Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/oUJwriMAtJYzEtHJHTOFCFKyW5o.roa
File: oUJwriMAtJYzEtHJHTOFCFKyW5o.roa (raw, json)
Hash identifier: 1290LjcQ9E4FkOypHXLJhYlIymAchjpxk/PLaI8qooQ=
Subject key identifier: A1:42:70:AE:23:00:B4:96:33:12:D1:C9:1D:33:85:08:52:B2:5B:9A
Certificate issuer: /CN=33fbdbb20c2d97073c0de8b7caa75ec1eeb191b8
Certificate serial: 018CC801D31031611C7D068C9C8C4BD3EA27
Authority key identifier: 33:FB:DB:B2:0C:2D:97:07:3C:0D:E8:B7:CA:A7:5E:C1:EE:B1:91:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/oUJwriMAtJYzEtHJHTOFCFKyW5o.roa
Signing time: Tue 02 Jan 2024 02:30:11 +0000
ROA not before: Tue 02 Jan 2024 02:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20571
IP address blocks: 217.169.64.0/20 maxlen: 24
2a0a:b7c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:d3:10:31:61:1c:7d:06:8c:9c:8c:4b:d3:ea:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33fbdbb20c2d97073c0de8b7caa75ec1eeb191b8
Validity
Not Before: Jan 2 02:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a14270ae2300b4963312d1c91d33850852b25b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c6:48:3f:c3:02:99:ad:46:52:f9:ad:89:68:
ee:6c:a9:6b:0d:f3:ca:c4:a8:91:ee:c6:f5:67:df:
7e:6c:d1:15:3b:34:73:56:7b:d7:80:e7:4f:d4:44:
ee:65:97:d0:5e:15:c7:07:e9:19:ff:e3:4c:92:09:
8f:de:9b:45:f2:38:9b:ad:98:bb:3f:17:a0:89:94:
22:de:4e:31:ee:ad:c7:74:19:cb:42:e7:3e:09:79:
47:f1:67:6b:d0:92:0e:fd:45:24:c5:9a:f6:1e:6a:
7c:b8:66:d3:43:48:1e:dd:5e:2e:e6:ee:14:63:b6:
30:7c:bd:0a:68:27:47:3d:6e:47:ef:12:72:66:36:
e4:96:d4:f1:1a:88:d2:0d:aa:76:4b:bf:d9:fb:b7:
6e:95:c2:26:5e:08:7d:44:0a:10:c8:5d:33:32:0d:
d3:dd:d3:37:52:e4:24:cc:f1:ac:33:0e:a0:63:d3:
41:07:fd:c7:aa:f1:1e:62:81:6a:31:63:23:a5:88:
39:8a:0a:7c:df:49:a3:47:f6:aa:70:37:8e:de:61:
3a:75:00:50:9e:64:e6:94:46:09:8f:c4:a0:14:9a:
f0:29:8b:08:c2:27:a7:9d:60:2f:25:23:8c:8c:63:
0f:d5:67:a9:ad:ec:6f:e1:c1:b7:af:88:96:b7:f8:
c2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:42:70:AE:23:00:B4:96:33:12:D1:C9:1D:33:85:08:52:B2:5B:9A
X509v3 Authority Key Identifier:
keyid:33:FB:DB:B2:0C:2D:97:07:3C:0D:E8:B7:CA:A7:5E:C1:EE:B1:91:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/oUJwriMAtJYzEtHJHTOFCFKyW5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.169.64.0/20
IPv6:
2a0a:b7c0::/32
Signature Algorithm: sha256WithRSAEncryption
7e:8e:16:46:ce:33:a5:74:89:61:ff:32:95:e5:c0:2d:6e:55:
3d:01:c1:53:b4:1a:66:bb:6d:db:6a:d4:16:f5:45:6b:b3:53:
3a:53:5f:c9:ee:50:62:bc:29:38:5e:2a:ea:b4:b5:55:ef:4b:
db:d0:0f:24:c5:1b:2c:b5:e3:f7:f7:b3:e5:f0:60:5d:d0:84:
9a:f8:64:bb:ff:93:56:62:9e:0d:35:af:45:5b:ff:cc:7a:56:
91:9b:07:72:5c:bc:6c:89:41:5b:0f:69:c8:e7:07:50:5d:81:
7c:d3:9e:e9:42:37:43:15:57:2a:99:dd:01:8a:ab:86:3f:b0:
01:ea:35:15:f5:55:39:6f:78:72:bc:c6:e8:8d:4c:da:df:be:
30:21:22:cb:9c:4f:cc:96:50:cf:88:bc:96:87:bc:ac:a5:50:
17:0b:3c:24:1e:04:10:14:36:02:d5:81:93:f6:38:c0:5a:4a:
0d:9e:84:6e:ac:94:dc:55:a4:f5:d0:b3:80:23:43:4a:1d:bd:
18:bd:56:f6:d9:85:a9:48:10:0c:cc:c1:5d:44:a9:58:62:78:
00:e0:52:a4:25:76:62:42:cc:92:80:27:58:da:89:6a:7a:fc:
a0:33:7d:66:07:4e:30:cd:c0:d2:42:5a:e9:5c:3f:3f:01:1a:
a2:1b:fd:ab
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzIAdMQMWEcfQaMnIxL0+onMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZmJkYmIyMGMyZDk3MDczYzBkZThiN2NhYTc1ZWMxZWVi
MTkxYjgwHhcNMjQwMTAyMDIzMDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTQyNzBhZTIzMDBiNDk2MzMxMmQxYzkxZDMzODUwODUyYjI1YjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsZIP8MCma1GUvmtiWjubKlrDfPK
xKiR7sb1Z99+bNEVOzRzVnvXgOdP1ETuZZfQXhXHB+kZ/+NMkgmP3ptF8jibrZi7
PxegiZQi3k4x7q3HdBnLQuc+CXlH8Wdr0JIO/UUkxZr2Hmp8uGbTQ0ge3V4u5u4U
Y7YwfL0KaCdHPW5H7xJyZjbkltTxGojSDap2S7/Z+7dulcImXgh9RAoQyF0zMg3T
3dM3UuQkzPGsMw6gY9NBB/3HqvEeYoFqMWMjpYg5igp830mjR/aqcDeO3mE6dQBQ
nmTmlEYJj8SgFJrwKYsIwiennWAvJSOMjGMP1Weprexv4cG3r4iWt/jCcQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKFCcK4jALSWMxLRyR0zhQhSsluaMB8GA1UdIwQY
MBaAFDP727IMLZcHPA3ot8qnXsHusZG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTV92YnNnd3Rsd2M4RGVpM3lxZGV3ZTZ4a2JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8zYTM2MmQtNDE5OC00YjA4LWJiMGEt
ZGJlNDFmYzgzOTllLzEvb1VKd3JpTUF0Sll6RXRISkhUT0ZDRkt5VzVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8zYTM2MmQtNDE5OC00YjA4LWJiMGEtZGJlNDFmYzgzOTll
LzEvTV92YnNnd3Rsd2M4RGVpM3lxZGV3ZTZ4a2JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQE2alAMA0E
AgACMAcDBQAqCrfAMA0GCSqGSIb3DQEBCwUAA4IBAQB+jhZGzjOldIlh/zKV5cAt
blU9AcFTtBpmu23batQW9UVrs1M6U1/J7lBivCk4XirqtLVV70vb0A8kxRssteP3
97Pl8GBd0ISa+GS7/5NWYp4NNa9FW//MelaRmwdyXLxsiUFbD2nI5wdQXYF8057p
QjdDFVcqmd0BiquGP7AB6jUV9VU5b3hyvMbojUza374wISLLnE/MllDPiLyWh7ys
pVAXCzwkHgQQFDYC1YGT9jjAWkoNnoRurJTcVaT10LOAI0NKHb0YvVb22YWpSBAM
zMFdRKlYYngA4FKkJXZiQsySgCdY2olqevygM31mB04wzcDSQlrpXD8/ARqiG/2r
-----END CERTIFICATE-----
Generated at Fri Jun 7 18:41:48 2024 by rpki-client on console-fra.rpki-client.org