Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/Olp3c-Rp9gWg5F_VyGO5i3JMx6s.roa
File: Olp3c-Rp9gWg5F_VyGO5i3JMx6s.roa (raw, json)
Hash identifier: EOqsdf8TVf2FIY8EKutMIW9IJVaGkHvLpwPCsmqk5pE=
Subject key identifier: 3A:5A:77:73:E4:69:F6:05:A0:E4:5F:D5:C8:63:B9:8B:72:4C:C7:AB
Certificate issuer: /CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Certificate serial: 018CC8DE3A11DB80FB76CEEA2812EFC98BF1
Authority key identifier: FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/Olp3c-Rp9gWg5F_VyGO5i3JMx6s.roa
Signing time: Tue 02 Jan 2024 06:30:56 +0000
ROA not before: Tue 02 Jan 2024 06:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209154
IP address blocks: 193.35.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:3a:11:db:80:fb:76:ce:ea:28:12:ef:c9:8b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Validity
Not Before: Jan 2 06:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a5a7773e469f605a0e45fd5c863b98b724cc7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:21:90:ea:69:0f:59:40:6f:7f:d7:dc:91:b9:
00:97:a1:91:08:5d:af:10:9d:34:4b:97:86:ec:40:
11:41:8f:3f:45:c2:74:a1:86:68:3f:e5:42:f2:2d:
06:5d:8f:e8:e3:2a:a2:86:b4:ec:d2:db:86:ff:f8:
13:93:d7:c7:37:09:65:5f:65:d1:c7:63:0b:f8:78:
be:0e:ee:71:4b:ce:c6:07:b4:c9:44:42:f3:99:79:
3b:87:2e:0d:d9:dc:2d:39:9b:32:62:76:a3:3c:e5:
13:06:43:ef:cd:5d:a2:42:22:9b:0a:3e:67:43:38:
4a:63:50:d7:8c:f9:cc:9f:da:a2:22:13:1c:0c:e9:
50:91:65:d3:c6:f2:a3:37:a0:5d:ac:f4:75:d8:65:
a4:81:6e:2b:ad:c6:d5:84:9f:43:59:4f:0a:c5:5e:
ea:65:b2:8e:62:53:16:44:7a:91:90:a5:d9:4c:9e:
e8:a8:09:51:8d:5e:8c:78:64:c4:de:fe:42:93:8a:
4e:93:88:d4:81:1d:d3:75:b6:ce:ac:3c:f4:d1:ce:
39:bc:5a:86:22:6c:b4:f6:7a:80:2b:94:7b:3c:29:
ec:1a:b3:b0:75:1b:84:ed:a0:5e:81:be:7d:a3:5f:
a4:a8:de:79:ad:63:c8:60:8d:76:15:dc:e6:0c:b8:
97:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5A:77:73:E4:69:F6:05:A0:E4:5F:D5:C8:63:B9:8B:72:4C:C7:AB
X509v3 Authority Key Identifier:
keyid:FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/Olp3c-Rp9gWg5F_VyGO5i3JMx6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.200.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:66:de:84:7c:17:63:aa:ae:00:df:a1:d3:6d:f1:7e:74:06:
22:c6:4e:ae:1e:b5:ab:93:7c:3a:dc:ef:0e:3a:86:ee:15:59:
e1:fd:b1:8a:d9:63:32:f1:aa:d0:f3:2b:ef:6e:25:b1:df:32:
5b:19:70:7c:ce:4e:71:6c:37:b7:50:40:12:58:a5:d2:4b:d0:
ff:b9:ca:ae:b9:32:16:42:d8:e1:a2:0d:42:03:0a:f6:3d:1f:
68:8c:6e:d3:5f:36:d8:bf:5e:20:89:be:4d:2f:65:15:15:92:
5a:2d:99:72:18:64:cc:6d:2a:d8:40:d8:c1:b8:f6:dc:be:56:
05:3d:06:7e:b5:bc:c2:ce:d6:a1:5b:98:95:5d:8c:32:cd:b3:
7a:a5:07:f2:23:f8:10:be:66:79:4a:66:70:42:ed:84:af:77:
dd:55:7d:76:69:18:80:77:80:9d:e5:39:fd:c5:55:ee:70:ae:
27:cc:ff:95:5f:75:e6:f7:1b:4f:a8:54:f7:d9:b7:ff:ac:21:
8a:0b:83:69:ce:16:e8:22:49:b1:0c:4e:3b:64:c8:d2:4c:f1:
df:4b:ec:90:6f:38:af:70:34:65:b3:f2:52:fa:13:c6:df:6e:
71:d1:81:aa:78:71:01:bc:14:a5:83:8a:1a:13:e3:ae:d5:41:
5f:80:86:0f
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzI3joR24D7ds7qKBLvyYvxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYzA4OWE5Y2Q2YTAzNzViYWU0OTljYzA2YTRjYWEzMDcx
YjVkNGMwHhcNMjQwMTAyMDYzMDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTVhNzc3M2U0NjlmNjA1YTBlNDVmZDVjODYzYjk4YjcyNGNjN2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyGQ6mkPWUBvf9fckbkAl6GRCF2v
EJ00S5eG7EARQY8/RcJ0oYZoP+VC8i0GXY/o4yqihrTs0tuG//gTk9fHNwllX2XR
x2ML+Hi+Du5xS87GB7TJRELzmXk7hy4N2dwtOZsyYnajPOUTBkPvzV2iQiKbCj5n
QzhKY1DXjPnMn9qiIhMcDOlQkWXTxvKjN6BdrPR12GWkgW4rrcbVhJ9DWU8KxV7q
ZbKOYlMWRHqRkKXZTJ7oqAlRjV6MeGTE3v5Ck4pOk4jUgR3TdbbOrDz00c45vFqG
Imy09nqAK5R7PCnsGrOwdRuE7aBegb59o1+kqN55rWPIYI12FdzmDLiXMwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFDpad3PkafYFoORf1chjuYtyTMerMB8GA1UdIwQY
MBaAFPrAianNagN1uuSZzAakyqMHG11MMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1zQ0pxYzFxQTNXNjVKbk1CcVRLb3djYlhVdy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvMmZhYzlmLTYxOGMtNDJmNi05NDgz
LTc3N2Y4NjE2NjIyMS8xL09scDNjLVJwOWdXZzVGX1Z5R081aTNKTXg2cy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOGIvMmZhYzlmLTYxOGMtNDJmNi05NDgzLTc3N2Y4NjE2NjIy
MS8xLzEtc0NKcWMxcUEzVzY1Sm5NQnFUS293Y2JYVXcuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALBI8gw
DQYJKoZIhvcNAQELBQADggEBAG9m3oR8F2OqrgDfodNt8X50BiLGTq4etauTfDrc
7w46hu4VWeH9sYrZYzLxqtDzK+9uJbHfMlsZcHzOTnFsN7dQQBJYpdJL0P+5yq65
MhZC2OGiDUIDCvY9H2iMbtNfNti/XiCJvk0vZRUVklotmXIYZMxtKthA2MG49ty+
VgU9Bn61vMLO1qFbmJVdjDLNs3qlB/Ij+BC+ZnlKZnBC7YSvd91VfXZpGIB3gJ3l
Of3FVe5wrifM/5Vfdeb3G0+oVPfZt/+sIYoLg2nOFugiSbEMTjtkyNJM8d9L7JBv
OK9wNGWz8lL6E8bfbnHRgap4cQG8FKWDihoT467VQV+Ahg8=
-----END CERTIFICATE-----
Generated at Fri Jun 28 14:31:06 2024 by rpki-client on console-ams.rpki-client.org