Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/OGI4m-Gft2p35N9pgEzuzQMH1WA.roa
File: OGI4m-Gft2p35N9pgEzuzQMH1WA.roa (raw, json)
Hash identifier: 4zfOy5AMM94Yv/XAf+E4ygrL7egyeeau0fSISt0rkdE=
Subject key identifier: 38:62:38:9B:E1:9F:B7:6A:77:E4:DF:69:80:4C:EE:CD:03:07:D5:60
Certificate issuer: /CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Certificate serial: 018EA337C62D3ECEB423243B3FC132ED86D9
Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/OGI4m-Gft2p35N9pgEzuzQMH1WA.roa
Signing time: Wed 03 Apr 2024 09:08:45 +0000
ROA not before: Wed 03 Apr 2024 09:08:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 194.117.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a3:37:c6:2d:3e:ce:b4:23:24:3b:3f:c1:32:ed:86:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Validity
Not Before: Apr 3 09:08:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3862389be19fb76a77e4df69804ceecd0307d560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9f:da:2c:37:b2:44:d6:4a:2a:2b:a0:17:fb:
e1:d9:fe:50:b4:46:6d:cc:db:12:15:c9:88:a2:17:
04:ff:25:2f:02:20:61:7e:e2:33:a5:f4:e8:3a:1d:
03:72:d2:9e:bf:bd:a3:2d:24:d6:ce:5b:3f:0a:b0:
af:57:44:20:00:04:a3:99:fb:f9:1c:ba:fe:99:cc:
dc:f7:ad:25:47:55:e8:91:3e:f4:58:e4:12:85:95:
df:31:9d:07:c6:0b:2d:84:86:c6:bb:8b:7e:f4:72:
20:b9:39:af:37:6b:e9:a4:4e:e1:8b:eb:fe:7c:3b:
aa:eb:06:52:df:d5:5d:5c:2e:e6:77:ac:08:e7:aa:
5c:f3:dc:42:56:cf:85:79:ff:95:1f:8e:db:4e:a0:
b4:c1:25:ca:e3:89:de:27:ab:f9:13:b7:0d:d0:96:
af:f8:5b:16:66:20:ed:c0:2c:09:18:56:50:c9:1c:
2d:77:65:ec:5b:14:25:b2:d5:70:2e:3d:42:dc:a4:
38:d9:57:6a:cd:e2:51:a4:bc:7c:86:eb:2d:de:8c:
26:e2:4d:bd:2b:20:bf:fa:0c:6b:05:b7:59:78:17:
a3:cb:f8:2c:4c:7f:02:30:6c:55:18:0f:21:32:b3:
4a:02:58:93:9b:3f:2a:46:c1:44:95:98:be:98:aa:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:62:38:9B:E1:9F:B7:6A:77:E4:DF:69:80:4C:EE:CD:03:07:D5:60
X509v3 Authority Key Identifier:
keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/OGI4m-Gft2p35N9pgEzuzQMH1WA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.63.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:c4:68:c4:68:8f:1b:5e:13:70:38:8e:63:96:1a:bf:7e:07:
67:ac:5b:81:8b:c1:61:60:64:cc:84:a4:35:eb:38:c7:a3:5d:
f2:37:b5:67:88:a9:1a:65:14:bf:b5:c3:38:27:45:3d:78:0e:
65:b4:af:5e:f2:5c:b3:52:8e:3a:05:2b:a0:ab:da:f8:e7:c6:
7d:d3:d2:0c:da:9f:25:db:b0:f3:08:dc:0f:7d:f3:5b:91:f3:
a7:0e:ab:48:ef:1f:ac:5c:a9:46:24:67:3c:7d:88:53:0a:07:
50:52:cd:11:9f:a7:4b:15:19:93:a3:de:83:06:02:eb:9b:ab:
46:e6:52:94:67:15:e0:65:03:46:f1:5f:69:4b:f9:0f:6e:69:
14:6d:6c:b0:8f:90:36:11:9a:40:e7:86:04:56:9a:ec:cb:ec:
03:19:6e:ee:fa:0f:f3:68:1f:a4:53:43:b5:64:1f:24:38:dd:
17:8d:5b:99:c5:09:b0:31:9b:46:1d:4c:e2:59:df:1b:84:02:
75:a6:08:91:72:cd:96:01:f4:bc:d8:e6:b3:68:2d:d7:a6:68:
94:48:a2:4b:e2:0b:eb:a0:ec:6a:82:74:0f:d4:3a:b7:5d:27:
2d:f0:bf:5f:46:88:5b:03:52:1d:7a:ac:56:74:82:df:d6:f8:
a0:f3:36:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY6jN8YtPs60IyQ7P8Ey7YbZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYjA2MzhiODc2ZjM5NzhjYTdiZDI4ZDdkZTM3MDk5NmIz
OTZhM2YwHhcNMjQwNDAzMDkwODQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODYyMzg5YmUxOWZiNzZhNzdlNGRmNjk4MDRjZWVjZDAzMDdkNTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ/aLDeyRNZKKiugF/vh2f5QtEZt
zNsSFcmIohcE/yUvAiBhfuIzpfToOh0DctKev72jLSTWzls/CrCvV0QgAASjmfv5
HLr+mczc960lR1XokT70WOQShZXfMZ0HxgsthIbGu4t+9HIguTmvN2vppE7hi+v+
fDuq6wZS39VdXC7md6wI56pc89xCVs+Fef+VH47bTqC0wSXK44neJ6v5E7cN0Jav
+FsWZiDtwCwJGFZQyRwtd2XsWxQlstVwLj1C3KQ42VdqzeJRpLx8hust3owm4k29
KyC/+gxrBbdZeBejy/gsTH8CMGxVGA8hMrNKAliTmz8qRsFElZi+mKq+KQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDhiOJvhn7dqd+TfaYBM7s0DB9VgMB8GA1UdIwQY
MBaAFICwY4uHbzl4ynvSjX3jcJlrOWo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0xCamk0ZHZPWGpLZTlLTmZlTndtV3M1YWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mNDY2M2YtNDg0ZS00MmRiLTg5YTAt
MTViMDlmNWY2ZWQ3LzEvT0dJNG0tR2Z0MnAzNU45cGdFenV6UU1IMVdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9mNDY2M2YtNDg0ZS00MmRiLTg5YTAtMTViMDlmNWY2ZWQ3
LzEvZ0xCamk0ZHZPWGpLZTlLTmZlTndtV3M1YWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnU/MA0G
CSqGSIb3DQEBCwUAA4IBAQDCxGjEaI8bXhNwOI5jlhq/fgdnrFuBi8FhYGTMhKQ1
6zjHo13yN7VniKkaZRS/tcM4J0U9eA5ltK9e8lyzUo46BSugq9r458Z909IM2p8l
27DzCNwPffNbkfOnDqtI7x+sXKlGJGc8fYhTCgdQUs0Rn6dLFRmTo96DBgLrm6tG
5lKUZxXgZQNG8V9pS/kPbmkUbWywj5A2EZpA54YEVprsy+wDGW7u+g/zaB+kU0O1
ZB8kON0XjVuZxQmwMZtGHUziWd8bhAJ1pgiRcs2WAfS82OazaC3XpmiUSKJL4gvr
oOxqgnQP1Dq3XSct8L9fRohbA1IdeqxWdILf1vig8zZW
-----END CERTIFICATE-----
Generated at Thu May 2 19:24:52 2024 by rpki-client on console-fra.rpki-client.org