Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/OGkiC76B70TZx7aW47Qb6NWZ4Ao.roa
File: OGkiC76B70TZx7aW47Qb6NWZ4Ao.roa (raw, json)
Hash identifier: VU46SA9jS9Rvf/RgOpDCQBeKzc4rGdRgFdlswmqZlHs=
Subject key identifier: 38:69:22:0B:BE:81:EF:44:D9:C7:B6:96:E3:B4:1B:E8:D5:99:E0:0A
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018CC26D604FB173FD34B59FC89024819029
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/OGkiC76B70TZx7aW47Qb6NWZ4Ao.roa
Signing time: Mon 01 Jan 2024 00:29:57 +0000
ROA not before: Mon 01 Jan 2024 00:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197929
IP address blocks: 212.5.152.0/23 maxlen: 24
212.5.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:60:4f:b1:73:fd:34:b5:9f:c8:90:24:81:90:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 00:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3869220bbe81ef44d9c7b696e3b41be8d599e00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a5:9f:85:13:8a:b8:de:7d:17:1c:08:91:05:
22:44:5a:55:bc:67:0e:09:56:79:59:fe:08:d1:56:
25:76:50:c7:e8:32:67:ef:2a:33:18:44:cb:10:f2:
0f:ce:45:47:81:b6:ee:e0:a7:28:1f:ff:d1:da:70:
3a:bb:08:89:bb:73:ab:fb:ce:51:26:6a:e3:53:35:
55:40:3e:ad:bb:4e:35:86:18:d0:d3:1e:81:5b:30:
80:51:90:f1:ef:b0:b2:b8:be:92:aa:f1:2e:ce:4b:
d9:1c:e1:58:8a:b8:3d:4d:56:6b:f5:b6:e4:31:43:
0b:ae:eb:18:42:0f:cf:52:af:57:de:36:f6:3e:0c:
53:fb:06:63:85:c9:f3:71:c5:95:03:61:3e:58:d4:
2a:fd:a8:d5:62:cd:d6:8b:da:53:f3:fe:37:40:98:
43:fe:1d:cf:e2:92:74:1c:68:9b:94:ac:f1:1f:07:
27:6a:8f:59:6d:4e:6c:ac:bb:a0:6b:42:af:b2:bd:
15:46:ef:35:c9:67:7c:96:f7:61:0d:2e:b8:be:73:
2b:f5:f2:62:50:ee:50:92:0f:f6:0c:93:fd:ad:29:
fc:16:7a:20:53:e5:1f:9a:4c:a4:ed:64:da:26:c7:
13:00:61:80:77:8f:06:e1:ea:1a:f5:26:db:09:ff:
57:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:69:22:0B:BE:81:EF:44:D9:C7:B6:96:E3:B4:1B:E8:D5:99:E0:0A
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/OGkiC76B70TZx7aW47Qb6NWZ4Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.5.152.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:15:31:e7:ac:54:1a:7b:be:cf:56:35:f3:6a:dc:4b:61:ba:
29:a5:3d:6d:92:46:46:31:a1:02:8e:ca:d8:f7:ea:27:74:98:
c5:96:a2:df:46:84:73:f6:7f:6b:62:c3:79:d0:8e:10:d3:95:
b7:fb:29:50:1f:39:be:3a:2e:1c:d2:eb:6d:58:d0:29:87:7c:
94:d1:b6:69:5d:24:3f:82:37:d3:b5:16:14:77:24:e9:ee:2b:
6c:05:3b:54:a6:02:fd:fb:0b:c9:25:fd:27:1c:6b:2e:a4:93:
d2:18:7c:b9:92:bc:f9:6a:21:7c:b3:ff:5f:4c:5e:e7:28:82:
c4:b5:c4:2d:09:fd:e7:59:6b:27:07:c0:01:0b:2d:5d:b2:86:
a6:d3:c3:f9:fe:92:76:66:a2:81:65:ec:cb:eb:1d:1b:76:eb:
8b:74:df:26:eb:8a:66:ba:c9:cf:24:fd:99:bd:2c:e5:b0:d6:
4d:58:ad:c0:5d:ca:ae:1f:6d:33:48:fb:4a:c3:93:f2:d8:a6:
20:29:04:87:cb:1b:15:03:aa:63:13:69:83:1e:c0:3b:02:73:
f0:fe:0d:22:45:f2:72:c6:d6:93:39:6c:68:93:bc:df:f0:26:
77:3e:2f:04:00:9e:d9:1d:cc:c7:ef:9e:79:fc:09:05:93:7d:
e4:64:8b:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbWBPsXP9NLWfyJAkgZApMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjQwMTAxMDAyOTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODY5MjIwYmJlODFlZjQ0ZDljN2I2OTZlM2I0MWJlOGQ1OTllMDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKWfhROKuN59FxwIkQUiRFpVvGcO
CVZ5Wf4I0VYldlDH6DJn7yozGETLEPIPzkVHgbbu4KcoH//R2nA6uwiJu3Or+85R
JmrjUzVVQD6tu041hhjQ0x6BWzCAUZDx77CyuL6SqvEuzkvZHOFYirg9TVZr9bbk
MUMLrusYQg/PUq9X3jb2PgxT+wZjhcnzccWVA2E+WNQq/ajVYs3Wi9pT8/43QJhD
/h3P4pJ0HGiblKzxHwcnao9ZbU5srLuga0Kvsr0VRu81yWd8lvdhDS64vnMr9fJi
UO5Qkg/2DJP9rSn8FnogU+Ufmkyk7WTaJscTAGGAd48G4eoa9SbbCf9XswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDhpIgu+ge9E2ce2luO0G+jVmeAKMB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEvT0draUM3NkI3MFRaeDdhVzQ3UWI2TldaNEFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1AWYMA0G
CSqGSIb3DQEBCwUAA4IBAQBLFTHnrFQae77PVjXzatxLYboppT1tkkZGMaECjsrY
9+ondJjFlqLfRoRz9n9rYsN50I4Q05W3+ylQHzm+Oi4c0uttWNAph3yU0bZpXSQ/
gjfTtRYUdyTp7itsBTtUpgL9+wvJJf0nHGsupJPSGHy5krz5aiF8s/9fTF7nKILE
tcQtCf3nWWsnB8ABCy1dsoam08P5/pJ2ZqKBZezL6x0bduuLdN8m64pmusnPJP2Z
vSzlsNZNWK3AXcquH20zSPtKw5Py2KYgKQSHyxsVA6pjE2mDHsA7AnPw/g0iRfJy
xtaTOWxok7zf8CZ3Pi8EAJ7ZHczH7555/AkFk33kZIup
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:08 2024 by rpki-client on console-fra.rpki-client.org