Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/1pifBgAI9K4y1isrFQGusq0kpi8.roa
File: 1pifBgAI9K4y1isrFQGusq0kpi8.roa (raw, json)
Hash identifier: +5BFO38ldTKc0my5rUtjTluFp4yr8blPCBCxl3FbLFY=
Subject key identifier: D6:98:9F:06:00:08:F4:AE:32:D6:2B:2B:15:01:AE:B2:AD:24:A6:2F
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018CC3B6DDF6DF67ED9E8D6B5DC7770D8C66
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/1pifBgAI9K4y1isrFQGusq0kpi8.roa
Signing time: Mon 01 Jan 2024 06:29:50 +0000
ROA not before: Mon 01 Jan 2024 06:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 81.31.244.0/24 maxlen: 24
81.31.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:dd:f6:df:67:ed:9e:8d:6b:5d:c7:77:0d:8c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jan 1 06:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6989f060008f4ae32d62b2b1501aeb2ad24a62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:ed:27:38:3c:29:f2:98:f7:f0:e2:d6:4f:
19:f9:63:c2:e0:6f:4c:c5:0b:61:61:4b:3f:be:76:
5d:c0:46:79:d3:11:b9:7a:51:17:43:6b:45:7c:f0:
37:e8:68:8e:01:ce:62:9d:c5:76:78:f3:27:d7:db:
35:29:b8:51:b7:72:c9:a1:5b:7a:5e:8e:a5:a9:8b:
e6:5b:3f:d6:34:15:f0:98:ba:d8:a5:6d:b7:be:56:
be:91:8f:6e:71:2b:40:10:02:d5:1c:85:52:5b:13:
cd:5a:85:46:77:5f:62:91:34:70:6e:df:0d:86:a4:
0e:eb:d3:88:cc:4f:a0:cc:90:7c:35:6b:d1:05:37:
10:f2:b1:94:06:bc:5c:bc:04:e4:1f:85:dd:8d:48:
f3:a8:c0:5f:a9:c5:3f:3f:66:72:b6:17:50:b4:e7:
61:0b:1e:c7:e9:a3:37:ab:10:9e:bc:61:a8:0b:e7:
4f:12:98:8b:60:b1:c3:05:78:86:47:61:37:d9:68:
dc:98:91:61:ad:17:f4:e4:0b:be:70:78:51:0d:cd:
b3:dc:99:8c:63:6a:47:8c:ae:f7:da:ad:ef:cc:1a:
e6:68:c1:99:9f:ec:44:a3:92:f2:db:80:15:e5:a9:
1b:0d:68:14:cb:93:80:29:a7:19:17:bc:49:cc:dd:
04:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:98:9F:06:00:08:F4:AE:32:D6:2B:2B:15:01:AE:B2:AD:24:A6:2F
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/1pifBgAI9K4y1isrFQGusq0kpi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.244.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:a9:bd:e4:42:35:33:e5:06:e7:a6:ef:d5:e6:49:3f:da:93:
1a:4d:de:f4:45:95:c2:9f:ed:25:55:74:fb:41:4f:42:72:68:
4d:f6:42:76:49:ac:e2:b5:26:01:17:16:9e:2c:ea:fe:98:2a:
51:83:b4:4c:8e:02:80:62:e8:03:c4:b4:8b:75:9c:9a:65:2c:
07:1d:7b:7c:12:1b:0d:04:e8:2f:ab:d8:0d:95:11:e8:28:01:
4e:7e:73:c1:2b:cc:c3:f9:57:88:a6:95:98:33:1c:35:b2:c3:
33:44:46:70:5a:87:a8:fe:5c:8f:72:6e:be:3b:c8:57:fe:37:
5e:2d:39:1a:50:b9:20:34:39:17:46:0d:bc:cd:3f:43:87:83:
2e:df:15:49:d9:3b:41:69:bb:f8:f3:00:b9:67:29:8b:12:c4:
16:fa:c2:ed:bd:fa:6f:ec:d0:bb:2f:a3:9d:b5:c9:e3:61:b8:
94:9c:36:11:a3:98:76:14:a0:f2:2f:69:77:33:05:37:ea:b2:
bb:4f:20:92:4b:4f:4e:69:34:cc:da:ff:b2:4b:4f:e6:17:54:
02:49:02:1c:45:41:b8:b0:3b:39:09:74:d0:98:15:86:d5:36:
5a:10:89:11:47:79:8a:9a:c4:2f:de:85:f2:6a:53:0e:e8:8a:
4a:3d:a5:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtt3232ftno1rXcd3DYxmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy
YjE4MWIwHhcNMjQwMTAxMDYyOTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjk4OWYwNjAwMDhmNGFlMzJkNjJiMmIxNTAxYWViMmFkMjRhNjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+vtJzg8KfKY9/Di1k8Z+WPC4G9M
xQthYUs/vnZdwEZ50xG5elEXQ2tFfPA36GiOAc5incV2ePMn19s1KbhRt3LJoVt6
Xo6lqYvmWz/WNBXwmLrYpW23vla+kY9ucStAEALVHIVSWxPNWoVGd19ikTRwbt8N
hqQO69OIzE+gzJB8NWvRBTcQ8rGUBrxcvATkH4XdjUjzqMBfqcU/P2ZythdQtOdh
Cx7H6aM3qxCevGGoC+dPEpiLYLHDBXiGR2E32WjcmJFhrRf05Au+cHhRDc2z3JmM
Y2pHjK732q3vzBrmaMGZn+xEo5Ly24AV5akbDWgUy5OAKacZF7xJzN0EywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNaYnwYACPSuMtYrKxUBrrKtJKYvMB8GA1UdIwQY
MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct
YWE4NTllMTkyYjE2LzEvMXBpZkJnQUk5SzR5MWlzckZRR3VzcTBrcGk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2
LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUR/0MA0G
CSqGSIb3DQEBCwUAA4IBAQBOqb3kQjUz5Qbnpu/V5kk/2pMaTd70RZXCn+0lVXT7
QU9CcmhN9kJ2SazitSYBFxaeLOr+mCpRg7RMjgKAYugDxLSLdZyaZSwHHXt8EhsN
BOgvq9gNlRHoKAFOfnPBK8zD+VeIppWYMxw1ssMzREZwWoeo/lyPcm6+O8hX/jde
LTkaULkgNDkXRg28zT9Dh4Mu3xVJ2TtBabv48wC5ZymLEsQW+sLtvfpv7NC7L6Od
tcnjYbiUnDYRo5h2FKDyL2l3MwU36rK7TyCSS09OaTTM2v+yS0/mF1QCSQIcRUG4
sDs5CXTQmBWG1TZaEIkRR3mKmsQv3oXyalMO6IpKPaXd
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:15:55 2024 by rpki-client on console-ams.rpki-client.org