Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OGFS7j66GOLNA0COiaNgRezWsmk.roa
File: OGFS7j66GOLNA0COiaNgRezWsmk.roa (raw, json)
Hash identifier: tfAfbcyjzaDFSNbkVFnlqv7D4xd5mIIkq5KuALVW+Ro=
Subject key identifier: 38:61:52:EE:3E:BA:18:E2:CD:03:40:8E:89:A3:60:45:EC:D6:B2:69
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018CC56DF1DA27E20AC1BC18B4A65D158A36
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OGFS7j66GOLNA0COiaNgRezWsmk.roa
Signing time: Mon 01 Jan 2024 14:29:26 +0000
ROA not before: Mon 01 Jan 2024 14:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202880
IP address blocks: 91.107.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f1:da:27:e2:0a:c1:bc:18:b4:a6:5d:15:8a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 14:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=386152ee3eba18e2cd03408e89a36045ecd6b269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f5:0f:43:15:f9:22:58:cf:94:99:38:b6:2d:
72:3f:0a:68:fc:97:f3:1d:9b:90:6d:be:49:93:38:
fd:a6:02:ad:22:1b:5e:bd:c8:e9:05:3a:73:ae:3b:
36:da:53:21:1a:55:7f:d5:77:58:eb:22:01:c2:4f:
3b:26:20:2c:07:05:a2:33:a0:07:32:f9:52:e5:0a:
e2:ad:f8:af:65:ce:2c:45:93:45:81:bf:e3:31:c9:
7c:46:02:6c:3b:7e:73:d9:c0:97:14:d6:00:ad:95:
df:dc:ea:78:bc:dd:7e:5f:d6:90:cd:74:06:51:c2:
a6:90:91:e0:80:2f:74:d6:e0:b3:5c:ba:51:2d:06:
7e:b7:cc:04:f8:4d:d6:99:cf:62:51:e0:c8:e9:e0:
5c:84:f1:b1:55:23:bd:85:82:3b:94:c4:44:27:4e:
9a:bb:f4:73:50:1d:1f:51:64:37:3a:b5:e9:ba:53:
d0:22:72:de:cc:62:35:30:45:aa:88:b4:a7:c0:86:
5c:8b:d6:1b:5d:91:4e:b8:0a:a7:4e:01:45:80:17:
f8:9c:bb:90:17:c9:99:ec:60:2f:a1:34:db:2d:66:
63:72:9b:95:87:e4:19:d3:0c:13:aa:9a:d7:e8:41:
5b:f8:06:0d:49:77:6a:64:b1:27:de:3b:03:c0:63:
02:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:61:52:EE:3E:BA:18:E2:CD:03:40:8E:89:A3:60:45:EC:D6:B2:69
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OGFS7j66GOLNA0COiaNgRezWsmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.107.114.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e2:69:1e:b7:c7:44:88:b2:91:4f:9b:ed:e5:c9:66:00:ba:
7c:b8:6e:8b:41:31:29:79:a7:a5:09:44:a7:19:c8:c4:2b:89:
5b:b7:b3:c2:02:5e:f1:87:7a:dc:84:eb:10:d5:5a:aa:ec:71:
30:3e:55:91:c6:55:b1:61:d3:de:8c:17:99:bd:57:d3:94:ff:
5a:f4:43:33:90:8b:6b:3b:f9:db:a5:77:f2:0e:07:3e:b3:63:
26:d7:f9:2a:2b:3b:66:17:b1:c1:f9:87:34:58:53:96:d0:53:
41:e6:ed:91:68:c8:de:c9:36:00:43:00:ed:92:98:12:2c:31:
45:0f:90:20:70:6b:20:eb:80:26:17:67:62:ee:e1:31:8d:b4:
57:e7:a1:58:da:f8:dc:7a:67:cd:bc:e2:e5:97:99:6a:24:16:
fd:36:65:68:01:9a:7f:37:da:34:da:80:17:42:2e:f1:f5:5e:
52:a4:c9:16:d4:49:ab:92:fe:40:77:7a:f6:7e:b3:a0:7b:b7:
9c:4e:c6:ab:47:55:0b:6e:01:f7:57:d4:13:bd:a2:2e:8e:9a:
67:b2:89:6b:fc:1e:e4:56:06:cb:c0:a7:ac:ea:4f:f8:30:9c:
bb:68:ea:50:d0:d4:22:d5:5e:09:a5:b0:ba:7b:81:d1:fc:d2:
86:10:46:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbfHaJ+IKwbwYtKZdFYo2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjQwMTAxMTQyOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODYxNTJlZTNlYmExOGUyY2QwMzQwOGU4OWEzNjA0NWVjZDZiMjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/UPQxX5IljPlJk4ti1yPwpo/Jfz
HZuQbb5Jkzj9pgKtIhtevcjpBTpzrjs22lMhGlV/1XdY6yIBwk87JiAsBwWiM6AH
MvlS5QrirfivZc4sRZNFgb/jMcl8RgJsO35z2cCXFNYArZXf3Op4vN1+X9aQzXQG
UcKmkJHggC901uCzXLpRLQZ+t8wE+E3Wmc9iUeDI6eBchPGxVSO9hYI7lMREJ06a
u/RzUB0fUWQ3OrXpulPQInLezGI1MEWqiLSnwIZci9YbXZFOuAqnTgFFgBf4nLuQ
F8mZ7GAvoTTbLWZjcpuVh+QZ0wwTqprX6EFb+AYNSXdqZLEn3jsDwGMCZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDhhUu4+uhjizQNAjomjYEXs1rJpMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvT0dGUzdqNjZHT0xOQTBDT2lhTmdSZXpXc21rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2tyMA0G
CSqGSIb3DQEBCwUAA4IBAQA14mket8dEiLKRT5vt5clmALp8uG6LQTEpeaelCUSn
GcjEK4lbt7PCAl7xh3rchOsQ1Vqq7HEwPlWRxlWxYdPejBeZvVfTlP9a9EMzkItr
O/nbpXfyDgc+s2Mm1/kqKztmF7HB+Yc0WFOW0FNB5u2RaMjeyTYAQwDtkpgSLDFF
D5AgcGsg64AmF2di7uExjbRX56FY2vjcemfNvOLll5lqJBb9NmVoAZp/N9o02oAX
Qi7x9V5SpMkW1Emrkv5Ad3r2frOge7ecTsarR1ULbgH3V9QTvaIujppnsolr/B7k
VgbLwKes6k/4MJy7aOpQ0NQi1V4JpbC6e4HR/NKGEEaw
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:51:57 2024 by rpki-client on console-ams.rpki-client.org