Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/oVsGB11i7E_XEbcq_GdyeItB8Po.roa
File: oVsGB11i7E_XEbcq_GdyeItB8Po.roa (raw, json)
Hash identifier: e8eHJgloh3ohEJF5z0Oigw3wG9gBfwv27MUuSjhWh0A=
Subject key identifier: A1:5B:06:07:5D:62:EC:4F:D7:11:B7:2A:FC:67:72:78:8B:41:F0:FA
Certificate issuer: /CN=fc4b8573ca0ebb478e008f70afa08ae58b7869a5
Certificate serial: 018CC80113C219FBAC14D41C252228EF8C18
Authority key identifier: FC:4B:85:73:CA:0E:BB:47:8E:00:8F:70:AF:A0:8A:E5:8B:78:69:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/oVsGB11i7E_XEbcq_GdyeItB8Po.roa
Signing time: Tue 02 Jan 2024 02:29:22 +0000
ROA not before: Tue 02 Jan 2024 02:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8560
IP address blocks: 194.156.85.0/24 maxlen: 24
194.156.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:13:c2:19:fb:ac:14:d4:1c:25:22:28:ef:8c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4b8573ca0ebb478e008f70afa08ae58b7869a5
Validity
Not Before: Jan 2 02:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a15b06075d62ec4fd711b72afc6772788b41f0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ab:9c:c8:d3:dd:71:0f:27:ac:46:42:a6:9f:
8f:66:1c:10:d3:61:6e:b3:aa:6c:11:0e:69:2f:7e:
59:ea:a5:e2:c8:9b:3e:fc:a0:f1:5e:25:3a:41:7e:
88:5a:60:37:be:30:9e:74:9c:88:58:8c:fc:72:83:
d9:51:c2:88:22:13:46:41:f4:23:35:a1:a5:e9:f8:
b0:b9:87:b0:cb:15:a9:ec:25:7a:fe:25:5c:78:3b:
7c:8c:e9:2d:24:10:3d:16:bf:0e:b9:0a:69:4f:c4:
1a:06:71:3c:00:25:68:45:41:6f:d5:6c:1a:41:dd:
6f:53:30:67:c5:f8:c0:29:73:2e:0a:e7:47:42:eb:
85:88:e7:f2:e2:c7:56:71:f9:9b:99:df:29:ae:7d:
d4:cb:27:35:0c:6a:f7:7f:2f:c4:0c:f5:42:ef:f5:
84:00:8b:90:de:f9:ea:f9:65:ae:0e:45:86:3c:73:
a6:24:d7:0f:98:7d:a8:81:5e:ab:2b:86:33:d0:d8:
16:9e:98:c0:3c:92:55:c2:7e:15:96:0d:6c:20:64:
80:b1:0e:3f:ff:d2:9c:e3:c2:f6:99:53:14:1a:49:
45:e5:ad:95:75:7c:54:9e:46:3f:6b:00:85:79:2a:
d1:f0:1e:89:98:ff:66:7a:41:9c:4e:3c:c7:b0:36:
5a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5B:06:07:5D:62:EC:4F:D7:11:B7:2A:FC:67:72:78:8B:41:F0:FA
X509v3 Authority Key Identifier:
keyid:FC:4B:85:73:CA:0E:BB:47:8E:00:8F:70:AF:A0:8A:E5:8B:78:69:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/oVsGB11i7E_XEbcq_GdyeItB8Po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.84.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:31:bd:4a:74:cd:ab:2b:65:39:f2:a2:b2:02:c0:3b:4f:c5:
fa:ed:10:b1:91:23:25:ed:ea:d5:ad:46:b7:23:1f:21:39:ef:
58:2c:85:d2:cc:5f:41:1a:7c:eb:13:11:be:c9:4f:b1:07:f6:
87:98:87:a9:f9:33:ef:25:db:3b:c2:f8:39:07:11:5a:c3:57:
91:b5:d9:fd:bf:a9:9f:ee:5b:c9:0f:69:d2:34:a0:53:4d:8e:
92:b1:70:0e:c5:b5:ec:05:fe:f9:96:e3:7a:62:ac:eb:10:e9:
ce:71:7c:87:ef:d9:0a:aa:44:21:60:2d:9c:c9:f2:d2:ca:2e:
de:87:03:3c:72:6c:57:af:94:11:58:5d:cb:5c:60:86:80:66:
c1:81:2e:36:48:d4:03:f7:38:49:57:2a:c7:f6:08:88:39:73:
6b:ee:42:42:41:db:6f:f8:40:2a:48:8d:88:bc:2c:d7:54:6b:
f4:9e:74:13:59:fe:3d:53:e0:cc:18:cb:1c:bb:3e:72:e8:f4:
29:55:55:da:59:c6:87:76:ac:9b:a3:8c:28:e5:1e:53:61:74:
b7:46:9a:d4:ad:bc:20:71:1b:12:00:67:5e:2a:d4:d4:3f:aa:
7e:0a:9c:77:6a:25:81:8f:cf:6c:3e:cc:40:8d:03:9d:ba:51:
43:07:db:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIARPCGfusFNQcJSIo74wYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNGI4NTczY2EwZWJiNDc4ZTAwOGY3MGFmYTA4YWU1OGI3
ODY5YTUwHhcNMjQwMTAyMDIyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTViMDYwNzVkNjJlYzRmZDcxMWI3MmFmYzY3NzI3ODhiNDFmMGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6ucyNPdcQ8nrEZCpp+PZhwQ02Fu
s6psEQ5pL35Z6qXiyJs+/KDxXiU6QX6IWmA3vjCedJyIWIz8coPZUcKIIhNGQfQj
NaGl6fiwuYewyxWp7CV6/iVceDt8jOktJBA9Fr8OuQppT8QaBnE8ACVoRUFv1Wwa
Qd1vUzBnxfjAKXMuCudHQuuFiOfy4sdWcfmbmd8prn3Uyyc1DGr3fy/EDPVC7/WE
AIuQ3vnq+WWuDkWGPHOmJNcPmH2ogV6rK4Yz0NgWnpjAPJJVwn4Vlg1sIGSAsQ4/
/9Kc48L2mVMUGklF5a2VdXxUnkY/awCFeSrR8B6JmP9mekGcTjzHsDZaIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKFbBgddYuxP1xG3KvxncniLQfD6MB8GA1UdIwQY
MBaAFPxLhXPKDrtHjgCPcK+giuWLeGmlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0V1RmM4b091MGVPQUk5d3I2Q0s1WXQ0YWFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9lODkyYTEtY2I1ZC00MWQyLTkwNzgt
YTM5MDBmZjQ1NDUxLzEvb1ZzR0IxMWk3RV9YRWJjcV9HZHllSXRCOFBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9lODkyYTEtY2I1ZC00MWQyLTkwNzgtYTM5MDBmZjQ1NDUx
LzEvX0V1RmM4b091MGVPQUk5d3I2Q0s1WXQ0YWFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwpxUMA0G
CSqGSIb3DQEBCwUAA4IBAQCrMb1KdM2rK2U58qKyAsA7T8X67RCxkSMl7erVrUa3
Ix8hOe9YLIXSzF9BGnzrExG+yU+xB/aHmIep+TPvJds7wvg5BxFaw1eRtdn9v6mf
7lvJD2nSNKBTTY6SsXAOxbXsBf75luN6YqzrEOnOcXyH79kKqkQhYC2cyfLSyi7e
hwM8cmxXr5QRWF3LXGCGgGbBgS42SNQD9zhJVyrH9giIOXNr7kJCQdtv+EAqSI2I
vCzXVGv0nnQTWf49U+DMGMscuz5y6PQpVVXaWcaHdqybo4wo5R5TYXS3RprUrbwg
cRsSAGdeKtTUP6p+Cpx3aiWBj89sPsxAjQOdulFDB9s3
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:09:43 2024 by rpki-client on console-fra.rpki-client.org