:a5:fa:35:c0:db:19:13:12:5b:d0:f4:d3:7e:dc:22:7c:
9d:54:32:88:59:1c:9d:37:20:d8:77:27:24:a6:fd:25:72:a8:
ff:63:2d:cb:a9:20:1c:e0:08:05:f0:c7:3c:67:0d:79:fb:a2:
74:f1:1b:d1:df:53:4a:17:e1:35:aa:f5:18:df:e8:8a:a7:65:
44:7a:ec:5a:8c:47:f4:5d:5d:2f:6e:b4:7f:2c:9e:dc:86:85:
2e:f3:b8:36:03:6d:5f:6d:0c:28:49:63:b2:f4:bf:6b:77:a0:
e5:c9:49:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY066cFlj95Tvtx/OXA3ZWL6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwMTI0MTAwMDE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmNjNWVmNjVmYzBlNjcwYTI4YTZkNGYxMjcwOTE4M2U1ZGUxN2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZkEZoSVhsvNZwaWWXOF9M71/zEi
h41M1Gv3Bznac/cAAl3cFlXt4r1YK+GWmfQ9hBeJSfbtGDYsWJA43KV37jHNpXp0
WiMurzy3nh1apd0794tlfvP59yTRi9PNMITszZliMO/X8WNI5BQecLUSaMc4KHe2
4yYuMRmPB4QXXQd/e/nkB41HLg9m9/p0HyW3qp4XotWhN/YiELHtGxQ6QpTq52BS
rlw3lD+ARF6zmiptMW/2ilDxMWOABAetVJAczq53312TwvQmQMhllmx5HjGJppNP
vB4n0BkhCloFdddfIx5lpX/YaKBylzB8YkPDrmwhCbVc66wSXJ71YSQa3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKLMXvZfwOZwooptTxJwkYPl3heuMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvb3N4ZTlsX0E1bkNpaW0xUEVuQ1JnLVhlRjY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdWsMA0G
CSqGSIb3DQEBCwUAA4IBAQChixXwDeXmV1Lpe2aKBq4Aw/6y/CTuU70ap/tOY52f
PGdKHYKZ0JnasHdRyHw9Q6c/cljmFzxcIsTZLxMFsGizJGeysPv3f5N5dH1idYHg
T1b7z17ZpbmymTBaNWKNP4cCAVig0pblrB8BJcbnV60reiLtK3MlE6hXcyRmm+f9
LeTbYBnhAB9K2sh6Of8IrNix+KX6NcDbGRMSW9D0037cInydVDKIWRydNyDYdyck
pv0lcqj/Yy3LqSAc4AgF8Mc8Zw15+6J08RvR31NKF+E1qvUY3+iKp2VEeuxajEf0
XV0vbrR/LJ7choUu87g2A21fbQwoSWOy9L9rd6DlyUkL
-----END CERTIFICATE-----
Generated at Mon Nov 25 14:08:03 2024 by rpki-client on console-ams.rpki-client.org