Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/ovr3-dtl3KZgsfeNRMOpwgHqhZc.roa
File: ovr3-dtl3KZgsfeNRMOpwgHqhZc.roa (raw, json)
Hash identifier: XYHMnVprLOHDah51Iv+N/vpOX0JVo7+9swrBoe01tw0=
Subject key identifier: A2:FA:F7:F9:DB:65:DC:A6:60:B1:F7:8D:44:C3:A9:C2:01:EA:85:97
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 018EF7CC9EF0402C23026A57DD06FD24BD1D
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/ovr3-dtl3KZgsfeNRMOpwgHqhZc.roa
Signing time: Fri 19 Apr 2024 19:19:26 +0000
ROA not before: Fri 19 Apr 2024 19:19:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211726
IP address blocks: 5.59.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f7:cc:9e:f0:40:2c:23:02:6a:57:dd:06:fd:24:bd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Apr 19 19:19:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2faf7f9db65dca660b1f78d44c3a9c201ea8597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:d4:c2:34:c4:8c:8b:db:85:ed:b4:a6:f8:
db:e4:e5:9b:3a:95:bc:3c:bd:d2:ee:81:42:05:08:
8d:22:51:9b:4f:45:15:d8:d9:40:39:23:62:6e:f7:
29:cb:c9:4b:4f:51:48:0d:93:81:15:6a:9c:c2:b5:
d6:19:85:c1:d5:27:f0:c4:05:f3:f8:a2:c9:ad:07:
a2:3f:6b:d4:b8:b3:e2:cb:93:75:d0:fe:ff:8b:03:
1b:2c:37:b4:14:80:56:be:4b:5c:96:b5:e3:12:c1:
e5:98:17:06:fe:51:d6:49:2e:b7:e6:25:cd:26:a7:
8d:d3:7a:c9:d4:50:e4:e1:f4:23:de:1b:60:13:9f:
d3:63:61:f1:dc:9a:0b:44:59:b5:7e:93:60:5e:de:
1e:f7:83:cb:8d:05:a9:62:f6:12:bb:c2:71:11:7e:
75:4c:b8:f5:e2:2d:1a:dd:3b:c4:04:3d:58:64:cd:
f1:70:4e:30:4c:7d:e4:5e:b6:74:d2:0c:e5:4c:f0:
e7:a4:2a:4e:b4:b7:f3:09:73:c7:5b:d9:27:da:63:
89:7a:3f:7d:c5:8f:09:5e:7a:5e:26:6b:d3:a3:24:
e1:22:4b:cf:2d:bc:35:95:fc:08:93:93:4a:59:2e:
56:a6:91:f1:a2:ce:c2:71:b7:1f:e2:fc:d5:60:12:
cd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FA:F7:F9:DB:65:DC:A6:60:B1:F7:8D:44:C3:A9:C2:01:EA:85:97
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/ovr3-dtl3KZgsfeNRMOpwgHqhZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.180.0/23
Signature Algorithm: sha256WithRSAEncryption
74:81:68:8f:05:a9:44:a3:d9:73:81:96:f6:07:27:bd:a1:0c:
14:84:ee:c0:6d:dd:7f:fb:4a:93:74:aa:b2:99:48:51:15:32:
a0:43:f4:52:73:80:e4:43:7c:0e:a9:24:60:00:d8:8e:ad:14:
be:ec:58:a9:f3:d8:a1:e2:5a:68:4a:9a:8f:96:6d:a2:ef:27:
20:b6:a1:4a:41:c8:70:be:c2:7b:2b:10:03:f4:0a:0a:40:2a:
01:ea:7f:84:62:c8:1d:28:ea:a1:fc:5a:77:fa:4b:41:4a:72:
3f:38:22:f9:41:16:e6:9e:6b:4f:3a:fb:4e:0f:11:69:6e:e3:
4a:34:14:7f:56:37:9e:b6:88:e0:67:a4:13:d1:93:02:ab:0e:
f6:d7:57:87:bb:de:8a:b0:aa:34:34:bc:b0:f4:d5:d7:c2:a2:
1d:0f:9b:6b:1f:fa:94:df:3f:37:77:0f:2c:11:1c:f8:d5:78:
cd:84:86:ec:ee:06:ac:f0:c0:5b:91:ae:22:9d:ca:3e:8c:64:
43:d2:03:89:2e:59:df:6f:04:e2:dd:bd:12:bd:72:d4:d5:ed:
78:2c:21:f6:e0:17:c9:87:e0:f1:e7:13:d7:b9:32:82:db:40:
d4:9f:f6:1c:72:99:13:5f:39:45:a5:c8:49:f2:69:ab:87:0b:
f4:c0:a2:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY73zJ7wQCwjAmpX3Qb9JL0dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDgxMTE5YWZlMWJmZjIyOWZhY2Q0ZWY5YzhjNjFiMGZh
YmVhZjIwHhcNMjQwNDE5MTkxOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmZhZjdmOWRiNjVkY2E2NjBiMWY3OGQ0NGMzYTljMjAxZWE4NTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLLUwjTEjIvbhe20pvjb5OWbOpW8
PL3S7oFCBQiNIlGbT0UV2NlAOSNibvcpy8lLT1FIDZOBFWqcwrXWGYXB1SfwxAXz
+KLJrQeiP2vUuLPiy5N10P7/iwMbLDe0FIBWvktclrXjEsHlmBcG/lHWSS635iXN
JqeN03rJ1FDk4fQj3htgE5/TY2Hx3JoLRFm1fpNgXt4e94PLjQWpYvYSu8JxEX51
TLj14i0a3TvEBD1YZM3xcE4wTH3kXrZ00gzlTPDnpCpOtLfzCXPHW9kn2mOJej99
xY8JXnpeJmvToyThIkvPLbw1lfwIk5NKWS5WppHxos7Ccbcf4vzVYBLNNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKL69/nbZdymYLH3jUTDqcIB6oWXMB8GA1UdIwQY
MBaAFLlIERmv4b/yKfrNTvnIxhsPq+ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAt
OWI5YmNlMTVlMGM2LzEvb3ZyMy1kdGwzS1pnc2ZlTlJNT3B3Z0hxaFpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAtOWI5YmNlMTVlMGM2
LzEvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBTu0MA0G
CSqGSIb3DQEBCwUAA4IBAQB0gWiPBalEo9lzgZb2Bye9oQwUhO7Abd1/+0qTdKqy
mUhRFTKgQ/RSc4DkQ3wOqSRgANiOrRS+7Fip89ih4lpoSpqPlm2i7ycgtqFKQchw
vsJ7KxAD9AoKQCoB6n+EYsgdKOqh/Fp3+ktBSnI/OCL5QRbmnmtPOvtODxFpbuNK
NBR/VjeetojgZ6QT0ZMCqw7211eHu96KsKo0NLyw9NXXwqIdD5trH/qU3z83dw8s
ERz41XjNhIbs7gas8MBbka4inco+jGRD0gOJLlnfbwTi3b0SvXLU1e14LCH24BfJ
h+Dx5xPXuTKC20DUn/YccpkTXzlFpchJ8mmrhwv0wKJZ
-----END CERTIFICATE-----
Generated at Sat Sep 28 14:42:00 2024 by rpki-client on console-ams.rpki-client.org