Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/OE-QvMqfDtOQdJSHeNiyZNJTG3Y.roa
File: OE-QvMqfDtOQdJSHeNiyZNJTG3Y.roa (raw, json)
Hash identifier: 9xkVuhOTECdI/SfwwadxNCyZ5d/tJeS0p+MthGXY/+8=
Subject key identifier: 38:4F:90:BC:CA:9F:0E:D3:90:74:94:87:78:D8:B2:64:D2:53:1B:76
Certificate issuer: /CN=65ab485af923d1b46c5a321fc7a3f856c04fb6fc
Certificate serial: 018F8F858A09F5685348FE618B9641E14643
Authority key identifier: 65:AB:48:5A:F9:23:D1:B4:6C:5A:32:1F:C7:A3:F8:56:C0:4F:B6:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/OE-QvMqfDtOQdJSHeNiyZNJTG3Y.roa
Signing time: Sun 19 May 2024 06:24:04 +0000
ROA not before: Sun 19 May 2024 06:24:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61081
IP address blocks: 5.133.80.0/22 maxlen: 24
185.24.72.0/22 maxlen: 24
2a04:2ac0::/29 maxlen: 64
2a09:6a00::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8f:85:8a:09:f5:68:53:48:fe:61:8b:96:41:e1:46:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ab485af923d1b46c5a321fc7a3f856c04fb6fc
Validity
Not Before: May 19 06:24:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=384f90bcca9f0ed39074948778d8b264d2531b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9b:af:77:43:ca:b4:32:93:97:74:0f:63:3a:
65:8d:d1:31:3e:0e:f6:74:a9:5e:18:df:a0:f5:4a:
84:ab:d8:78:20:96:79:01:16:e9:0f:3f:df:2c:90:
b4:d9:1f:e2:c2:3e:64:e2:48:97:0e:e9:f5:47:15:
80:02:c4:8b:55:b6:d4:50:a7:7c:0a:2c:b2:dc:3d:
82:33:89:89:14:77:dc:67:d7:42:d8:78:07:49:0b:
cd:50:c2:f5:d2:08:75:99:f3:b9:75:70:39:4f:e0:
18:a7:e7:28:7e:7a:ad:97:55:2c:29:77:fb:37:15:
e3:15:c5:b0:f4:c5:82:97:d1:d4:74:2a:53:de:da:
22:3b:9c:1c:e5:74:69:86:e0:ed:fd:2d:27:3d:4a:
b5:07:79:e4:02:30:48:d3:4c:6b:65:35:5c:8c:17:
70:10:06:38:13:2a:d4:40:7c:a9:b1:d2:d0:62:ee:
51:b0:93:44:63:5a:ae:85:2a:43:30:ce:ec:5d:a9:
79:51:2c:cf:f6:e0:aa:e8:9d:56:63:af:8a:e2:be:
ce:cd:db:2f:7c:50:ad:2c:f5:ef:06:47:38:85:9d:
11:31:9c:df:45:0d:2b:2c:cf:12:24:01:32:41:4b:
51:2d:fa:24:39:66:22:64:f1:14:c3:da:5b:53:ac:
30:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4F:90:BC:CA:9F:0E:D3:90:74:94:87:78:D8:B2:64:D2:53:1B:76
X509v3 Authority Key Identifier:
keyid:65:AB:48:5A:F9:23:D1:B4:6C:5A:32:1F:C7:A3:F8:56:C0:4F:B6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/OE-QvMqfDtOQdJSHeNiyZNJTG3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.80.0/22
185.24.72.0/22
IPv6:
2a04:2ac0::/29
2a09:6a00::/29
Signature Algorithm: sha256WithRSAEncryption
7f:bd:35:cb:a6:86:db:82:f3:e7:c9:2d:8e:29:dc:a1:c0:4a:
1a:af:2d:71:32:f8:7c:89:30:81:0a:4c:5a:88:8f:d0:59:78:
79:3a:5a:8f:72:2e:95:d2:18:1e:c0:78:bb:06:c2:9d:5b:e3:
e9:0a:50:a9:cb:83:92:43:03:46:5c:72:ba:b4:8a:a3:00:a4:
77:b0:d0:02:db:a1:06:04:d3:8e:5c:37:f5:f7:37:61:ca:5c:
70:6c:63:58:44:4c:7c:90:7a:b6:ae:bf:2f:c6:dc:cf:aa:63:
01:09:e0:b9:46:b8:82:ba:12:76:fa:f1:71:4b:3c:ef:8b:ec:
3f:cd:50:7b:3b:a8:6f:63:e9:d5:1e:de:01:e8:d3:b5:2e:ce:
26:e9:19:be:50:77:50:db:91:27:fd:8c:6b:43:d5:1c:85:b2:
35:6a:d7:51:6b:97:71:7c:88:3b:a8:b6:e9:70:d2:2f:38:98:
10:67:ba:40:1b:ba:bf:e4:57:0c:37:a1:42:d0:8d:32:4f:d0:
c9:18:b1:cd:02:e4:ab:92:f0:d3:7e:65:21:ca:41:11:cb:b9:
72:f4:83:1c:f2:80:23:bf:73:c4:fc:8c:9e:6c:1d:d0:a7:81:
38:34:f3:1c:6f:47:1f:4c:ba:e0:68:d9:34:09:21:a0:a9:6b:
72:a3:79:6e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAY+PhYoJ9WhTSP5hi5ZB4UZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YWI0ODVhZjkyM2QxYjQ2YzVhMzIxZmM3YTNmODU2YzA0
ZmI2ZmMwHhcNMjQwNTE5MDYyNDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODRmOTBiY2NhOWYwZWQzOTA3NDk0ODc3OGQ4YjI2NGQyNTMxYjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpuvd0PKtDKTl3QPYzpljdExPg72
dKleGN+g9UqEq9h4IJZ5ARbpDz/fLJC02R/iwj5k4kiXDun1RxWAAsSLVbbUUKd8
Ciyy3D2CM4mJFHfcZ9dC2HgHSQvNUML10gh1mfO5dXA5T+AYp+cofnqtl1UsKXf7
NxXjFcWw9MWCl9HUdCpT3toiO5wc5XRphuDt/S0nPUq1B3nkAjBI00xrZTVcjBdw
EAY4EyrUQHypsdLQYu5RsJNEY1quhSpDMM7sXal5USzP9uCq6J1WY6+K4r7Ozdsv
fFCtLPXvBkc4hZ0RMZzfRQ0rLM8SJAEyQUtRLfokOWYiZPEUw9pbU6wwPwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDhPkLzKnw7TkHSUh3jYsmTSUxt2MB8GA1UdIwQY
MBaAFGWrSFr5I9G0bFoyH8ej+FbAT7b8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmF0SVd2a2owYlJzV2pJZng2UDRWc0JQdHZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8xNjRkOGQtNDFhYy00NTIyLWJiMjUt
ODk4NjM0OTQyMjg1LzEvT0UtUXZNcWZEdE9RZEpTSGVOaXlaTkpURzNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8xNjRkOGQtNDFhYy00NTIyLWJiMjUtODk4NjM0OTQyMjg1
LzEvWmF0SVd2a2owYlJzV2pJZng2UDRWc0JQdHZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCBYVQAwQC
uRhIMBQEAgACMA4DBQMqBCrAAwUDKglqADANBgkqhkiG9w0BAQsFAAOCAQEAf701
y6aG24Lz58ktjincocBKGq8tcTL4fIkwgQpMWoiP0Fl4eTpaj3IuldIYHsB4uwbC
nVvj6QpQqcuDkkMDRlxyurSKowCkd7DQAtuhBgTTjlw39fc3YcpccGxjWERMfJB6
tq6/L8bcz6pjAQnguUa4groSdvrxcUs874vsP81Qezuob2Pp1R7eAejTtS7OJukZ
vlB3UNuRJ/2Ma0PVHIWyNWrXUWuXcXyIO6i26XDSLziYEGe6QBu6v+RXDDehQtCN
Mk/QyRixzQLkq5Lw035lIcpBEcu5cvSDHPKAI79zxPyMnmwd0KeBODTzHG9HH0y6
4GjZNAkhoKlrcqN5bg==
-----END CERTIFICATE-----
Generated at Thu Jun 27 16:41:02 2024 by rpki-client on console-fra.rpki-client.org