Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/BMAXZlHZxI-uH9olLUnOb_RwOVw.roa
File: BMAXZlHZxI-uH9olLUnOb_RwOVw.roa (raw, json)
Hash identifier: bh3WIRfGGamusnp7dM5Kd33nh5F3n2SdBED6ZCn/+AE=
Subject key identifier: 04:C0:17:66:51:D9:C4:8F:AE:1F:DA:25:2D:49:CE:6F:F4:70:39:5C
Certificate issuer: /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial: 019423D6B0AFD9C35C374E98B93E595F5AEB
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/BMAXZlHZxI-uH9olLUnOb_RwOVw.roa
Signing time: Wed 01 Jan 2025 21:47:39 +0000
ROA not before: Wed 01 Jan 2025 21:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42971
IP address blocks: 31.44.248.0/23 maxlen: 23
31.44.248.0/24 maxlen: 24
31.44.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b0:af:d9:c3:5c:37:4e:98:b9:3e:59:5f:5a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
Validity
Not Before: Jan 1 21:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04c0176651d9c48fae1fda252d49ce6ff470395c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:e4:90:5e:37:15:62:cc:99:d4:32:16:82:
50:4a:3e:c0:07:09:73:4f:5e:42:83:95:31:5b:29:
51:ef:5c:72:b5:31:14:8d:68:2f:95:b2:c5:17:c6:
f6:c6:93:e2:86:27:04:d9:65:59:51:c4:af:a5:a8:
a9:06:31:d4:f8:e6:c9:74:5e:8e:5d:83:22:e9:63:
a0:ab:b9:04:5b:59:a6:f0:8e:d3:3e:cd:0c:96:93:
c2:72:30:14:4a:9c:26:2a:f0:2a:b3:ae:0f:a1:d8:
39:17:04:0b:95:35:7a:6c:a4:4a:d4:b6:4e:8d:fc:
c6:69:fa:85:30:c3:ec:4e:bb:d8:a1:73:9c:7f:24:
9b:52:f3:80:f3:a6:65:a1:dd:b3:2e:8e:78:0e:66:
78:a4:2f:ec:8a:b7:d6:23:7d:5a:cd:00:ca:b5:ca:
e6:2d:e2:a1:50:b8:45:d9:59:4c:56:20:61:e1:d4:
b5:da:fa:1e:5b:e5:ec:f8:7b:57:7f:95:fc:96:33:
31:a5:ee:68:f1:24:ac:4c:51:ef:54:a3:e7:a9:1f:
e5:b1:7b:2e:a8:a7:9c:46:99:d0:d0:8b:f4:0b:0a:
6f:0a:b7:1b:db:6b:a9:2b:e9:47:35:9f:30:06:b7:
9a:26:0c:e4:21:67:4d:8a:e1:41:a5:bc:69:37:cf:
a9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C0:17:66:51:D9:C4:8F:AE:1F:DA:25:2D:49:CE:6F:F4:70:39:5C
X509v3 Authority Key Identifier:
keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/BMAXZlHZxI-uH9olLUnOb_RwOVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.248.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:b6:54:ec:1f:b1:b0:83:c3:18:a7:ba:2c:66:f1:6a:84:af:
82:4d:55:18:92:b9:94:74:db:ed:b0:40:b9:80:3b:b9:cd:2e:
8b:55:5d:98:bb:eb:43:0b:c9:06:e8:39:6e:6a:fb:2f:4e:dc:
85:8b:d2:23:e2:79:88:1b:d3:ca:0c:6a:d2:fb:0a:fa:4e:f9:
db:2c:45:00:3f:bf:64:07:b3:72:12:a1:46:09:d1:d5:d0:a6:
3a:27:b5:03:1d:56:88:64:ae:a4:92:ad:5d:36:a5:4c:44:b5:
bf:30:0e:d1:bf:ed:d4:75:79:d3:ab:d5:fe:40:9a:7f:81:f8:
8b:0d:da:bf:ed:40:17:b6:44:65:42:06:b1:52:4e:76:56:bc:
e2:14:3b:03:21:89:99:9d:51:5e:99:26:78:04:fa:32:c2:b5:
a1:1e:e1:f9:95:eb:a0:a2:7d:77:c9:aa:49:9c:d5:fb:7b:79:
15:6a:e7:5a:2c:06:72:8c:34:d0:e9:bb:f9:f5:6f:73:bb:e5:
a7:91:a9:90:a0:92:b0:b1:a3:cd:af:2c:2a:1e:c4:3b:dd:de:
5c:ea:7c:0a:a4:15:6d:e5:bc:e2:43:39:e5:25:36:d3:c8:76:
eb:85:1a:40:dc:b9:62:53:48:50:40:3e:da:a5:c7:bf:89:6e:
c1:9e:f1:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1rCv2cNcN06YuT5ZX1rrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOTU3MjdmMDdiNzU4Zjk4Njg0NzZjMTNjZjk3NzY1NGJm
MzgwZWUwHhcNMjUwMTAxMjE0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGMwMTc2NjUxZDljNDhmYWUxZmRhMjUyZDQ5Y2U2ZmY0NzAzOTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzDkkF43FWLMmdQyFoJQSj7ABwlz
T15Cg5UxWylR71xytTEUjWgvlbLFF8b2xpPihicE2WVZUcSvpaipBjHU+ObJdF6O
XYMi6WOgq7kEW1mm8I7TPs0MlpPCcjAUSpwmKvAqs64Podg5FwQLlTV6bKRK1LZO
jfzGafqFMMPsTrvYoXOcfySbUvOA86Zlod2zLo54DmZ4pC/sirfWI31azQDKtcrm
LeKhULhF2VlMViBh4dS12voeW+Xs+HtXf5X8ljMxpe5o8SSsTFHvVKPnqR/lsXsu
qKecRpnQ0Iv0CwpvCrcb22upK+lHNZ8wBreaJgzkIWdNiuFBpbxpN8+plwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFATAF2ZR2cSPrh/aJS1Jzm/0cDlcMB8GA1UdIwQY
MBaAFAGVcn8Ht1j5hoR2wTz5d2VL84DuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVpWeWZ3ZTNXUG1HaEhiQlBQbDNaVXZ6Z080LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kZGVkOTUtY2I4Yy00MzM1LWFlZDAt
NjQ4MzhkZjM5NzdhLzEvQk1BWFpsSFp4SS11SDlvbExVbk9iX1J3T1Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9kZGVkOTUtY2I4Yy00MzM1LWFlZDAtNjQ4MzhkZjM5Nzdh
LzEvQVpWeWZ3ZTNXUG1HaEhiQlBQbDNaVXZ6Z080LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHyz4MA0G
CSqGSIb3DQEBCwUAA4IBAQC3tlTsH7Gwg8MYp7osZvFqhK+CTVUYkrmUdNvtsEC5
gDu5zS6LVV2Yu+tDC8kG6DluavsvTtyFi9Ij4nmIG9PKDGrS+wr6TvnbLEUAP79k
B7NyEqFGCdHV0KY6J7UDHVaIZK6kkq1dNqVMRLW/MA7Rv+3UdXnTq9X+QJp/gfiL
Ddq/7UAXtkRlQgaxUk52VrziFDsDIYmZnVFemSZ4BPoywrWhHuH5leugon13yapJ
nNX7e3kVaudaLAZyjDTQ6bv59W9zu+WnkamQoJKwsaPNrywqHsQ73d5c6nwKpBVt
5bziQznlJTbTyHbrhRpA3LliU0hQQD7apce/iW7BnvE1
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:57:15 2025 by rpki-client