Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/Me0Qaf4OUkGkhpRwkAYOymGfDy8.roa
File: Me0Qaf4OUkGkhpRwkAYOymGfDy8.roa (raw, json)
Hash identifier: 6SZWqxwoubplppZ7pAyS5cQ9xxhJUfvJxFhilZiYb88=
Subject key identifier: 31:ED:10:69:FE:0E:52:41:A4:86:94:70:90:06:0E:CA:61:9F:0F:2F
Certificate issuer: /CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Certificate serial: 0191E1E99A9E5555FA390877792CC731EDE5
Authority key identifier: B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/Me0Qaf4OUkGkhpRwkAYOymGfDy8.roa
Signing time: Wed 11 Sep 2024 16:27:48 +0000
ROA not before: Wed 11 Sep 2024 16:27:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198425
IP address blocks: 194.31.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:e9:9a:9e:55:55:fa:39:08:77:79:2c:c7:31:ed:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Validity
Not Before: Sep 11 16:27:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31ed1069fe0e5241a486947090060eca619f0f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8e:f2:50:ab:a9:19:bf:1b:d4:30:1a:c6:86:
f1:6d:51:8b:43:cf:20:70:a7:dc:fd:5a:ab:6e:3c:
7d:33:fa:74:db:97:0e:64:7e:cb:d6:d0:cf:d4:7b:
72:ac:0d:2b:cd:34:41:7c:e4:b4:ac:c3:20:80:c3:
ae:8e:8d:72:ca:06:ba:2f:b0:10:69:71:ba:49:d1:
d3:29:eb:29:a2:4d:b2:13:6d:f5:f2:28:23:48:f7:
8d:98:a3:fd:f1:96:a8:c5:46:6a:de:d2:4d:61:a5:
f0:db:0f:24:1d:2a:09:cd:3d:4c:21:c5:fb:2a:c2:
ba:5f:4b:1f:46:8a:f5:6e:f6:bc:81:81:01:e1:a7:
1c:16:77:07:4b:37:1e:0e:df:a0:ab:38:c2:32:14:
c6:88:56:8b:f8:8a:13:f1:c2:a7:b7:d6:80:19:c5:
ac:aa:82:0e:00:b1:d2:de:b8:30:78:47:f8:51:f7:
02:1f:9f:45:39:03:8a:d6:de:1b:52:75:78:9c:27:
d4:52:1c:31:75:39:f5:9c:f6:db:3b:ec:b5:d7:63:
0c:6a:6b:83:55:89:7f:87:3c:d7:36:4a:cc:ca:14:
6b:b0:57:ac:3f:68:2d:4a:d0:2f:33:2b:29:9c:7d:
bf:67:16:f4:b9:a3:83:25:eb:cb:7b:30:eb:9a:f9:
b6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:ED:10:69:FE:0E:52:41:A4:86:94:70:90:06:0E:CA:61:9F:0F:2F
X509v3 Authority Key Identifier:
keyid:B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/Me0Qaf4OUkGkhpRwkAYOymGfDy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.58.0/24
Signature Algorithm: sha256WithRSAEncryption
78:78:97:7f:8b:d0:d9:20:c9:55:c6:4b:b2:96:55:b2:90:c9:
78:fa:49:7b:00:8f:05:a5:5b:39:53:13:9c:97:5d:ed:fa:c7:
ab:19:4b:b0:02:97:31:cc:31:fe:89:a0:d9:31:6c:f1:74:e2:
0e:c7:53:8f:bf:c4:a3:81:de:e3:c6:8c:21:84:2a:ef:9e:da:
29:c6:ea:8b:10:94:77:45:17:df:e4:a9:b8:fb:9b:4b:fb:01:
7d:c9:c5:36:54:76:a4:14:24:98:89:d4:48:b9:94:f2:8c:2a:
39:c5:80:66:12:be:5e:4c:e6:16:74:14:30:67:f4:3e:de:72:
ef:8e:5a:23:5b:dd:72:07:36:2b:a8:0d:89:e2:70:dc:69:9d:
8e:00:5a:6e:d6:fb:38:d9:06:a6:11:e9:4c:82:34:8f:df:d9:
36:d7:b2:5c:d4:54:de:53:78:87:36:93:79:43:68:ba:c2:22:
19:9a:7c:b4:26:4e:4f:0c:ad:69:1f:77:94:a3:12:84:86:24:
51:0f:7e:43:98:e9:8a:a6:18:99:e6:80:a8:12:65:7a:ce:28:
3f:3a:fe:31:23:1b:af:98:99:8c:eb:44:c6:2d:3e:f3:e6:ae:
71:7b:c0:33:78:54:6b:a6:cf:eb:92:ff:5c:14:1d:07:a4:6d:
63:51:73:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZHh6ZqeVVX6OQh3eSzHMe3lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2Njc3OWYyMDU1YjI1NGY1ZDViMzI5MmVlYWYwZGQ1Nzk3
NzM3YTYwHhcNMjQwOTExMTYyNzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWVkMTA2OWZlMGU1MjQxYTQ4Njk0NzA5MDA2MGVjYTYxOWYwZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY7yUKupGb8b1DAaxobxbVGLQ88g
cKfc/Vqrbjx9M/p025cOZH7L1tDP1HtyrA0rzTRBfOS0rMMggMOujo1yyga6L7AQ
aXG6SdHTKespok2yE2318igjSPeNmKP98ZaoxUZq3tJNYaXw2w8kHSoJzT1MIcX7
KsK6X0sfRor1bva8gYEB4accFncHSzceDt+gqzjCMhTGiFaL+IoT8cKnt9aAGcWs
qoIOALHS3rgweEf4UfcCH59FOQOK1t4bUnV4nCfUUhwxdTn1nPbbO+y112MMamuD
VYl/hzzXNkrMyhRrsFesP2gtStAvMyspnH2/Zxb0uaODJevLezDrmvm2jQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDHtEGn+DlJBpIaUcJAGDsphnw8vMB8GA1UdIwQY
MBaAFLZnefIFWyVPXVsyku6vDdV5dzemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG1kNThnVmJKVTlkV3pLUzdxOE4xWGwzTjZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xZjgyZTUtMzA5OC00NTNhLWFmNjQt
Y2FiNzE3YTgwOWU3LzEvTWUwUWFmNE9Va0draHBSd2tBWU95bUdmRHk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8xZjgyZTUtMzA5OC00NTNhLWFmNjQtY2FiNzE3YTgwOWU3
LzEvdG1kNThnVmJKVTlkV3pLUzdxOE4xWGwzTjZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh86MA0G
CSqGSIb3DQEBCwUAA4IBAQB4eJd/i9DZIMlVxkuyllWykMl4+kl7AI8FpVs5UxOc
l13t+serGUuwApcxzDH+iaDZMWzxdOIOx1OPv8Sjgd7jxowhhCrvntopxuqLEJR3
RRff5Km4+5tL+wF9ycU2VHakFCSYidRIuZTyjCo5xYBmEr5eTOYWdBQwZ/Q+3nLv
jlojW91yBzYrqA2J4nDcaZ2OAFpu1vs42QamEelMgjSP39k217Jc1FTeU3iHNpN5
Q2i6wiIZmny0Jk5PDK1pH3eUoxKEhiRRD35DmOmKphiZ5oCoEmV6zig/Ov4xIxuv
mJmM60TGLT7z5q5xe8AzeFRrps/rkv9cFB0HpG1jUXO7
-----END CERTIFICATE-----
Generated at Sat Sep 28 15:56:05 2024 by rpki-client on console-fra.rpki-client.org