Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6KjwOstLAaSj_hTU__D43dnXysE.roa
File: 6KjwOstLAaSj_hTU__D43dnXysE.roa (raw, json)
Hash identifier: n6+N6Xv+5FNTOsueKJfuuGc89fLV18j3r+BzYiUbERQ=
Subject key identifier: E8:A8:F0:3A:CB:4B:01:A4:A3:FE:14:D4:FF:F0:F8:DD:D9:D7:CA:C1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCF73ACFC8CD9AB2594B1C593D4B4D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6KjwOstLAaSj_hTU__D43dnXysE.roa
Signing time: Tue 02 Jan 2024 06:29:33 +0000
ROA not before: Tue 02 Jan 2024 06:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61437
IP address blocks: 31.13.232.0/24 maxlen: 24
31.13.233.0/24 maxlen: 24
31.13.232.0/22 maxlen: 22
31.13.235.0/24 maxlen: 24
31.13.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:f7:3a:cf:c8:cd:9a:b2:59:4b:1c:59:3d:4b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8a8f03acb4b01a4a3fe14d4fff0f8ddd9d7cac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:02:e2:c2:eb:21:83:2a:97:cb:51:45:9f:6e:
45:6b:0d:f9:26:95:c4:61:cf:82:de:f7:9a:89:5e:
fd:ca:e8:fc:7f:6d:f6:92:06:e4:ad:ef:86:fa:6e:
50:ed:76:5e:e4:5a:b0:86:2e:34:d0:f0:d1:c2:6c:
29:53:5b:09:66:c0:57:d8:55:e1:f3:18:db:a8:c9:
15:1e:3d:6a:09:7e:ed:92:64:e9:4b:f9:af:af:76:
d2:44:1e:e9:9d:63:ff:3e:91:e9:49:f9:dc:d1:07:
c6:0d:33:f0:d4:9a:92:88:5e:b2:46:72:87:96:77:
62:35:18:17:74:ba:3f:0d:20:1f:f2:4f:ff:be:8e:
dc:57:f3:b7:4c:99:0b:a0:40:94:3c:fb:08:d0:d6:
71:d7:70:16:ae:3e:53:b7:15:a5:8d:97:2a:0f:08:
5e:ed:82:d6:d3:bf:e8:11:db:34:18:69:bf:74:c7:
cf:f6:26:d0:2e:f6:04:77:18:df:ab:11:f8:d8:c7:
cc:58:5d:a2:00:62:c6:69:14:cd:75:e8:1b:26:66:
48:88:93:56:71:96:34:b7:a0:d8:06:47:22:aa:97:
d6:4f:c0:5b:9a:39:3a:d1:67:bd:3d:39:be:ea:6f:
c4:8d:87:f4:d5:91:8c:9b:bb:58:0e:db:dd:3e:3b:
c2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A8:F0:3A:CB:4B:01:A4:A3:FE:14:D4:FF:F0:F8:DD:D9:D7:CA:C1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6KjwOstLAaSj_hTU__D43dnXysE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.232.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:44:6f:b8:24:b7:7d:9f:d4:ba:62:ce:e3:42:0e:85:09:2a:
d9:29:e0:dc:e7:25:12:27:27:b2:18:aa:05:0d:20:ba:b0:8b:
8a:12:4c:65:e7:74:1f:5f:36:ec:41:60:be:84:62:82:f2:00:
79:b6:c3:f9:f9:44:e8:07:cb:50:9a:a4:5d:9c:91:a7:5d:7b:
c7:4f:80:60:f5:e5:4c:e3:81:60:1c:ae:a1:37:85:74:da:c8:
d3:93:59:e5:49:92:34:32:18:18:5f:ed:b4:63:a8:63:95:fe:
d1:9b:dc:b4:09:40:d9:e1:3c:f0:24:98:60:af:51:1c:ea:40:
81:ed:d9:22:10:cf:6c:36:5a:b8:11:ff:b6:a3:1e:7b:d8:33:
56:6a:26:7e:11:20:92:11:6c:05:8c:67:46:01:10:2b:e2:f2:
ef:09:ff:50:8a:0c:a5:96:fb:e6:bc:c8:63:3c:4e:80:54:84:
14:25:33:26:17:03:86:53:a1:7c:f4:f3:88:2b:9b:fd:f8:23:
9a:11:d0:99:f3:63:c7:51:62:c8:b4:f3:eb:41:32:e8:d2:d9:
b3:57:81:e0:00:19:59:9b:6f:d8:08:94:fe:5f:ae:6d:72:18:
8c:ca:8e:5b:34:4a:3d:57:c1:f8:85:7e:d6:ca:e2:5f:19:5f:
36:ed:e6:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3Pc6z8jNmrJZSxxZPUtNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTAyMDYyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGE4ZjAzYWNiNGIwMWE0YTNmZTE0ZDRmZmYwZjhkZGQ5ZDdjYWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgLiwushgyqXy1FFn25Faw35JpXE
Yc+C3veaiV79yuj8f232kgbkre+G+m5Q7XZe5Fqwhi400PDRwmwpU1sJZsBX2FXh
8xjbqMkVHj1qCX7tkmTpS/mvr3bSRB7pnWP/PpHpSfnc0QfGDTPw1JqSiF6yRnKH
lndiNRgXdLo/DSAf8k//vo7cV/O3TJkLoECUPPsI0NZx13AWrj5TtxWljZcqDwhe
7YLW07/oEds0GGm/dMfP9ibQLvYEdxjfqxH42MfMWF2iAGLGaRTNdegbJmZIiJNW
cZY0t6DYBkciqpfWT8Bbmjk60We9PTm+6m/EjYf01ZGMm7tYDtvdPjvCEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOio8DrLSwGko/4U1P/w+N3Z18rBMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvNktqd09zdExBYVNqX2hUVV9fRDQzZG5YeXNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCHw3oMA0G
CSqGSIb3DQEBCwUAA4IBAQBeRG+4JLd9n9S6Ys7jQg6FCSrZKeDc5yUSJyeyGKoF
DSC6sIuKEkxl53QfXzbsQWC+hGKC8gB5tsP5+UToB8tQmqRdnJGnXXvHT4Bg9eVM
44FgHK6hN4V02sjTk1nlSZI0MhgYX+20Y6hjlf7Rm9y0CUDZ4TzwJJhgr1Ec6kCB
7dkiEM9sNlq4Ef+2ox572DNWaiZ+ESCSEWwFjGdGARAr4vLvCf9QigyllvvmvMhj
PE6AVIQUJTMmFwOGU6F89POIK5v9+COaEdCZ82PHUWLItPPrQTLo0tmzV4HgABlZ
m2/YCJT+X65tchiMyo5bNEo9V8H4hX7WyuJfGV827eb8
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:28:44 2024 by rpki-client on console-ams.rpki-client.org