Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/OjB7Q-xPnOZs9b4FVVhdCusFQmM.roa
File: OjB7Q-xPnOZs9b4FVVhdCusFQmM.roa (raw, json)
Hash identifier: yE9yj0AUxUPqHkaODEow/B9v7UKsVQJAb4bwFpwm6U4=
Subject key identifier: 3A:30:7B:43:EC:4F:9C:E6:6C:F5:BE:05:55:58:5D:0A:EB:05:42:63
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 018CC56F01861980BC373FA7D2A5E7E0D4A6
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/OjB7Q-xPnOZs9b4FVVhdCusFQmM.roa
Signing time: Mon 01 Jan 2024 14:30:35 +0000
ROA not before: Mon 01 Jan 2024 14:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44718
IP address blocks: 89.252.245.0/24 maxlen: 24
89.252.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:01:86:19:80:bc:37:3f:a7:d2:a5:e7:e0:d4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 14:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a307b43ec4f9ce66cf5be0555585d0aeb054263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b2:41:5c:d7:5e:d5:24:89:3c:af:65:6d:7a:
f9:2a:1c:0a:53:71:ae:b0:61:b2:62:24:22:8d:24:
1b:bc:72:cf:b0:e7:9f:b0:82:68:16:c2:4d:19:7b:
a2:63:1b:ef:07:78:39:1c:0a:8d:b8:3d:02:6d:15:
70:63:83:8a:cf:02:b1:99:2a:75:b6:30:1d:00:8e:
5c:18:7e:ff:7d:0f:3c:b1:50:f3:5e:89:89:e3:45:
9e:34:27:7f:e6:24:f8:bc:78:7f:28:13:f5:c3:af:
26:ed:8d:fa:ad:56:f4:c4:b7:a9:de:b0:40:12:17:
ec:ea:88:1c:51:eb:bf:7d:c1:15:69:fc:70:cc:6a:
d5:d5:70:f3:53:5c:bf:53:03:fd:04:13:9e:51:9f:
48:3d:46:51:fa:6c:b7:a8:81:39:cf:c7:93:e1:db:
23:a7:d1:48:5c:bd:63:06:11:0c:fe:7a:75:f2:6c:
48:d8:b7:3d:00:14:ce:da:28:e4:3b:52:b5:a9:ed:
ad:7c:bb:d5:f0:1c:2c:c2:76:5f:15:b4:85:07:e8:
76:a4:6a:de:a7:23:4c:a4:fe:cb:61:8d:4e:61:ff:
2b:1c:9e:be:c2:5b:2f:71:2b:92:f5:d1:09:00:ea:
16:45:17:5c:57:09:82:9c:9f:86:df:b0:23:0b:07:
4d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:30:7B:43:EC:4F:9C:E6:6C:F5:BE:05:55:58:5D:0A:EB:05:42:63
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/OjB7Q-xPnOZs9b4FVVhdCusFQmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.252.244.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:c2:b3:39:3c:3f:26:a2:ad:c2:88:10:80:66:57:cc:c3:ed:
6a:e3:b5:42:db:87:da:a3:0f:f5:f2:33:3f:2f:8e:3f:93:c7:
46:1d:b0:2f:d3:10:fd:50:45:8b:df:5d:06:bd:e2:cd:2d:13:
68:73:df:31:1f:d2:1e:6d:1d:49:b6:c4:cb:3b:eb:2d:e9:84:
c3:26:bc:32:39:5b:e7:0c:dc:92:2c:cd:5c:03:59:fb:c5:ff:
11:5b:c2:7e:32:79:cf:fc:f7:a9:3b:35:a4:1d:50:68:e5:36:
6a:e2:10:14:21:cd:a3:d3:2b:aa:d6:e7:57:81:21:06:ff:b9:
a4:bb:d5:ff:77:3b:c4:63:2c:ce:83:f1:ad:2b:ae:07:2f:fe:
fc:39:ba:30:69:20:db:51:de:81:60:ed:cc:6e:04:45:46:af:
a6:96:71:22:4c:d4:fd:b4:a7:3b:e6:72:e0:db:31:03:88:96:
1c:df:0d:1a:56:6a:ec:65:8f:27:f4:97:9f:c4:f1:fa:5b:b7:
3a:2e:30:a0:2a:e8:18:0f:7b:07:07:e8:6e:19:3c:e4:9d:52:
eb:dc:38:7d:2e:4f:71:c3:3e:99:cc:91:bb:ec:18:45:20:44:
72:ba:0c:d2:84:e5:7b:72:b6:8d:da:9d:d4:e1:44:0b:fa:98:
70:85:37:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbwGGGYC8Nz+n0qXn4NSmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj
M2YwMGEwHhcNMjQwMTAxMTQzMDM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTMwN2I0M2VjNGY5Y2U2NmNmNWJlMDU1NTU4NWQwYWViMDU0MjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrJBXNde1SSJPK9lbXr5KhwKU3Gu
sGGyYiQijSQbvHLPsOefsIJoFsJNGXuiYxvvB3g5HAqNuD0CbRVwY4OKzwKxmSp1
tjAdAI5cGH7/fQ88sVDzXomJ40WeNCd/5iT4vHh/KBP1w68m7Y36rVb0xLep3rBA
Ehfs6ogcUeu/fcEVafxwzGrV1XDzU1y/UwP9BBOeUZ9IPUZR+my3qIE5z8eT4dsj
p9FIXL1jBhEM/np18mxI2Lc9ABTO2ijkO1K1qe2tfLvV8BwswnZfFbSFB+h2pGre
pyNMpP7LYY1OYf8rHJ6+wlsvcSuS9dEJAOoWRRdcVwmCnJ+G37AjCwdNOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDowe0PsT5zmbPW+BVVYXQrrBUJjMB8GA1UdIwQY
MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt
YjI3ZDZlMjc4ZTE4LzEvT2pCN1EteFBuT1pzOWI0RlZWaGRDdXNGUW1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4
LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWfz0MA0G
CSqGSIb3DQEBCwUAA4IBAQC2wrM5PD8moq3CiBCAZlfMw+1q47VC24faow/18jM/
L44/k8dGHbAv0xD9UEWL310GveLNLRNoc98xH9IebR1JtsTLO+st6YTDJrwyOVvn
DNySLM1cA1n7xf8RW8J+MnnP/PepOzWkHVBo5TZq4hAUIc2j0yuq1udXgSEG/7mk
u9X/dzvEYyzOg/GtK64HL/78ObowaSDbUd6BYO3MbgRFRq+mlnEiTNT9tKc75nLg
2zEDiJYc3w0aVmrsZY8n9JefxPH6W7c6LjCgKugYD3sHB+huGTzknVLr3Dh9Lk9x
wz6ZzJG77BhFIERyugzShOV7craN2p3U4UQL+phwhTcS
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:53:09 2024 by rpki-client on console-ams.rpki-client.org