Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/oWuAATVKlvlp-KPSl65na1x3ojM.roa
File: oWuAATVKlvlp-KPSl65na1x3ojM.roa (raw, json)
Hash identifier: tzyJ2ujSWiXOq6uYaWMeSfswlCWmClYhYSuDcQogXPo=
Subject key identifier: A1:6B:80:01:35:4A:96:F9:69:F8:A3:D2:97:AE:67:6B:5C:77:A2:33
Certificate issuer: /CN=39348867dcb2956aca65d08348e440d4727a3743
Certificate serial: 0191465E54BA97DEF57C8DB1623C64796C2F
Authority key identifier: 39:34:88:67:DC:B2:95:6A:CA:65:D0:83:48:E4:40:D4:72:7A:37:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/oWuAATVKlvlp-KPSl65na1x3ojM.roa
Signing time: Mon 12 Aug 2024 11:34:32 +0000
ROA not before: Mon 12 Aug 2024 11:34:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198600
IP address blocks: 91.237.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:46:5e:54:ba:97:de:f5:7c:8d:b1:62:3c:64:79:6c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39348867dcb2956aca65d08348e440d4727a3743
Validity
Not Before: Aug 12 11:34:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a16b8001354a96f969f8a3d297ae676b5c77a233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:f0:0e:46:63:2c:65:10:f6:f5:c6:e9:19:
8b:4a:e0:35:a0:af:b2:9b:ed:4c:7f:11:c5:66:8d:
18:6e:15:d0:a1:33:b4:84:4c:82:84:fb:ff:42:50:
b5:a7:96:3e:77:cf:55:e6:01:8a:ad:93:5d:82:bc:
48:93:4b:e6:93:f9:06:4b:93:62:8d:65:1f:06:c7:
0e:c5:7e:a2:81:a1:38:2b:95:44:ce:30:93:9a:dc:
d2:4a:4b:a9:24:ce:2b:b2:d7:08:8b:71:51:6b:67:
e6:e9:29:46:3c:17:2c:20:b7:a1:2b:31:b7:c2:7e:
c0:41:7e:ce:c9:ec:c7:80:ee:23:3e:0b:9c:4d:ec:
9d:b6:4a:44:1c:92:8a:e3:fd:41:1a:b4:de:85:6d:
b2:a7:48:8c:a6:1a:1f:16:f8:3b:87:ea:8f:be:01:
ea:84:1d:f2:d1:13:f7:70:01:ae:7c:1d:cd:d9:1b:
c1:c8:4a:1b:9e:f1:32:cb:22:87:52:89:82:c2:8b:
d6:c4:b2:ed:fb:eb:26:73:13:f3:a2:18:7c:0a:fa:
ac:fb:d8:4c:f2:59:54:8b:0c:89:cf:16:05:1b:6c:
ea:ac:e2:b4:d7:eb:55:fb:00:b6:bb:ba:9e:7b:d4:
4a:b6:70:c9:5c:a6:a8:93:ac:39:02:b6:e6:e5:58:
4f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6B:80:01:35:4A:96:F9:69:F8:A3:D2:97:AE:67:6B:5C:77:A2:33
X509v3 Authority Key Identifier:
keyid:39:34:88:67:DC:B2:95:6A:CA:65:D0:83:48:E4:40:D4:72:7A:37:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/oWuAATVKlvlp-KPSl65na1x3ojM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.64.0/24
Signature Algorithm: sha256WithRSAEncryption
22:12:eb:84:1b:3f:15:c3:ec:12:f9:5e:b4:5b:be:92:ff:44:
9f:d9:bd:54:47:82:80:81:6d:99:9f:f7:92:44:44:00:1b:50:
db:b7:f2:e9:86:f2:ef:a9:6a:2d:96:e5:cb:24:ea:fe:be:89:
f2:f4:9d:17:e9:fb:0e:9e:45:a6:07:61:a7:28:ab:d3:ef:11:
cd:9d:7e:c5:6d:93:61:1c:67:97:9c:53:7c:ae:08:c0:a7:d0:
1a:7b:d2:90:32:3f:ce:f6:f2:2e:f6:bf:e5:15:a0:45:5f:26:
49:77:15:6c:ad:2e:ec:47:e4:c3:df:49:d6:77:ff:a2:cc:9c:
b9:5d:8f:57:99:8b:c7:34:a8:ac:39:ff:86:25:bb:57:1a:cb:
af:5d:c0:0b:45:9a:b0:7d:a0:11:21:36:90:cc:15:e5:3c:3e:
33:59:0f:27:f4:cf:09:f0:de:7e:92:75:4c:bd:8c:fe:a1:6c:
ad:bf:ef:b5:64:47:56:4d:72:2f:87:3c:a0:cd:6a:82:1d:e3:
b8:77:f0:fb:16:55:46:20:ce:26:70:d5:df:3d:e0:19:bc:fb:
9d:0b:01:0a:4d:7f:4b:f3:20:71:64:5b:62:86:f5:d7:d4:1c:
c3:7d:3d:14:c7:07:fd:f9:dd:8d:09:87:65:07:c4:05:04:1c:
f7:e1:09:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZFGXlS6l971fI2xYjxkeWwvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MzQ4ODY3ZGNiMjk1NmFjYTY1ZDA4MzQ4ZTQ0MGQ0NzI3
YTM3NDMwHhcNMjQwODEyMTEzNDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTZiODAwMTM1NGE5NmY5NjlmOGEzZDI5N2FlNjc2YjVjNzdhMjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM3wDkZjLGUQ9vXG6RmLSuA1oK+y
m+1MfxHFZo0YbhXQoTO0hEyChPv/QlC1p5Y+d89V5gGKrZNdgrxIk0vmk/kGS5Ni
jWUfBscOxX6igaE4K5VEzjCTmtzSSkupJM4rstcIi3FRa2fm6SlGPBcsILehKzG3
wn7AQX7OyezHgO4jPgucTeydtkpEHJKK4/1BGrTehW2yp0iMphofFvg7h+qPvgHq
hB3y0RP3cAGufB3N2RvByEobnvEyyyKHUomCwovWxLLt++smcxPzohh8Cvqs+9hM
8llUiwyJzxYFG2zqrOK01+tV+wC2u7qee9RKtnDJXKaok6w5Arbm5VhP9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKFrgAE1Spb5afij0peuZ2tcd6IzMB8GA1UdIwQY
MBaAFDk0iGfcspVqymXQg0jkQNRyejdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1RTSVo5eXlsV3JLWmRDRFNPUkExSEo2TjBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xZGZmZTEtYzhmZi00NjZiLTlkYzIt
YmZjNmY0OGU5NmFiLzEvb1d1QUFUVktsdmxwLUtQU2w2NW5hMXgzb2pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8xZGZmZTEtYzhmZi00NjZiLTlkYzItYmZjNmY0OGU5NmFi
LzEvT1RTSVo5eXlsV3JLWmRDRFNPUkExSEo2TjBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+1AMA0G
CSqGSIb3DQEBCwUAA4IBAQAiEuuEGz8Vw+wS+V60W76S/0Sf2b1UR4KAgW2Zn/eS
REQAG1Dbt/LphvLvqWotluXLJOr+vony9J0X6fsOnkWmB2GnKKvT7xHNnX7FbZNh
HGeXnFN8rgjAp9Aae9KQMj/O9vIu9r/lFaBFXyZJdxVsrS7sR+TD30nWd/+izJy5
XY9XmYvHNKisOf+GJbtXGsuvXcALRZqwfaARITaQzBXlPD4zWQ8n9M8J8N5+knVM
vYz+oWytv++1ZEdWTXIvhzygzWqCHeO4d/D7FlVGIM4mcNXfPeAZvPudCwEKTX9L
8yBxZFtihvXX1BzDfT0Uxwf9+d2NCYdlB8QFBBz34Qk3
-----END CERTIFICATE-----
Generated at Mon Nov 25 07:43:19 2024 by rpki-client on console-fra.rpki-client.org