Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/h0aF0_Qdh1BJQKufm8XZYseUheE.roa
File: h0aF0_Qdh1BJQKufm8XZYseUheE.roa (raw, json)
Hash identifier: MIr0+ek3v6yUqryvgvpeIXwrfBXD3lLYz0q+ImLm25g=
Subject key identifier: 87:46:85:D3:F4:1D:87:50:49:40:AB:9F:9B:C5:D9:62:C7:94:85:E1
Certificate issuer: /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial: 0192E694C1D8937AD7733600359AEB2052E3
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/h0aF0_Qdh1BJQKufm8XZYseUheE.roa
Signing time: Fri 01 Nov 2024 07:16:01 +0000
ROA not before: Fri 01 Nov 2024 07:16:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42971
IP address blocks: 31.44.248.0/23 maxlen: 23
31.44.248.0/24 maxlen: 24
31.44.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e6:94:c1:d8:93:7a:d7:73:36:00:35:9a:eb:20:52:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
Validity
Not Before: Nov 1 07:16:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=874685d3f41d87504940ab9f9bc5d962c79485e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:e8:f4:6a:7e:f8:f5:c7:9a:84:c7:57:1a:
7e:fc:93:4b:1d:18:7b:c1:3a:38:2d:1b:3f:8f:e0:
86:c2:7d:59:7a:cb:bc:44:27:8d:61:e0:e3:d2:c0:
8e:5f:cc:45:59:3a:8a:79:fb:f4:2a:4d:59:fb:23:
5f:02:08:47:7d:27:cc:24:38:02:af:69:3b:81:63:
ba:d9:6f:f6:3c:8f:1a:b0:02:45:f2:20:f4:03:d5:
a6:6d:9d:eb:5a:d3:a5:a6:e9:5a:bc:a6:e4:8f:b0:
4a:fa:6e:69:4d:a7:c1:01:ab:04:ef:ae:ee:a4:b5:
26:9b:c1:5b:30:e1:c9:94:20:41:e3:65:5e:a4:ed:
58:5f:46:28:e3:e2:77:a8:5b:ce:52:c9:34:33:0c:
2e:52:a2:12:9d:f5:30:c8:f6:91:5f:2b:b4:29:67:
70:be:8b:25:f2:f4:92:92:d0:ea:e1:9c:b3:f6:59:
5f:b8:b8:78:79:75:95:8d:ac:a3:58:23:c8:bb:b5:
63:9c:24:53:74:a7:fc:bb:e8:b6:d8:31:65:45:26:
55:4f:a0:bf:05:8f:8a:5c:f9:e5:f8:0f:5b:ec:50:
93:29:a9:dd:b3:f2:39:d9:0e:3d:c3:2f:17:35:d6:
22:26:d8:f9:ec:a8:52:54:d5:ab:2f:a4:f2:e7:66:
4f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:46:85:D3:F4:1D:87:50:49:40:AB:9F:9B:C5:D9:62:C7:94:85:E1
X509v3 Authority Key Identifier:
keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/h0aF0_Qdh1BJQKufm8XZYseUheE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.248.0/23
Signature Algorithm: sha256WithRSAEncryption
27:e1:bf:a9:52:b3:6c:fe:18:b4:8a:27:af:9b:27:41:02:2e:
00:de:c1:5a:a9:0b:94:af:0e:6d:ca:31:ad:d9:82:57:5a:a5:
dc:f4:f2:fb:61:a6:b1:63:b4:f7:aa:1d:b3:44:6a:4e:c0:72:
7e:81:1b:a5:84:70:f9:8b:45:3d:82:d9:81:5b:05:3f:5b:81:
e1:9f:06:cf:7e:4f:f0:7b:b4:91:40:df:71:69:e6:6c:cc:42:
f4:03:d6:f2:2f:5c:9e:9b:2a:6a:4e:3c:f4:55:b4:08:7b:3d:
4e:b3:0c:da:cb:bd:b8:73:03:25:ec:a3:c5:f7:84:e9:bb:2f:
4c:ce:44:d1:39:e1:6d:85:69:3c:04:a9:2d:bb:6b:7b:43:3a:
f3:5b:2c:56:96:f3:0d:32:02:c6:19:ae:b3:50:0e:82:7d:a0:
e3:fd:d1:33:69:85:1d:8c:77:59:8f:df:11:45:35:f9:72:1a:
a5:61:8b:10:3b:ee:5c:93:a4:a3:eb:fb:65:bb:62:09:f7:b7:
91:cb:08:24:1e:9e:0d:d0:30:19:6b:11:c5:ca:a6:d3:f9:ff:
7b:2c:a1:04:6c:df:62:8f:b6:8e:b3:50:07:24:e8:84:69:d4:
e8:25:02:1c:9b:c7:27:88:92:51:be:3b:8e:5b:27:63:ef:45:
6a:ea:e3:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZLmlMHYk3rXczYANZrrIFLjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOTU3MjdmMDdiNzU4Zjk4Njg0NzZjMTNjZjk3NzY1NGJm
MzgwZWUwHhcNMjQxMTAxMDcxNjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzQ2ODVkM2Y0MWQ4NzUwNDk0MGFiOWY5YmM1ZDk2MmM3OTQ4NWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6ro9Gp++PXHmoTHVxp+/JNLHRh7
wTo4LRs/j+CGwn1Zesu8RCeNYeDj0sCOX8xFWTqKefv0Kk1Z+yNfAghHfSfMJDgC
r2k7gWO62W/2PI8asAJF8iD0A9WmbZ3rWtOlpulavKbkj7BK+m5pTafBAasE767u
pLUmm8FbMOHJlCBB42VepO1YX0Yo4+J3qFvOUsk0MwwuUqISnfUwyPaRXyu0KWdw
vosl8vSSktDq4Zyz9llfuLh4eXWVjayjWCPIu7VjnCRTdKf8u+i22DFlRSZVT6C/
BY+KXPnl+A9b7FCTKands/I52Q49wy8XNdYiJtj57KhSVNWrL6Ty52ZPSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIdGhdP0HYdQSUCrn5vF2WLHlIXhMB8GA1UdIwQY
MBaAFAGVcn8Ht1j5hoR2wTz5d2VL84DuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVpWeWZ3ZTNXUG1HaEhiQlBQbDNaVXZ6Z080LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kZGVkOTUtY2I4Yy00MzM1LWFlZDAt
NjQ4MzhkZjM5NzdhLzEvaDBhRjBfUWRoMUJKUUt1Zm04WFpZc2VVaGVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9kZGVkOTUtY2I4Yy00MzM1LWFlZDAtNjQ4MzhkZjM5Nzdh
LzEvQVpWeWZ3ZTNXUG1HaEhiQlBQbDNaVXZ6Z080LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHyz4MA0G
CSqGSIb3DQEBCwUAA4IBAQAn4b+pUrNs/hi0iievmydBAi4A3sFaqQuUrw5tyjGt
2YJXWqXc9PL7YaaxY7T3qh2zRGpOwHJ+gRulhHD5i0U9gtmBWwU/W4HhnwbPfk/w
e7SRQN9xaeZszEL0A9byL1yemypqTjz0VbQIez1Oswzay724cwMl7KPF94Tpuy9M
zkTROeFthWk8BKktu2t7QzrzWyxWlvMNMgLGGa6zUA6CfaDj/dEzaYUdjHdZj98R
RTX5chqlYYsQO+5ck6Sj6/tlu2IJ97eRywgkHp4N0DAZaxHFyqbT+f97LKEEbN9i
j7aOs1AHJOiEadToJQIcm8cniJJRvjuOWydj70Vq6uOk
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:14:47 2024 by rpki-client on console-fra.rpki-client.org