Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ovttj72epzHqozZxZjXGefw_tc0.roa
File: ovttj72epzHqozZxZjXGefw_tc0.roa (raw, json)
Hash identifier: FL+6vokNsocZms+tT5Krtt8Z5JBQ53IMI55fqnUQ0oo=
Subject key identifier: A2:FB:6D:8F:BD:9E:A7:31:EA:A3:36:71:66:35:C6:79:FC:3F:B5:CD
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DFA8D608A2FE9B50F78FE34FBB5E10
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ovttj72epzHqozZxZjXGefw_tc0.roa
Signing time: Tue 02 Jan 2024 06:32:30 +0000
ROA not before: Tue 02 Jan 2024 06:32:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204173
IP address blocks: 185.106.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a8:d6:08:a2:fe:9b:50:f7:8f:e3:4f:bb:5e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2fb6d8fbd9ea731eaa336716635c679fc3fb5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3d:39:b6:b5:76:2d:02:dd:4f:13:f2:aa:6e:
14:cd:62:75:cc:43:4e:86:31:83:0a:0a:43:c7:17:
93:e0:5c:c9:0b:a7:30:f3:69:4e:22:fe:f9:85:9e:
c1:75:a3:ff:8c:2c:2c:c9:77:8a:62:e9:b1:17:4a:
2a:8b:16:94:01:26:00:f7:50:8c:a4:3a:40:eb:da:
9b:49:32:d2:5a:9f:2c:ff:39:d0:db:fb:97:61:8e:
56:02:99:22:9e:80:18:60:16:aa:2c:af:eb:17:86:
17:9c:4d:d8:86:01:06:4a:91:4f:d1:ba:e0:62:3a:
77:73:fa:ae:56:db:f0:56:85:4c:5d:a6:db:b0:cf:
f4:bb:61:81:82:7e:b9:5a:10:39:50:aa:f4:9e:d1:
c5:fd:cf:26:55:c7:bd:70:af:64:c5:fa:63:82:d9:
4a:d1:db:01:f1:ab:20:63:41:9b:b2:ae:0b:a4:2e:
b2:36:82:0f:bb:c4:5a:c5:f1:4b:2c:3d:81:ee:5b:
59:de:dc:84:a4:6b:3b:b1:63:36:59:05:39:27:2c:
19:8c:e3:34:c0:ef:34:0c:ec:64:2e:08:22:9c:b8:
20:ae:8f:f2:65:1f:df:b7:08:9f:87:d8:4d:cc:65:
e2:9f:eb:87:4e:76:2e:b7:fd:a2:02:48:0e:50:ac:
84:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FB:6D:8F:BD:9E:A7:31:EA:A3:36:71:66:35:C6:79:FC:3F:B5:CD
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ovttj72epzHqozZxZjXGefw_tc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.106.0/24
Signature Algorithm: sha256WithRSAEncryption
06:90:4a:c6:a0:a3:d7:bd:68:71:b0:f0:cd:5b:6a:71:18:34:
a1:4b:65:8c:39:df:35:ae:22:6a:66:1b:67:dc:ab:bb:57:6b:
22:0d:45:1d:84:2f:69:1e:eb:23:60:91:90:05:1d:76:64:58:
18:f9:f4:79:79:e2:92:18:ba:e1:c0:87:99:85:56:21:36:e1:
b9:92:8c:5b:ef:61:0c:9f:9f:f0:81:d8:dd:10:23:ef:7d:21:
93:a3:4f:7c:3c:63:74:b9:d0:5b:5b:f3:c4:cf:df:2c:ec:2b:
d0:d6:9e:9d:96:77:08:a8:0a:d1:f9:ef:c6:62:7d:bb:7a:d8:
30:1b:56:3a:27:3b:6e:40:a5:ce:b9:4e:19:cc:f9:87:3a:87:
5b:05:a9:71:de:fd:8a:3e:e3:8b:ff:78:5f:70:2c:ec:f0:f4:
24:ab:19:d0:d5:b2:8b:b6:39:bb:ce:bb:63:ec:b5:b0:d7:06:
86:9b:a1:f7:51:7d:c1:c1:50:93:9b:25:28:b6:39:86:7d:1e:
c8:6b:e1:ca:48:3d:61:aa:0c:f2:d9:ac:ad:5c:a9:79:fb:39:
93:1f:36:cf:1e:b2:32:ce:9c:35:a2:33:e1:74:47:f1:1b:61:
da:96:59:a8:f7:14:b9:ac:26:69:3d:8f:4e:9a:a5:8d:c5:11:
9c:65:e4:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI36jWCKL+m1D3j+NPu14QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjQwMTAyMDYzMjMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmZiNmQ4ZmJkOWVhNzMxZWFhMzM2NzE2NjM1YzY3OWZjM2ZiNWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz05trV2LQLdTxPyqm4UzWJ1zENO
hjGDCgpDxxeT4FzJC6cw82lOIv75hZ7BdaP/jCwsyXeKYumxF0oqixaUASYA91CM
pDpA69qbSTLSWp8s/znQ2/uXYY5WApkinoAYYBaqLK/rF4YXnE3YhgEGSpFP0brg
Yjp3c/quVtvwVoVMXabbsM/0u2GBgn65WhA5UKr0ntHF/c8mVce9cK9kxfpjgtlK
0dsB8asgY0Gbsq4LpC6yNoIPu8RaxfFLLD2B7ltZ3tyEpGs7sWM2WQU5JywZjOM0
wO80DOxkLgginLggro/yZR/ftwifh9hNzGXin+uHTnYut/2iAkgOUKyEcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKL7bY+9nqcx6qM2cWY1xnn8P7XNMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvb3Z0dGo3MmVwekhxb3paeFpqWEdlZndfdGMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWpqMA0G
CSqGSIb3DQEBCwUAA4IBAQAGkErGoKPXvWhxsPDNW2pxGDShS2WMOd81riJqZhtn
3Ku7V2siDUUdhC9pHusjYJGQBR12ZFgY+fR5eeKSGLrhwIeZhVYhNuG5koxb72EM
n5/wgdjdECPvfSGTo098PGN0udBbW/PEz98s7CvQ1p6dlncIqArR+e/GYn27etgw
G1Y6JztuQKXOuU4ZzPmHOodbBalx3v2KPuOL/3hfcCzs8PQkqxnQ1bKLtjm7zrtj
7LWw1waGm6H3UX3BwVCTmyUotjmGfR7Ia+HKSD1hqgzy2aytXKl5+zmTHzbPHrIy
zpw1ojPhdEfxG2Hallmo9xS5rCZpPY9OmqWNxRGcZeS3
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:29:38 2024 by rpki-client on console-fra.rpki-client.org